This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json) Hash identifier: mzVY6ODUQuYzB0aKUPXr8S1YovQMCfQ4ZVsxTrq9IIA= Subject key identifier: 25:0C:CC:09:6D:23:D3:08:2A:15:CA:C7:57:C4:14:D4:11:02:14:32 Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de Certificate serial: 019AF2768358DC301FEFB8FAB2561085B088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft Manifest number: 153A Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=) 2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: qmtD17lzbJ3ZVDkfLB89NGJb9JgVdh3cri5HHhNDeeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:83:58:dc:30:1f:ef:b8:fa:b2:56:10:85:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=250ccc096d23d3082a15cac757c414d411021432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:16:61:e1:fd:c9:77:cd:5f:a6:59:12:b6: 22:7d:e8:7b:88:e1:ec:8b:b2:e2:e2:f3:63:ab:29: 21:22:5f:48:21:06:0f:d0:1a:2d:a2:c2:a1:bb:62: 9c:06:f5:f6:6a:8b:55:b2:7a:05:0b:86:05:bc:31: cb:a1:71:cd:90:88:ee:b3:a1:90:9d:bf:ef:12:9c: 16:d2:81:e4:66:27:7a:16:0d:f8:46:83:73:e5:0b: 16:40:d1:d1:e3:ca:1e:89:1f:89:a2:18:6c:8f:97: 23:c2:bd:c2:33:83:59:b4:9a:a3:46:b2:e3:b2:e7: b5:9b:23:1c:c8:9a:11:99:fd:c1:06:42:03:09:04: 6f:36:fe:a5:68:f7:16:23:d5:1b:c2:c5:b8:c1:9b: 05:f8:99:ea:1a:76:e3:2c:96:e7:c7:7e:20:09:ee: a2:9e:e1:0e:96:5c:ab:65:84:9d:cf:01:44:9e:bc: f2:10:51:0e:a8:6a:57:34:40:5e:dd:7f:02:25:8a: 77:64:9e:2c:cd:01:0e:19:b2:87:64:76:3c:85:3b: 51:b6:b5:be:6b:0b:b7:d1:b2:c0:86:e6:c6:c8:c3: 81:0b:be:c8:2d:24:8c:4b:c9:4a:1d:67:3b:be:3f: 23:36:f8:27:66:92:24:05:cc:f4:65:17:75:06:c9: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:CC:09:6D:23:D3:08:2A:15:CA:C7:57:C4:14:D4:11:02:14:32 X509v3 Authority Key Identifier: keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:85:31:a9:6a:73:ec:71:23:52:f0:d5:4f:f8:f3:f8:59:3d: 80:c2:67:2f:98:ff:d0:6b:c1:50:43:4d:69:a3:80:cb:aa:ee: 0d:37:6e:4b:c5:17:72:3b:b6:df:d7:37:60:86:04:f1:11:96: af:f3:ef:9a:38:cf:e8:35:77:2a:56:da:b6:95:37:d6:df:86: 6b:8c:7f:b1:89:33:69:fb:98:78:8e:5a:6b:cc:ab:fe:77:b9: b7:89:d4:fa:f2:e3:34:20:4e:3e:36:6b:64:d6:38:78:89:ed: ba:ed:5b:21:e0:ba:9c:06:1f:03:72:64:f4:7d:57:00:48:99: 7b:64:2b:ea:b2:42:06:bf:be:ef:63:d6:77:23:a5:8b:95:bc: 34:4c:8e:d4:c8:8f:74:1e:54:9f:f5:75:ed:6d:10:05:03:f8: 05:c3:58:9a:5c:f9:27:37:cf:dc:e4:17:a6:34:27:0a:e5:c1: 44:54:ec:0f:b5:29:bd:94:41:83:22:68:0d:dd:d7:ab:19:af: 17:3f:6e:69:14:9f:77:27:62:0b:9e:11:50:e1:04:9e:d7:b1: 50:d5:c2:ff:56:9d:6c:01:7e:35:d2:f8:e6:2b:b8:d5:0d:0c: 87:93:a1:a0:1d:2d:76:ba:d3:8e:5c:2e:99:e6:92:e3:51:4e: 1e:47:b5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoNY3DAf77j6slYQhbCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4 MzYxZGUwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EygyNTBjY2MwOTZkMjNkMzA4MmExNWNhYzc1N2M0MTRkNDExMDIxNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KYWYeH9yXfNX6ZZErYifeh7iOHs i7Li4vNjqykhIl9IIQYP0BotosKhu2KcBvX2aotVsnoFC4YFvDHLoXHNkIjus6GQ nb/vEpwW0oHkZid6Fg34RoNz5QsWQNHR48oeiR+Johhsj5cjwr3CM4NZtJqjRrLj sue1myMcyJoRmf3BBkIDCQRvNv6laPcWI9UbwsW4wZsF+JnqGnbjLJbnx34gCe6i nuEOllyrZYSdzwFEnrzyEFEOqGpXNEBe3X8CJYp3ZJ4szQEOGbKHZHY8hTtRtrW+ awu30bLAhubGyMOBC77ILSSMS8lKHWc7vj8jNvgnZpIkBcz0ZRd1BsnYuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUMzAltI9MIKhXKx1fEFNQRAhQyMB8GA1UdIwQY MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYUxqWpz 7HEjUvDVT/jz+Fk9gMJnL5j/0GvBUENNaaOAy6ruDTduS8UXcju239c3YIYE8RGW r/PvmjjP6DV3KlbatpU31t+Ga4x/sYkzafuYeI5aa8yr/ne5t4nU+vLjNCBOPjZr ZNY4eIntuu1bIeC6nAYfA3Jk9H1XAEiZe2Qr6rJCBr++72PWdyOli5W8NEyO1MiP dB5Un/V17W0QBQP4BcNYmlz5JzfP3OQXpjQnCuXBRFTsD7UpvZRBgyJoDd3Xqxmv Fz9uaRSfdydiC54RUOEEntexUNXC/1adbAF+NdL45iu41Q0Mh5OhoB0tdrrTjlwu meaS41FOHke1BA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:56 2025 by rpki-client