This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft File: na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json) Hash identifier: nAvi3i/8dgkb5bJr4vKYYYyg1O86Ddu3m4oaShC4kNk= Subject key identifier: FA:A2:19:8D:DE:08:C1:ED:64:CF:4C:7F:70:E4:7B:34:71:A6:31:26 Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08 Certificate issuer: /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008 Certificate serial: 019B337B07CE46E1B98242883A40B4E7143D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft Manifest number: 073D Signing time: Thu 18 Dec 2025 22:00:59 +0000 Manifest this update: Thu 18 Dec 2025 22:00:59 +0000 Manifest next update: Fri 19 Dec 2025 22:00:59 +0000 Files and hashes: 1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: vr3NxMYM9OsjIfnZJ2WZ7rL+kjVqjq084YW+Cn8GrZg=) 2: olL7czVWLNgm7W1_IvIVMdMAMJQ.roa (hash: E2ePc2MjZUE+sDvLqhAeZtvQFjQHcecfsCWi8c1v1uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:07:ce:46:e1:b9:82:42:88:3a:40:b4:e7:14:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008 Validity Not Before: Dec 18 22:00:59 2025 GMT Not After : Dec 19 22:00:59 2025 GMT Subject: CN=faa2198dde08c1ed64cf4c7f70e47b3471a63126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:8c:07:b6:53:40:09:20:a7:60:c5:d9:26: c8:81:ad:a5:93:02:b4:90:35:64:b7:3a:f9:21:d3: da:df:21:c6:47:4f:28:5b:6a:aa:c1:6d:82:3a:af: 8d:b6:2f:7a:7b:79:59:af:2b:43:c0:62:60:67:8b: 92:02:9e:21:fb:0e:0f:5d:24:40:07:33:25:7c:4d: c8:9e:f6:d9:8f:2f:00:84:43:1a:1b:01:16:f8:25: 1a:19:19:a2:b0:4a:66:c5:c2:b2:8a:ef:82:d5:9c: df:7c:a2:62:b7:2c:e2:3e:93:ed:ce:5a:19:f8:95: 88:73:a2:d6:83:2e:19:59:d9:11:14:bc:26:8b:c8: 60:3b:e7:a8:f4:50:3f:de:99:65:ea:a9:bb:30:7d: 87:c6:6f:a8:7d:15:4c:aa:7e:d1:1c:13:67:42:d5: 5c:04:75:cc:01:0a:05:b7:9f:1a:b8:40:ba:d0:c6: f8:5a:9c:31:d2:8f:c4:63:ba:b7:c4:91:79:a3:64: 43:df:87:7f:e5:31:0e:d7:1e:23:2f:1a:9e:9f:b9: 1a:c1:f4:86:6d:a4:3a:93:1a:b1:b9:06:f3:47:98: 9c:b0:d4:d6:45:59:d7:db:27:a2:70:95:24:88:12: af:03:71:00:15:0a:c2:2d:5a:92:04:fa:9a:83:33: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A2:19:8D:DE:08:C1:ED:64:CF:4C:7F:70:E4:7B:34:71:A6:31:26 X509v3 Authority Key Identifier: keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ea:77:65:f3:ef:ef:a6:50:24:f6:5b:5d:fd:bf:58:3f:96: 8e:18:be:fc:b2:b9:d4:8b:89:ab:af:5e:89:19:4c:21:e4:df: d7:86:6f:a0:ce:7b:86:4c:a9:bb:04:77:55:98:64:fc:53:d3: 93:66:dc:c6:0d:e7:89:af:94:c5:34:76:23:d4:44:7b:06:a0: 90:f0:25:78:7e:31:11:31:53:60:88:35:60:2f:37:85:5f:9a: 47:72:39:26:27:c4:ef:c1:1f:a3:e7:aa:95:5d:f3:25:e7:70: d1:2b:48:1f:1d:0a:26:a6:4d:ee:f0:07:eb:b2:ef:fb:e1:69: f6:94:4f:ce:41:29:3b:1e:b2:7f:68:d5:bb:4c:34:ca:86:ec: 57:c2:3c:bc:65:8c:68:eb:ff:bd:aa:01:04:e5:f5:9d:e6:38: 26:d6:3f:75:82:6c:58:98:b6:1f:99:e7:9d:0e:87:0a:d2:83: 31:f8:4c:1b:e6:83:52:08:ca:af:7e:f9:f3:89:b3:8e:69:2a: 03:51:71:a8:68:90:47:a2:8e:4e:4d:60:e3:e0:da:43:d2:e3: 1f:73:08:a5:ae:ae:f4:ab:15:61:9e:3b:75:63:ca:07:09:8c: 32:4c:23:e8:d6:01:4e:e2:13:22:9f:31:ae:62:9e:48:ba:b1: 19:94:b9:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszewfORuG5gkKIOkC05xQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWViYWY2Zjk3ZWM5Mzc0ZGY2YzE0OTJmNTlkNWYxM2E5 ZGQwMDgwHhcNMjUxMjE4MjIwMDU5WhcNMjUxMjE5MjIwMDU5WjAzMTEwLwYDVQQD EyhmYWEyMTk4ZGRlMDhjMWVkNjRjZjRjN2Y3MGU0N2IzNDcxYTYzMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ+MB7ZTQAkgp2DF2SbIga2lkwK0 kDVktzr5IdPa3yHGR08oW2qqwW2COq+Nti96e3lZrytDwGJgZ4uSAp4h+w4PXSRA BzMlfE3InvbZjy8AhEMaGwEW+CUaGRmisEpmxcKyiu+C1ZzffKJityziPpPtzloZ +JWIc6LWgy4ZWdkRFLwmi8hgO+eo9FA/3pll6qm7MH2Hxm+ofRVMqn7RHBNnQtVc BHXMAQoFt58auEC60Mb4Wpwx0o/EY7q3xJF5o2RD34d/5TEO1x4jLxqen7kawfSG baQ6kxqxuQbzR5icsNTWRVnX2yeicJUkiBKvA3EAFQrCLVqSBPqagzPr2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqiGY3eCMHtZM9Mf3DkezRxpjEmMB8GA1UdIwQY MBaAFJ2uuvb5fsk3TfbBSS9Z1fE6ndAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDIt M2U1ZWU0YThmMzg4LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDItM2U1ZWU0YThmMzg4 LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+p3ZfPv 76ZQJPZbXf2/WD+Wjhi+/LK51IuJq69eiRlMIeTf14ZvoM57hkypuwR3VZhk/FPT k2bcxg3nia+UxTR2I9REewagkPAleH4xETFTYIg1YC83hV+aR3I5JifE78Efo+eq lV3zJedw0StIHx0KJqZN7vAH67Lv++Fp9pRPzkEpOx6yf2jVu0w0yobsV8I8vGWM aOv/vaoBBOX1neY4JtY/dYJsWJi2H5nnnQ6HCtKDMfhMG+aDUgjKr37584mzjmkq A1FxqGiQR6KOTk1g4+DaQ9LjH3MIpa6u9KsVYZ47dWPKBwmMMkwj6NYBTuITIp8x rmKeSLqxGZS5SA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:03 2025 by rpki-client