This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json) Hash identifier: nDUUniQw1xpwGQFFiZYMqy7Rh2ftqjGOXnhX0rlcDK0= Subject key identifier: 08:53:60:09:D1:BD:7F:E8:FF:8C:61:CF:07:DC:6D:0B:CC:09:09:2A Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e Certificate serial: 019AF1D1D60806E31436EF61339E4D107F6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=) 2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: S/+FMxz7H1mDKYBPSsQFlAt1c07GW0sBReYSPwso5pg=) 3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=) 4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d6:08:06:e3:14:36:ef:61:33:9e:4d:10:7f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=08536009d1bd7fe8ff8c61cf07dc6d0bcc09092a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:71:53:15:ef:2d:95:6a:54:03:8b:75:2d: dd:58:ea:ab:15:e4:ae:a9:d7:e1:d1:10:93:9d:10: a4:62:27:c5:29:c0:1f:82:26:c3:23:4f:f4:50:92: 88:91:9c:60:3d:1e:2a:74:31:09:e4:53:25:36:a0: 8a:b5:ee:15:84:3a:df:19:f2:c3:8a:be:13:1b:31: ea:f8:d4:e2:65:aa:0e:be:11:ef:20:ee:22:66:0b: da:0e:4f:4e:84:a1:87:26:9d:50:28:67:68:b8:65: 60:01:e0:55:86:58:dd:3f:2b:c0:21:55:3b:e9:1d: fc:25:20:9c:9d:93:2c:6d:c9:c4:65:65:6d:a6:58: ab:86:62:1d:9d:6f:0e:3c:bb:35:74:5d:89:92:87: 6a:84:73:18:83:13:60:4c:ed:7a:ea:f7:9b:c9:8a: be:f9:13:90:8f:1d:eb:47:cb:35:26:65:4c:f8:15: 38:21:89:95:cc:19:ab:58:f6:25:cf:81:1d:d4:42: c1:bc:af:0e:e7:b7:45:2d:97:cb:d4:bc:c1:0e:0a: ee:7f:7a:57:96:a0:f0:5a:89:66:37:ac:e1:d3:b6: 3c:cd:11:e1:8b:fa:25:ed:19:10:01:8f:aa:4d:09: 47:6e:91:c7:cb:6a:16:b4:86:3c:b0:ce:83:78:07: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:60:09:D1:BD:7F:E8:FF:8C:61:CF:07:DC:6D:0B:CC:09:09:2A X509v3 Authority Key Identifier: keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:cf:3c:ec:e9:bf:f6:b5:cb:b3:07:cb:a7:ce:b9:13:44:2f: e3:1e:63:96:eb:4f:70:cc:d2:58:cd:14:7a:3c:78:29:6a:8b: 85:30:31:04:cc:ca:38:67:de:28:61:90:44:bb:2d:3e:b0:49: b3:99:7e:28:ef:c2:45:92:da:a0:9f:9d:e3:2f:0b:45:7a:e7: 67:6d:8a:7f:66:1c:71:9a:c3:a3:2e:c7:f6:66:ae:b1:d9:20: 72:f2:63:41:7e:e8:9e:19:7e:30:55:75:87:c3:94:d5:79:62: fa:38:9b:0f:db:4b:df:28:37:4d:b1:94:3b:9f:7d:e9:7a:9a: ec:26:cd:8e:99:af:35:b6:3f:42:c3:ab:cf:6f:13:e6:af:d2: e1:1e:e1:0b:2c:38:e6:43:da:7f:2f:4b:8c:7c:ee:f4:44:5e: e8:34:82:41:01:e1:b5:ca:46:bc:e7:6f:e7:c0:37:b1:79:d4: 08:39:f1:a4:5f:ad:91:28:5a:11:37:60:ba:f1:45:e4:a5:d9: f2:64:20:26:5d:78:cc:67:e5:4d:80:26:61:b9:cb:3c:8b:da: 45:06:24:f9:c8:ea:70:75:de:8b:b4:55:10:33:2b:3f:d2:79: 10:10:f8:d4:9a:df:3c:45:e5:67:e9:a6:d8:c2:63:4e:70:9c: d7:05:d2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dYIBuMUNu9hM55NEH9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl YTM2OWUwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EygwODUzNjAwOWQxYmQ3ZmU4ZmY4YzYxY2YwN2RjNmQwYmNjMDkwOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZRxUxXvLZVqVAOLdS3dWOqrFeSu qdfh0RCTnRCkYifFKcAfgibDI0/0UJKIkZxgPR4qdDEJ5FMlNqCKte4VhDrfGfLD ir4TGzHq+NTiZaoOvhHvIO4iZgvaDk9OhKGHJp1QKGdouGVgAeBVhljdPyvAIVU7 6R38JSCcnZMsbcnEZWVtplirhmIdnW8OPLs1dF2JkodqhHMYgxNgTO166vebyYq+ +ROQjx3rR8s1JmVM+BU4IYmVzBmrWPYlz4Ed1ELBvK8O57dFLZfL1LzBDgruf3pX lqDwWolmN6zh07Y8zRHhi/ol7RkQAY+qTQlHbpHHy2oWtIY8sM6DeAd6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhTYAnRvX/o/4xhzwfcbQvMCQkqMB8GA1UdIwQY MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs887Om/ 9rXLswfLp865E0Qv4x5jlutPcMzSWM0Uejx4KWqLhTAxBMzKOGfeKGGQRLstPrBJ s5l+KO/CRZLaoJ+d4y8LRXrnZ22Kf2YccZrDoy7H9mausdkgcvJjQX7onhl+MFV1 h8OU1Xli+jibD9tL3yg3TbGUO5996Xqa7CbNjpmvNbY/QsOrz28T5q/S4R7hCyw4 5kPafy9LjHzu9ERe6DSCQQHhtcpGvOdv58A3sXnUCDnxpF+tkShaETdguvFF5KXZ 8mQgJl14zGflTYAmYbnLPIvaRQYk+cjqcHXei7RVEDMrP9J5EBD41JrfPEXlZ+mm 2MJjTnCc1wXSKw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:28 2025 by rpki-client