This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json) Hash identifier: n/cLhQXhXlIjElWjM6yrYQLPP8i+9C91fs2RB/Y1TLk= Subject key identifier: 74:FE:8E:0C:30:5C:48:86:9D:22:D7:F8:32:11:14:B3:77:0F:04:0D Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Certificate serial: 019AF12CB8F36F5011FF5413C88B086516A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft Manifest number: 085F Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: zp8nlwTCAO3hXWBQw2vXl+rhn1XsmwjdJftjaV5RztQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b8:f3:6f:50:11:ff:54:13:c8:8b:08:65:16:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=74fe8e0c305c48869d22d7f8321114b3770f040d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:b1:b2:4e:0e:35:c6:0a:c6:4c:6c:b4:37: b1:06:ae:ed:2c:ce:11:7f:c6:f3:1b:e5:67:61:c4: 75:ae:d3:d5:87:5d:f4:1a:9c:59:ae:c1:23:3a:eb: ec:f5:f1:74:c6:81:ea:c4:06:f0:54:a4:2b:fc:0d: 7d:de:2d:05:4f:19:6c:61:06:56:34:f0:81:d6:14: 86:94:15:3c:b0:11:c6:b6:ab:b1:50:1e:11:80:e6: ba:f5:69:f7:b0:3a:11:73:ba:fc:6b:f5:49:99:7b: ec:3c:b9:70:39:15:f8:66:4b:35:42:ff:d0:e8:c2: 3a:b1:be:72:3c:67:4c:8e:f8:fa:c9:8f:0d:e5:84: 82:fb:5e:db:05:49:86:50:54:88:2c:db:3a:a9:ac: 9d:2e:9f:31:d1:c7:dd:d4:44:f0:3d:d7:bd:c4:2d: f7:58:1f:03:2e:73:fa:ee:e0:78:2e:3d:8c:ac:1a: 77:89:35:dd:b9:ed:df:5f:ef:a3:e0:2f:71:f2:d2: 27:6e:3d:92:5b:92:8e:99:dc:13:c0:e4:7e:65:e3: e5:ba:4e:d7:ed:d7:d9:a5:b3:34:82:0b:40:b3:49: a2:19:00:da:dc:b1:e9:b9:ab:8e:dd:4f:ad:97:b7: d1:09:39:67:cd:db:21:25:07:dd:02:f7:40:cb:ed: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FE:8E:0C:30:5C:48:86:9D:22:D7:F8:32:11:14:B3:77:0F:04:0D X509v3 Authority Key Identifier: keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:00:d5:39:5a:23:23:fb:27:87:e8:43:b4:ee:08:59:41: b7:40:0e:b7:a7:be:80:4c:2a:de:73:83:54:26:ef:48:2b:ad: 32:4c:d5:5c:0a:bf:b6:2e:d2:1d:3c:c3:40:92:96:2b:12:52: f9:d7:6a:43:a5:dd:98:01:61:64:e7:f2:60:32:b9:fa:a5:97: 92:be:92:a1:5d:5f:75:68:f4:5a:d8:15:f5:3b:e2:62:17:4d: 59:90:7c:d9:c5:3d:ef:b5:86:98:b5:77:04:d3:9c:b2:ee:4b: 31:ba:2d:40:f3:86:52:0e:79:87:77:72:75:a0:57:d5:3a:19: 6d:b6:5b:18:11:d2:38:7d:8b:0d:93:43:7b:ee:c0:e8:6f:3d: b8:11:0d:dc:39:a6:8b:d7:87:13:dd:03:53:a8:4f:67:a9:9a: a7:80:40:b3:99:49:0a:a8:34:91:62:6a:ef:c1:39:44:10:e4: 0f:eb:3a:46:aa:f0:0d:9e:a3:f9:98:38:ac:85:47:a0:ca:bd: 01:a9:ab:96:b6:49:67:da:97:33:95:07:3e:dd:63:5b:6e:57: a1:67:81:be:af:77:48:91:6e:70:e0:af:61:ee:9a:ec:ac:f0: f2:fe:4b:52:08:94:05:3f:c6:b7:d0:8d:96:2b:6f:34:6d:82: e2:b2:48:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLjzb1AR/1QTyIsIZRapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDU1NGIzYTY5MDc3Y2IyNjI5ZGE0ODA3YzNlMDJhNTYx YWQ5NGEwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD Eyg3NGZlOGUwYzMwNWM0ODg2OWQyMmQ3ZjgzMjExMTRiMzc3MGYwNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB+xsk4ONcYKxkxstDexBq7tLM4R f8bzG+VnYcR1rtPVh130GpxZrsEjOuvs9fF0xoHqxAbwVKQr/A193i0FTxlsYQZW NPCB1hSGlBU8sBHGtquxUB4RgOa69Wn3sDoRc7r8a/VJmXvsPLlwORX4Zks1Qv/Q 6MI6sb5yPGdMjvj6yY8N5YSC+17bBUmGUFSILNs6qaydLp8x0cfd1ETwPde9xC33 WB8DLnP67uB4Lj2MrBp3iTXdue3fX++j4C9x8tInbj2SW5KOmdwTwOR+ZePluk7X 7dfZpbM0ggtAs0miGQDa3LHpuauO3U+tl7fRCTlnzdshJQfdAvdAy+1RMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT+jgwwXEiGnSLX+DIRFLN3DwQNMB8GA1UdIwQY MBaAFJwFVLOmkHfLJinaSAfD4CpWGtlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgt NDA4MjBjODQyNmI0LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgtNDA4MjBjODQyNmI0 LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxMA1Tla IyP7J4foQ7TuCFlBt0AOt6e+gEwq3nODVCbvSCutMkzVXAq/ti7SHTzDQJKWKxJS +ddqQ6XdmAFhZOfyYDK5+qWXkr6SoV1fdWj0WtgV9TviYhdNWZB82cU977WGmLV3 BNOcsu5LMbotQPOGUg55h3dydaBX1ToZbbZbGBHSOH2LDZNDe+7A6G89uBEN3Dmm i9eHE90DU6hPZ6map4BAs5lJCqg0kWJq78E5RBDkD+s6RqrwDZ6j+Zg4rIVHoMq9 AamrlrZJZ9qXM5UHPt1jW25XoWeBvq93SJFucOCvYe6a7Kzw8v5LUgiUBT/Gt9CN litvNG2C4rJIPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:05 2025 by rpki-client