This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json) Hash identifier: 0FsJrzw5uOcu0B/hVuuq9VgiYNM2YVdXTLAy0Hcb5DU= Subject key identifier: 5B:86:6B:ED:33:0F:78:7E:14:1E:41:53:20:25:51:5C:54:DD:1B:6E Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de Certificate serial: 019B3DC7842736859439B5DBF6B59DB7E4E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft Manifest number: 1561 Signing time: Sat 20 Dec 2025 22:00:44 +0000 Manifest this update: Sat 20 Dec 2025 22:00:44 +0000 Manifest next update: Sun 21 Dec 2025 22:00:44 +0000 Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=) 2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: hUFf2qPTw9/MK9Tdm2TB/1h7lvrv4L+I49J0J2+R3L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:84:27:36:85:94:39:b5:db:f6:b5:9d:b7:e4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de Validity Not Before: Dec 20 22:00:44 2025 GMT Not After : Dec 21 22:00:44 2025 GMT Subject: CN=5b866bed330f787e141e41532025515c54dd1b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:1e:09:45:16:df:3f:87:8d:f4:3f:f5:6e: ba:a7:ca:f2:e9:14:7b:18:6a:aa:a4:fa:e5:54:72: 81:53:b2:a9:68:7e:ac:d1:fb:d7:18:08:b2:81:f8: a4:a2:27:11:50:17:62:f5:3c:1e:c6:1a:79:4b:5d: 00:75:81:e9:dd:88:a9:7b:48:b7:92:45:a1:8d:02: b0:f2:a0:dc:d4:d1:3f:5c:a1:60:e0:89:3a:da:87: 6a:4f:47:60:84:3e:20:9c:00:cc:bb:b0:53:40:89: 1d:70:ad:75:ec:b4:f5:17:33:9e:ae:fb:37:47:04: 9c:bc:db:92:2f:21:fe:82:3b:d0:4d:9c:57:29:82: 17:1c:60:cc:2a:6d:ed:91:c3:1a:52:56:93:2e:09: bc:82:ff:c7:a9:74:5f:b9:04:53:0e:df:cc:01:f5: 88:c7:eb:a6:a8:ab:d7:b3:12:bd:a6:74:fc:17:14: 73:6b:f3:a6:5e:86:e5:13:3b:73:27:7d:b2:10:ac: bb:24:4c:cc:17:98:77:6a:97:13:83:ef:3f:fd:cb: 6f:e5:10:35:df:00:60:69:95:8e:06:38:d9:25:fa: 1a:d0:ff:f8:71:b3:4b:b7:10:bc:5c:3e:b5:1f:39: 5b:a1:fe:0c:b7:d9:5e:9e:ca:09:33:52:b9:42:30: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:6B:ED:33:0F:78:7E:14:1E:41:53:20:25:51:5C:54:DD:1B:6E X509v3 Authority Key Identifier: keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:53:be:71:81:37:c1:a8:49:98:e3:e0:fd:46:d8:3a:57:6d: 16:fc:fe:1b:0c:c5:cc:72:26:cb:da:4c:88:e7:27:82:19:89: 1b:02:b5:c2:59:49:a3:83:6e:1c:0b:00:0a:06:c4:eb:f2:26: ce:b8:db:d1:d2:a3:31:71:ca:fc:22:e2:01:eb:38:df:eb:f7: d9:f8:92:03:f6:78:23:f5:cd:84:df:64:6c:c0:3c:3d:8b:2d: 5e:f5:25:d1:7e:59:fc:b7:cf:b2:85:55:03:64:7f:30:9a:d5: 9c:d3:87:e5:e4:d5:89:45:44:0d:b3:e0:c5:9d:94:bd:7e:20: fa:7b:53:90:62:55:5b:1e:c2:f5:32:7e:b6:b3:01:90:be:77: 5e:cc:ac:1c:4e:38:97:d6:37:b9:7a:59:3f:05:71:8a:4f:23: 88:80:12:b0:0f:66:2d:b0:e6:16:ef:17:15:a8:1a:79:30:1e: 4f:8e:07:2e:a3:5a:37:2e:60:51:4d:60:b9:51:22:38:32:03: 40:18:a1:ad:6d:c0:f6:58:08:46:c0:7c:90:54:bd:42:5b:9b: 1c:9e:34:8f:17:f5:1d:b9:15:35:e8:90:20:2d:ec:6b:c5:38: d9:32:17:3f:a0:09:63:a9:89:5e:a5:ee:53:ba:09:e4:8e:ef: 1a:21:57:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4QnNoWUObXb9rWdt+TjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4 MzYxZGUwHhcNMjUxMjIwMjIwMDQ0WhcNMjUxMjIxMjIwMDQ0WjAzMTEwLwYDVQQD Eyg1Yjg2NmJlZDMzMGY3ODdlMTQxZTQxNTMyMDI1NTE1YzU0ZGQxYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFMeCUUW3z+HjfQ/9W66p8ry6RR7 GGqqpPrlVHKBU7KpaH6s0fvXGAiygfikoicRUBdi9Twexhp5S10AdYHp3Yipe0i3 kkWhjQKw8qDc1NE/XKFg4Ik62odqT0dghD4gnADMu7BTQIkdcK117LT1FzOervs3 RwScvNuSLyH+gjvQTZxXKYIXHGDMKm3tkcMaUlaTLgm8gv/HqXRfuQRTDt/MAfWI x+umqKvXsxK9pnT8FxRza/OmXoblEztzJ32yEKy7JEzMF5h3apcTg+8//ctv5RA1 3wBgaZWOBjjZJfoa0P/4cbNLtxC8XD61Hzlbof4Mt9lensoJM1K5QjCCbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuGa+0zD3h+FB5BUyAlUVxU3RtuMB8GA1UdIwQY MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVO+cYE3 wahJmOPg/UbYOldtFvz+GwzFzHImy9pMiOcnghmJGwK1wllJo4NuHAsACgbE6/Im zrjb0dKjMXHK/CLiAes43+v32fiSA/Z4I/XNhN9kbMA8PYstXvUl0X5Z/LfPsoVV A2R/MJrVnNOH5eTViUVEDbPgxZ2UvX4g+ntTkGJVWx7C9TJ+trMBkL53XsysHE44 l9Y3uXpZPwVxik8jiIASsA9mLbDmFu8XFagaeTAeT44HLqNaNy5gUU1guVEiODID QBihrW3A9lgIRsB8kFS9QlubHJ40jxf1HbkVNeiQIC3sa8U42TIXP6AJY6mJXqXu U7oJ5I7vGiFXbA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:44 2025 by rpki-client