This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json) Hash identifier: mL/Gq2dvZGbLzDqWrEba+o/3Oy13f6jnaNLZOh1T314= Subject key identifier: B0:15:9A:16:8F:D1:28:9C:0B:CF:CC:E4:5C:94:9B:22:84:28:64:D8 Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05 Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05 Certificate serial: 019B5CADCF8296440DBD9FBAE6691CD4A42D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft Manifest number: 0B45 Signing time: Fri 26 Dec 2025 22:00:53 +0000 Manifest this update: Fri 26 Dec 2025 22:00:53 +0000 Manifest next update: Sat 27 Dec 2025 22:00:53 +0000 Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: gmUk5oh0hZ5ZYyWr+8XuRu0xhpDQ7Po7UZdw6oFs2m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:cf:82:96:44:0d:bd:9f:ba:e6:69:1c:d4:a4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05 Validity Not Before: Dec 26 22:00:53 2025 GMT Not After : Dec 27 22:00:53 2025 GMT Subject: CN=b0159a168fd1289c0bcfcce45c949b22842864d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:d1:c8:0c:95:57:28:fe:64:f2:1f:e3:6f: 20:9c:fe:c0:d1:9f:05:f1:80:9d:0b:4a:82:f0:8b: b6:ff:1c:5e:5a:d9:c9:ee:e5:84:02:95:af:49:20: 17:93:67:b0:d6:ec:fc:37:2c:0b:88:ae:4e:82:80: 41:d9:6c:fa:be:44:fc:48:5c:ee:ef:f0:e0:03:90: 77:25:07:6f:d6:d2:0e:ef:86:fb:72:96:9b:3f:35: c3:db:77:d9:6c:8b:89:20:ed:3d:a5:01:c4:74:47: e6:14:d0:1c:7a:57:73:95:73:79:4d:23:e5:b0:a9: d0:c0:0f:80:c8:7d:7e:7a:33:00:c4:74:1a:0c:33: 83:12:29:60:ae:61:0a:ba:ec:a2:cb:0c:38:62:32: 39:b6:2e:c1:a5:e4:bd:39:f8:97:19:fd:c1:dd:38: 97:3c:8c:82:9e:c3:4b:ea:c1:71:03:f6:8a:c6:b4: fb:98:61:eb:51:d7:93:f9:33:63:8f:63:a5:55:9b: a0:32:e3:66:71:ca:29:0f:11:49:5f:7c:79:03:a5: 2a:09:83:46:57:4c:05:91:26:35:bf:c7:2c:9d:68: c2:81:59:3b:40:bc:d9:ca:c8:16:13:b7:b0:37:39: 32:47:0c:0d:54:b7:f7:c2:73:0c:4a:0e:0f:85:7a: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:9A:16:8F:D1:28:9C:0B:CF:CC:E4:5C:94:9B:22:84:28:64:D8 X509v3 Authority Key Identifier: keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:42:4d:19:be:24:3e:70:7a:97:ee:a8:04:45:10:b6:51: a0:f9:b1:2e:29:30:88:d2:22:94:83:5b:cb:e2:83:36:07:d5: 3b:26:67:20:ce:31:f8:24:a8:7d:3a:71:8b:06:d1:21:ab:11: 3d:96:23:e8:bf:69:3c:9a:19:a3:da:cd:bf:75:92:0e:a2:9d: 68:a0:21:c2:5a:93:6c:f5:a8:e1:3c:c2:99:f7:33:5f:5d:1a: 2e:ae:d6:bc:dd:91:b3:d0:ed:3c:34:46:a7:5e:1b:7c:a0:27: d2:b0:81:d7:e6:40:0c:3e:76:96:02:0a:f9:ba:14:86:9a:66: 25:ac:de:05:12:6c:ce:41:28:fb:4d:16:2f:3a:50:55:84:63: 34:eb:9b:fc:3a:60:f2:88:f2:5c:9b:dd:2e:c5:84:ca:61:b8: c8:6a:16:6e:85:92:78:98:71:b5:ea:9a:41:7f:55:fa:33:52: 9e:47:51:39:16:80:3e:1d:78:a2:3c:43:97:7a:51:e7:d8:9d: a2:89:08:a5:a6:25:8d:59:ba:00:ab:72:b5:87:7a:ff:d3:b5: f5:dc:1e:13:b9:ec:f0:bc:90:af:e6:41:cd:7b:5e:db:d8:36: 21:2b:bd:56:53:e7:e8:f7:1e:f0:c9:bd:27:96:40:0d:a5:23: 7c:4f:45:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrc+ClkQNvZ+65mkc1KQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YTU1NWUxNDZiZTRhZTVmN2NjZmU1YTNjMTJkM2YyYTI1 NDNiMDUwHhcNMjUxMjI2MjIwMDUzWhcNMjUxMjI3MjIwMDUzWjAzMTEwLwYDVQQD EyhiMDE1OWExNjhmZDEyODljMGJjZmNjZTQ1Yzk0OWIyMjg0Mjg2NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswXRyAyVVyj+ZPIf428gnP7A0Z8F 8YCdC0qC8Iu2/xxeWtnJ7uWEApWvSSAXk2ew1uz8NywLiK5OgoBB2Wz6vkT8SFzu 7/DgA5B3JQdv1tIO74b7cpabPzXD23fZbIuJIO09pQHEdEfmFNAceldzlXN5TSPl sKnQwA+AyH1+ejMAxHQaDDODEilgrmEKuuyiyww4YjI5ti7BpeS9OfiXGf3B3TiX PIyCnsNL6sFxA/aKxrT7mGHrUdeT+TNjj2OlVZugMuNmccopDxFJX3x5A6UqCYNG V0wFkSY1v8csnWjCgVk7QLzZysgWE7ewNzkyRwwNVLf3wnMMSg4PhXo8qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAVmhaP0SicC8/M5FyUmyKEKGTYMB8GA1UdIwQY MBaAFDWlVeFGvkrl98z+WjwS0/KiVDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgt MDUxY2QzMGNiY2YxLzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgtMDUxY2QzMGNiY2Yx LzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+hCTRm+ JD5wepfuqARFELZRoPmxLikwiNIilINby+KDNgfVOyZnIM4x+CSofTpxiwbRIasR PZYj6L9pPJoZo9rNv3WSDqKdaKAhwlqTbPWo4TzCmfczX10aLq7WvN2Rs9DtPDRG p14bfKAn0rCB1+ZADD52lgIK+boUhppmJazeBRJszkEo+00WLzpQVYRjNOub/Dpg 8ojyXJvdLsWEymG4yGoWboWSeJhxteqaQX9V+jNSnkdRORaAPh14ojxDl3pR59id ookIpaYljVm6AKtytYd6/9O19dweE7ns8LyQr+ZBzXte29g2ISu9VlPn6Pce8Mm9 J5ZADaUjfE9FEg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:34 2025 by rpki-client