This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json) Hash identifier: +zEvXU+leYP9xaSlZGaIFiFM8S+l8hBV/y+UyTx1v64= Subject key identifier: B7:60:CA:32:05:D0:67:5C:99:A0:C9:87:12:7F:08:03:CF:91:05:E2 Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155 Certificate serial: 019B5B9B30A7A8F3301EF38B3FBE6C369390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 17:00:55 +0000 Manifest this update: Fri 26 Dec 2025 17:00:55 +0000 Manifest next update: Sat 27 Dec 2025 17:00:55 +0000 Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: gxgDh5HdDi4SPJm9FIA2KGgv+3tb/cRQCeTVvw5tkLs=) 2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:30:a7:a8:f3:30:1e:f3:8b:3f:be:6c:36:93:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340551ace81314829351a27e399aeddb33246155 Validity Not Before: Dec 26 17:00:55 2025 GMT Not After : Dec 27 17:00:55 2025 GMT Subject: CN=b760ca3205d0675c99a0c987127f0803cf9105e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:19:46:6d:a1:52:eb:5b:3d:86:bd:dc:4a: a0:5d:65:1e:96:81:d8:a2:65:4b:7a:32:98:90:d4: dd:30:3c:c5:9c:51:0b:61:4c:da:50:dc:10:15:2f: 7a:2f:28:ff:f8:da:4d:24:26:d6:12:b5:71:06:f3: a4:40:b0:1f:62:be:f2:62:3f:0a:38:34:a4:1d:8c: 99:eb:0c:a9:fc:73:c2:68:32:09:d2:22:6a:c9:7b: 9a:91:ab:f4:ef:99:a3:ca:d5:35:9d:4e:80:4b:cf: 85:e8:85:c9:93:2e:92:3c:dc:87:19:20:c1:24:6c: fd:47:96:5a:56:f5:57:4b:e9:bc:45:78:57:7d:8d: 72:b8:85:00:63:33:8f:70:30:8d:79:53:e9:54:11: 60:73:5d:7f:f2:62:c6:d5:d2:92:db:30:e1:a1:10: 10:f3:ab:29:04:8a:a9:00:45:ac:f3:46:34:6f:c9: 9d:ea:32:22:98:53:89:aa:43:14:b7:7c:67:f4:49: 2b:60:1e:54:87:d2:a1:fd:e0:6e:41:ff:24:ea:f1: 26:b7:b4:c6:fe:30:46:4d:b2:70:ac:49:cc:a1:c2: 2c:50:cd:15:5c:88:6f:22:08:62:1f:ed:97:c1:ee: d8:b4:bd:d4:00:d2:7e:9f:dd:8a:a4:4f:6b:0e:47: cf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:60:CA:32:05:D0:67:5C:99:A0:C9:87:12:7F:08:03:CF:91:05:E2 X509v3 Authority Key Identifier: keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1f:0d:89:7b:7c:af:e4:8d:c3:7a:35:29:e5:8f:06:75:82: 96:13:7d:9b:ae:d9:d6:21:0f:c4:2b:cc:da:25:2a:73:0e:53: fc:ab:6e:a7:ec:78:5f:f3:e3:c7:59:08:bd:16:d3:e7:69:22: a7:77:60:50:72:b9:9a:95:71:5e:de:54:8a:76:e5:bf:21:3c: 89:1e:53:86:fb:84:6e:4f:45:dc:c0:5c:32:22:38:38:e2:8e: a1:d4:84:05:61:a4:c7:6d:57:38:36:4f:02:2a:e8:a1:c3:8e: e3:51:bb:38:d9:99:fb:4a:1a:4b:42:e4:1c:05:99:e0:d1:6c: 73:a4:59:08:1a:84:eb:c0:59:10:f3:ea:22:0e:9f:8f:16:98: 00:41:e1:63:ce:cb:52:c6:48:e7:8e:98:8c:d3:bd:8a:7f:6e: 89:9a:95:4c:48:1f:8d:e5:cd:66:3b:09:c8:84:9f:90:0b:d8: 5b:ca:2d:b5:1f:0d:bf:d1:88:36:ff:11:1a:ba:b3:3c:db:40: fb:64:e3:93:b8:32:ef:13:00:aa:33:34:12:a0:44:c3:52:53: c7:8c:b9:e3:fd:90:79:c5:16:38:b2:77:07:aa:04:17:14:39: 45:6f:c9:3e:f3:f0:ec:2d:3c:c0:be:ce:2c:4d:9d:bd:91:00: ce:fe:e6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbmzCnqPMwHvOLP75sNpOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy NDYxNTUwHhcNMjUxMjI2MTcwMDU1WhcNMjUxMjI3MTcwMDU1WjAzMTEwLwYDVQQD EyhiNzYwY2EzMjA1ZDA2NzVjOTlhMGM5ODcxMjdmMDgwM2NmOTEwNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLkZRm2hUutbPYa93EqgXWUeloHY omVLejKYkNTdMDzFnFELYUzaUNwQFS96Lyj/+NpNJCbWErVxBvOkQLAfYr7yYj8K ODSkHYyZ6wyp/HPCaDIJ0iJqyXuakav075mjytU1nU6AS8+F6IXJky6SPNyHGSDB JGz9R5ZaVvVXS+m8RXhXfY1yuIUAYzOPcDCNeVPpVBFgc11/8mLG1dKS2zDhoRAQ 86spBIqpAEWs80Y0b8md6jIimFOJqkMUt3xn9EkrYB5Uh9Kh/eBuQf8k6vEmt7TG /jBGTbJwrEnMocIsUM0VXIhvIghiH+2Xwe7YtL3UANJ+n92KpE9rDkfPhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdgyjIF0GdcmaDJhxJ/CAPPkQXiMB8GA1UdIwQY MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB8NiXt8 r+SNw3o1KeWPBnWClhN9m67Z1iEPxCvM2iUqcw5T/Ktup+x4X/Pjx1kIvRbT52ki p3dgUHK5mpVxXt5UinblvyE8iR5ThvuEbk9F3MBcMiI4OOKOodSEBWGkx21XODZP AiroocOO41G7ONmZ+0oaS0LkHAWZ4NFsc6RZCBqE68BZEPPqIg6fjxaYAEHhY87L UsZI546YjNO9in9uiZqVTEgfjeXNZjsJyISfkAvYW8ottR8Nv9GINv8RGrqzPNtA +2Tjk7gy7xMAqjM0EqBEw1JTx4y54/2QecUWOLJ3B6oEFxQ5RW/JPvPw7C08wL7O LE2dvZEAzv7mbg== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:19 2025 by rpki-client