This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json) Hash identifier: EBsWQ3ysW8RK8/qo1TDfdqwQYeaIh6E9LF4HzKV6Rdc= Subject key identifier: ED:AC:F1:5A:49:CE:DF:3D:C1:1A:71:84:1D:E4:58:F3:86:F3:7B:E9 Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Certificate serial: 019B3C7E51F67D2B863525F03DFEE670078D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft Manifest number: 0886 Signing time: Sat 20 Dec 2025 16:01:09 +0000 Manifest this update: Sat 20 Dec 2025 16:01:09 +0000 Manifest next update: Sun 21 Dec 2025 16:01:09 +0000 Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: wLXDxwRs42rMmpiHFYAEmDBXD6TgMn0LB6x0wWYquQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:51:f6:7d:2b:86:35:25:f0:3d:fe:e6:70:07:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Validity Not Before: Dec 20 16:01:09 2025 GMT Not After : Dec 21 16:01:09 2025 GMT Subject: CN=edacf15a49cedf3dc11a71841de458f386f37be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:c2:a3:c1:2a:42:c0:aa:86:e5:c1:8e:17: dc:63:18:39:02:f3:4a:e1:27:4c:eb:15:33:20:b5: 9e:2c:b2:83:e6:f9:d8:32:1e:4c:d7:72:72:47:f8: 1c:fe:4d:8c:23:0f:62:a2:15:1e:ed:90:0f:b1:26: e1:06:3c:50:87:4b:c7:79:bf:b5:fd:1d:82:41:df: f2:d4:c7:fd:02:90:52:23:9a:df:46:f9:7e:67:70: d4:cd:51:eb:35:03:23:84:b6:10:ec:31:10:cd:b8: 5f:c1:59:e4:bb:54:9e:c9:b4:7f:34:39:fb:7f:29: 9e:81:03:ad:0f:9c:d1:32:eb:83:4b:ed:e1:72:c7: 57:da:1c:f0:22:9b:88:9a:aa:5c:e4:b2:48:d2:72: f8:ec:f2:b6:51:6e:d5:bf:5e:e9:17:1f:2c:d9:50: 01:40:dc:9a:a7:a0:06:8f:d4:fb:65:2a:b0:36:3d: 8b:79:c5:6e:e1:8f:5c:74:6e:9b:53:91:25:b1:bb: bf:ce:fe:76:30:71:77:39:24:29:9f:97:a5:83:98: 04:ed:a4:6b:c9:15:e4:d9:17:13:06:2c:b3:39:47: ac:46:22:80:52:76:23:df:ce:87:0a:b0:02:fb:a9: 31:9b:8f:bf:8e:27:fb:62:7f:5f:bb:ca:ab:62:c6: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AC:F1:5A:49:CE:DF:3D:C1:1A:71:84:1D:E4:58:F3:86:F3:7B:E9 X509v3 Authority Key Identifier: keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:c9:26:f5:fc:a4:04:73:22:64:b7:87:f4:8e:22:ad:89: bc:11:55:bc:71:7d:8f:0b:e8:cf:a1:ab:89:93:e4:b7:88:18: 3f:ae:cb:17:53:e0:37:49:cf:e7:d8:15:4b:b8:b2:68:38:e4: 5b:31:7c:aa:78:2f:b7:33:73:94:47:37:cb:83:84:d5:5a:08: 03:53:cd:6b:49:d5:01:8e:1d:31:b1:02:d3:0b:f7:c4:8b:77: 51:58:f4:42:64:55:64:80:c8:a2:3d:d3:ed:a9:4f:2c:a4:38: 05:da:3b:1c:c2:22:09:15:1f:2c:bb:c0:e8:65:36:32:eb:27: e5:fd:a0:65:fc:cb:e4:40:36:9c:3b:bc:a5:11:19:dc:4a:31: ae:67:d1:14:2e:6c:f6:5d:1e:61:bb:f2:51:8c:44:cc:bb:09: 08:84:a3:ec:48:2a:b0:6b:9f:77:ca:e0:29:de:fd:ec:d6:c8: 5a:a7:12:97:67:ef:d4:2b:cb:c0:76:3a:24:41:39:c0:81:c1: 05:d3:7f:da:56:3d:fd:f0:25:34:3f:4a:36:41:43:52:3f:04: 8f:22:1c:13:b0:76:7c:23:21:11:66:d1:2e:b4:db:6a:c8:34: b2:89:05:36:4a:34:02:69:55:db:78:ce:da:68:4e:45:c7:23: f3:8e:dd:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flH2fSuGNSXwPf7mcAeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDU1NGIzYTY5MDc3Y2IyNjI5ZGE0ODA3YzNlMDJhNTYx YWQ5NGEwHhcNMjUxMjIwMTYwMTA5WhcNMjUxMjIxMTYwMTA5WjAzMTEwLwYDVQQD EyhlZGFjZjE1YTQ5Y2VkZjNkYzExYTcxODQxZGU0NThmMzg2ZjM3YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE7Co8EqQsCqhuXBjhfcYxg5AvNK 4SdM6xUzILWeLLKD5vnYMh5M13JyR/gc/k2MIw9iohUe7ZAPsSbhBjxQh0vHeb+1 /R2CQd/y1Mf9ApBSI5rfRvl+Z3DUzVHrNQMjhLYQ7DEQzbhfwVnku1SeybR/NDn7 fymegQOtD5zRMuuDS+3hcsdX2hzwIpuImqpc5LJI0nL47PK2UW7Vv17pFx8s2VAB QNyap6AGj9T7ZSqwNj2LecVu4Y9cdG6bU5Elsbu/zv52MHF3OSQpn5elg5gE7aRr yRXk2RcTBiyzOUesRiKAUnYj386HCrAC+6kxm4+/jif7Yn9fu8qrYsatKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2s8VpJzt89wRpxhB3kWPOG83vpMB8GA1UdIwQY MBaAFJwFVLOmkHfLJinaSAfD4CpWGtlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgt NDA4MjBjODQyNmI0LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgtNDA4MjBjODQyNmI0 LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7LJJvX8 pARzImS3h/SOIq2JvBFVvHF9jwvoz6GriZPkt4gYP67LF1PgN0nP59gVS7iyaDjk WzF8qngvtzNzlEc3y4OE1VoIA1PNa0nVAY4dMbEC0wv3xIt3UVj0QmRVZIDIoj3T 7alPLKQ4Bdo7HMIiCRUfLLvA6GU2Musn5f2gZfzL5EA2nDu8pREZ3EoxrmfRFC5s 9l0eYbvyUYxEzLsJCISj7EgqsGufd8rgKd797NbIWqcSl2fv1CvLwHY6JEE5wIHB BdN/2lY9/fAlND9KNkFDUj8EjyIcE7B2fCMhEWbRLrTbasg0sokFNko0AmlV23jO 2mhORccj847d3w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:05 2025 by rpki-client