This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json) Hash identifier: UDiVYzh+0YtOabyRJw3LLe8d0tSDFnuqInJTUN6lV8A= Subject key identifier: 27:85:B2:B8:5D:7B:0C:CC:15:90:A4:E5:0B:7B:B8:13:73:9B:1C:C5 Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155 Certificate serial: 019C4690E0C1C18148938D2E49E8A1F63F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft Manifest number: 1812 Signing time: Tue 10 Feb 2026 08:00:25 +0000 Manifest this update: Tue 10 Feb 2026 08:00:25 +0000 Manifest next update: Wed 11 Feb 2026 08:00:25 +0000 Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: G+rfACI4NW9gHav1ccV9+Xm8tP6P3n1vmkjV+XMU1V4=) 2: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:46:90:e0:c1:c1:81:48:93:8d:2e:49:e8:a1:f6:3f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340551ace81314829351a27e399aeddb33246155 Validity Not Before: Feb 10 08:00:25 2026 GMT Not After : Feb 11 08:00:25 2026 GMT Subject: CN=2785b2b85d7b0ccc1590a4e50b7bb813739b1cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:5f:ef:38:c6:c4:5f:36:6b:a1:8f:58:a5: be:91:80:45:c7:5e:65:f5:64:7d:ce:06:f2:c2:c6: 33:90:a0:c8:22:4c:94:aa:a3:d1:e2:29:5e:29:1d: 8c:d9:9f:98:60:d9:02:eb:9c:22:85:58:d9:8c:e4: a0:a9:f8:63:1f:6f:c3:24:d2:17:9a:00:88:26:4b: fc:45:c6:89:df:88:85:95:a8:5c:30:b1:16:44:a2: a2:b4:d5:26:89:30:1b:b7:a3:d6:78:16:a5:63:44: 3a:29:05:4c:e1:67:c1:db:a6:95:d2:ec:97:88:78: 63:5d:2b:22:66:69:4f:92:5c:cd:c9:81:72:f2:59: 86:70:ea:c5:ed:5c:e4:95:ee:52:99:b8:5f:bb:f3: c2:8f:df:89:9e:95:8e:09:f2:fb:1c:0b:c7:9d:ad: c9:94:89:02:53:4b:ef:a3:84:dc:2d:79:69:59:d8: af:db:05:ea:33:3e:53:af:77:59:2b:8c:71:4b:d8: f2:9c:2b:45:70:84:34:3f:85:0d:42:1c:70:c8:22: a0:41:72:fe:44:13:7a:8f:42:80:36:fb:4a:e4:3c: 3b:f4:52:6f:8a:30:11:bf:23:73:44:ec:57:db:58: 68:e4:f3:12:49:a5:2f:b3:0f:2a:36:12:d4:e5:f8: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:B2:B8:5D:7B:0C:CC:15:90:A4:E5:0B:7B:B8:13:73:9B:1C:C5 X509v3 Authority Key Identifier: keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8b:c8:7a:37:cc:54:aa:4c:83:12:05:5f:87:1f:46:fc:39: f4:2b:54:82:17:de:d4:1d:de:65:02:d2:12:40:70:18:8d:04: be:60:d6:9a:ff:b4:67:4d:6b:28:58:26:f8:86:78:b2:bd:69: b7:18:a8:4b:41:2e:77:1e:4c:7f:75:7c:da:92:8c:0b:ee:37: 3f:a2:be:18:a1:81:2e:79:b8:b7:76:f8:c6:36:76:c0:ec:a9: b0:5f:07:75:6c:8e:6a:70:24:22:5f:8c:ef:76:bf:0d:77:94: d3:c2:ae:5e:5d:93:86:20:90:e2:5b:da:73:82:ad:d5:8b:66: 65:87:4a:c0:b3:39:e0:4e:8f:2a:4e:4a:4b:4e:33:eb:0d:14: 49:8c:f3:3e:49:c2:53:5b:bc:b6:42:c4:78:2c:9e:7b:27:5d: 24:fe:5f:58:1b:17:15:13:b1:78:9d:6d:90:f2:f3:a1:4b:2f: 6c:ca:39:e0:b1:a6:b0:9f:bf:3b:b4:40:4f:f9:8f:61:59:25: f3:ee:fd:01:be:b2:21:ab:af:18:cb:d9:12:58:ad:de:fa:ba: b2:d3:1b:9c:e2:5b:7b:85:ad:e9:12:cc:90:42:cf:61:1b:47: f0:46:e0:6a:95:0a:97:59:d2:87:54:f8:c7:80:24:fe:b1:ef: 09:d8:35:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxGkODBwYFIk40uSeih9j9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy NDYxNTUwHhcNMjYwMjEwMDgwMDI1WhcNMjYwMjExMDgwMDI1WjAzMTEwLwYDVQQD EygyNzg1YjJiODVkN2IwY2NjMTU5MGE0ZTUwYjdiYjgxMzczOWIxY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhf7zjGxF82a6GPWKW+kYBFx15l 9WR9zgbywsYzkKDIIkyUqqPR4ileKR2M2Z+YYNkC65wihVjZjOSgqfhjH2/DJNIX mgCIJkv8RcaJ34iFlahcMLEWRKKitNUmiTAbt6PWeBalY0Q6KQVM4WfB26aV0uyX iHhjXSsiZmlPklzNyYFy8lmGcOrF7Vzkle5Smbhfu/PCj9+JnpWOCfL7HAvHna3J lIkCU0vvo4TcLXlpWdiv2wXqMz5Tr3dZK4xxS9jynCtFcIQ0P4UNQhxwyCKgQXL+ RBN6j0KANvtK5Dw79FJvijARvyNzROxX21ho5PMSSaUvsw8qNhLU5fgvvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeFsrhdewzMFZCk5Qt7uBNzmxzFMB8GA1UdIwQY MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYvIejfM VKpMgxIFX4cfRvw59CtUghfe1B3eZQLSEkBwGI0EvmDWmv+0Z01rKFgm+IZ4sr1p txioS0Eudx5Mf3V82pKMC+43P6K+GKGBLnm4t3b4xjZ2wOypsF8HdWyOanAkIl+M 73a/DXeU08KuXl2ThiCQ4lvac4Kt1YtmZYdKwLM54E6PKk5KS04z6w0USYzzPknC U1u8tkLEeCyeeyddJP5fWBsXFROxeJ1tkPLzoUsvbMo54LGmsJ+/O7RAT/mPYVkl 8+79Ab6yIauvGMvZElit3vq6stMbnOJbe4Wt6RLMkELPYRtH8EbgapUKl1nSh1T4 x4Ak/rHvCdg1fw== -----END CERTIFICATE-----Generated at Tue Feb 10 10:13:34 2026 by rpki-client