This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json) Hash identifier: xmXzvf9lyot2mW4N6SStLYcw8IT5kW/z/9dj1uZFe58= Subject key identifier: D4:D5:7C:D4:8E:C7:23:DE:20:86:00:42:FD:63:05:82:22:4B:33:C9 Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155 Certificate serial: 019B51F37390C13026043E982078EA7B7F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 20:01:07 +0000 Manifest this update: Wed 24 Dec 2025 20:01:07 +0000 Manifest next update: Thu 25 Dec 2025 20:01:07 +0000 Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: D6RyTp1KuLznWkgCBfUqkDDjbEWcDO9P7qzrDHF2pSY=) 2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:73:90:c1:30:26:04:3e:98:20:78:ea:7b:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340551ace81314829351a27e399aeddb33246155 Validity Not Before: Dec 24 20:01:07 2025 GMT Not After : Dec 25 20:01:07 2025 GMT Subject: CN=d4d57cd48ec723de20860042fd630582224b33c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:37:cd:af:46:b5:61:35:5f:c9:d9:60:01: 9b:b2:9e:a1:e0:7b:46:12:63:f8:96:ab:58:33:a3: ef:e5:2c:ed:79:f1:41:38:53:0b:f4:b3:32:52:cb: 68:36:5e:3d:3d:f3:84:c7:a3:f2:29:fc:98:30:18: 7e:94:22:b6:0c:af:70:bf:a5:9a:e5:16:6f:24:f0: b4:5a:f5:ab:8a:d9:8a:a8:aa:22:13:20:b4:73:84: 80:1e:3d:2a:69:7d:4e:55:81:8d:e9:c5:88:59:a1: e8:6e:09:ec:b7:81:18:63:46:e0:e0:40:76:69:6f: a6:31:b0:19:c5:51:41:07:b7:d2:f1:33:fc:c0:73: fa:d0:a7:4b:cc:e9:cf:49:de:37:6d:4f:f7:79:71: 2e:c3:5c:5c:f0:5f:68:83:cb:6f:9e:05:c6:a1:4b: 23:86:92:db:ca:2d:cc:9c:25:6d:59:0e:7f:6a:ab: 3b:54:97:99:7f:ec:4b:a5:bd:57:ab:5f:ec:a7:1e: 52:8c:95:aa:d3:51:29:ff:7e:0a:b7:71:cc:87:47: 81:66:7e:d1:f6:8a:36:a1:c0:93:d7:10:1f:a7:64: bc:e7:6e:c5:4b:dd:15:78:89:4d:75:72:5f:b2:0e: 99:c5:38:c6:b2:ef:9f:10:5f:5d:24:7c:19:6a:80: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D5:7C:D4:8E:C7:23:DE:20:86:00:42:FD:63:05:82:22:4B:33:C9 X509v3 Authority Key Identifier: keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a1:a0:71:3a:80:c5:6d:22:97:38:b8:4a:d2:47:4a:1a:fe: 70:de:9c:71:1e:5e:b0:e4:8c:70:9c:e7:a5:8e:ee:23:18:82: 02:b1:65:89:85:07:be:3c:63:11:4c:f8:03:ac:e0:e4:c5:01: 4a:2b:ce:97:dc:9d:5c:fd:12:0f:c3:dc:8e:7c:14:e7:fc:e5: 9a:93:f0:6d:c6:1a:ca:52:4d:6e:9f:2f:4b:41:7d:80:e8:e7: 34:03:95:c0:fd:6d:73:3d:a5:3f:8c:cc:26:68:e7:d3:3c:3d: 90:ac:62:39:c4:d9:26:0f:c4:18:91:2c:02:c4:1b:5f:a2:f8: 39:c5:49:73:13:d4:ee:44:de:8e:0d:6f:46:6e:38:56:55:45: 3f:e4:56:f6:a5:e8:46:f8:c4:ca:e6:f4:bf:b8:37:b2:a3:7a: fa:5d:29:22:95:f3:7a:56:44:c8:b1:f2:66:ad:b5:55:d8:36: a9:32:da:cd:16:b0:fa:34:55:1e:3f:38:0b:04:a4:fa:0d:b3: 1e:76:1a:03:ef:6e:4c:21:a2:4c:da:f3:b1:c2:c5:cb:92:98: 59:d3:a4:36:16:7c:97:aa:58:69:58:18:5a:33:b6:d4:cd:4b: 68:b3:71:b1:9c:5d:07:15:f8:54:8e:93:f3:8e:0d:e1:71:b4: fa:fc:aa:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR83OQwTAmBD6YIHjqe38gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy NDYxNTUwHhcNMjUxMjI0MjAwMTA3WhcNMjUxMjI1MjAwMTA3WjAzMTEwLwYDVQQD EyhkNGQ1N2NkNDhlYzcyM2RlMjA4NjAwNDJmZDYzMDU4MjIyNGIzM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuM3za9GtWE1X8nZYAGbsp6h4HtG EmP4lqtYM6Pv5SztefFBOFML9LMyUstoNl49PfOEx6PyKfyYMBh+lCK2DK9wv6Wa 5RZvJPC0WvWritmKqKoiEyC0c4SAHj0qaX1OVYGN6cWIWaHobgnst4EYY0bg4EB2 aW+mMbAZxVFBB7fS8TP8wHP60KdLzOnPSd43bU/3eXEuw1xc8F9og8tvngXGoUsj hpLbyi3MnCVtWQ5/aqs7VJeZf+xLpb1Xq1/spx5SjJWq01Ep/34Kt3HMh0eBZn7R 9oo2ocCT1xAfp2S8527FS90VeIlNdXJfsg6ZxTjGsu+fEF9dJHwZaoBeAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTVfNSOxyPeIIYAQv1jBYIiSzPJMB8GA1UdIwQY MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6GgcTqA xW0ilzi4StJHShr+cN6ccR5esOSMcJznpY7uIxiCArFliYUHvjxjEUz4A6zg5MUB SivOl9ydXP0SD8PcjnwU5/zlmpPwbcYaylJNbp8vS0F9gOjnNAOVwP1tcz2lP4zM Jmjn0zw9kKxiOcTZJg/EGJEsAsQbX6L4OcVJcxPU7kTejg1vRm44VlVFP+RW9qXo RvjEyub0v7g3sqN6+l0pIpXzelZEyLHyZq21Vdg2qTLazRaw+jRVHj84CwSk+g2z HnYaA+9uTCGiTNrzscLFy5KYWdOkNhZ8l6pYaVgYWjO21M1LaLNxsZxdBxX4VI6T 844N4XG0+vyqWQ== -----END CERTIFICATE-----Generated at Wed Dec 24 22:04:50 2025 by rpki-client