This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json) Hash identifier: mlipHMyEA3DZjdN+p2M5C0szQUCHAi4tPJvWhQSli5c= Subject key identifier: 79:60:05:5C:8D:00:34:5F:A2:18:EF:67:BA:B3:7C:8B:65:2E:F2:07 Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e Certificate serial: 019B3757E46AC9176A7854D746E53FC04AD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 16:01:05 +0000 Manifest this update: Fri 19 Dec 2025 16:01:05 +0000 Manifest next update: Sat 20 Dec 2025 16:01:05 +0000 Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=) 2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: TMHKFVxbglfX2SqMZ1Jc8zcLCqPf1zQ9kfpzwkKZ85g=) 3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=) 4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:e4:6a:c9:17:6a:78:54:d7:46:e5:3f:c0:4a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e Validity Not Before: Dec 19 16:01:05 2025 GMT Not After : Dec 20 16:01:05 2025 GMT Subject: CN=7960055c8d00345fa218ef67bab37c8b652ef207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:17:5c:05:b5:28:aa:7a:2f:ed:c0:50:b7: 10:5b:c2:f6:f9:d7:f2:02:41:85:27:b4:34:9f:6a: 4f:81:ac:53:d4:87:0c:74:e7:ae:ea:c1:84:58:49: f6:0d:41:93:e0:2f:3e:15:f1:bc:21:ee:eb:aa:44: 3d:93:a4:79:c8:47:f3:e1:c6:6a:93:7f:31:c2:24: 2b:93:0e:ba:e3:7f:8d:5d:c9:ab:7b:8b:5c:65:15: 7f:ff:4a:c7:76:59:bb:be:a6:1e:4b:9a:04:68:6d: 7e:aa:b7:47:37:7f:db:83:91:0a:cf:64:e2:75:13: 26:2f:8d:1b:17:af:0b:5c:c5:92:94:d3:58:38:d1: 72:dd:4e:81:d3:b8:6f:13:02:32:bb:77:91:36:5a: 4d:53:37:5a:89:30:04:49:3f:e8:b6:bf:e9:ee:7d: b9:a8:d1:5d:f6:53:75:fa:85:12:d9:91:3a:3b:68: d9:9c:f5:40:3a:6e:fa:c5:85:17:33:33:d7:10:a9: d6:97:e4:76:77:b9:26:6f:7b:f6:ce:24:8b:02:d1: 89:d8:b8:49:b9:16:77:90:e8:cb:68:23:66:8d:d6: 1f:ed:06:83:ba:9e:e6:87:77:df:23:f1:13:e7:09: 80:b5:3c:da:e7:bb:65:ba:38:a8:de:29:76:25:f3: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:60:05:5C:8D:00:34:5F:A2:18:EF:67:BA:B3:7C:8B:65:2E:F2:07 X509v3 Authority Key Identifier: keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:24:1b:40:f5:76:f8:24:ad:33:0c:8f:83:aa:66:23:66:19: b5:8e:0d:0d:01:9b:3b:dc:61:fe:83:70:78:38:68:9e:bd:c8: 6f:a6:41:c2:18:0b:3d:c7:5e:a1:0f:c2:87:a1:45:2a:0c:07: b6:7c:d8:a0:fe:2c:6d:87:5b:75:bb:e5:e9:b1:d7:9b:3b:ac: 40:0f:84:5f:4a:c7:49:e2:2f:f0:65:03:b0:1b:69:2e:8c:05: 40:9b:8d:d8:4e:5f:a2:f5:be:c2:b7:f9:21:f5:0b:ec:3f:9b: 49:4a:45:83:bd:92:04:a2:5e:3e:91:f4:2a:2a:c6:50:26:68: 8e:7c:61:a7:ef:12:37:5a:df:04:5b:c4:4f:20:49:aa:9f:31: e3:4e:6d:bb:70:1e:63:80:b2:9a:79:2f:b5:d9:c8:17:91:11: f5:50:a2:2a:8a:81:76:66:2a:36:f3:3c:30:56:50:c3:8c:0e: 67:19:00:79:c5:85:2d:8e:49:be:a1:07:af:32:98:b9:6b:e9: 33:67:0b:48:e3:1e:37:8d:3d:30:28:37:54:cb:b2:32:1b:96: f6:26:ac:9d:99:59:e0:c3:19:34:70:9c:47:60:b3:6a:e0:25: 39:b2:85:b4:1d:4d:58:19:49:70:64:72:93:88:e1:b5:22:b7: 67:90:5a:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+RqyRdqeFTXRuU/wErVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl YTM2OWUwHhcNMjUxMjE5MTYwMTA1WhcNMjUxMjIwMTYwMTA1WjAzMTEwLwYDVQQD Eyg3OTYwMDU1YzhkMDAzNDVmYTIxOGVmNjdiYWIzN2M4YjY1MmVmMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpcXXAW1KKp6L+3AULcQW8L2+dfy AkGFJ7Q0n2pPgaxT1IcMdOeu6sGEWEn2DUGT4C8+FfG8Ie7rqkQ9k6R5yEfz4cZq k38xwiQrkw6643+NXcmre4tcZRV//0rHdlm7vqYeS5oEaG1+qrdHN3/bg5EKz2Ti dRMmL40bF68LXMWSlNNYONFy3U6B07hvEwIyu3eRNlpNUzdaiTAEST/otr/p7n25 qNFd9lN1+oUS2ZE6O2jZnPVAOm76xYUXMzPXEKnWl+R2d7kmb3v2ziSLAtGJ2LhJ uRZ3kOjLaCNmjdYf7QaDup7mh3ffI/ET5wmAtTza57tlujio3il2JfMdqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlgBVyNADRfohjvZ7qzfItlLvIHMB8GA1UdIwQY MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyQbQPV2 +CStMwyPg6pmI2YZtY4NDQGbO9xh/oNweDhonr3Ib6ZBwhgLPcdeoQ/Ch6FFKgwH tnzYoP4sbYdbdbvl6bHXmzusQA+EX0rHSeIv8GUDsBtpLowFQJuN2E5fovW+wrf5 IfUL7D+bSUpFg72SBKJePpH0KirGUCZojnxhp+8SN1rfBFvETyBJqp8x405tu3Ae Y4CymnkvtdnIF5ER9VCiKoqBdmYqNvM8MFZQw4wOZxkAecWFLY5JvqEHrzKYuWvp M2cLSOMeN409MCg3VMuyMhuW9iasnZlZ4MMZNHCcR2CzauAlObKFtB1NWBlJcGRy k4jhtSK3Z5BaVA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:59:49 2025 by rpki-client