This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json) Hash identifier: gJrcpMvu+GBa2E50QQeToSfWwoedVH9QLAoezCS/1Cw= Subject key identifier: D6:BC:F5:4B:FD:15:65:D9:7E:DC:F4:AA:DB:93:C5:61:E5:E8:7F:5A Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155 Certificate serial: 019AF164569843FCE9190C9080667BE9ACC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: 0K/YBMSriX8rSrdyGCNjLWCdMazsjOhvubRT94qLxUI=) 2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:56:98:43:fc:e9:19:0c:90:80:66:7b:e9:ac:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340551ace81314829351a27e399aeddb33246155 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=d6bcf54bfd1565d97edcf4aadb93c561e5e87f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:88:79:ec:50:d4:fd:a8:bc:28:42:70:6a:f7: bf:46:d6:12:44:b5:d4:65:9e:ad:80:a2:81:dd:ae: be:1c:32:58:29:6c:e4:83:84:ce:b6:22:14:f5:f4: 25:7a:83:dd:39:05:c1:45:7c:11:43:fe:22:ba:0b: 46:9a:03:48:a2:e3:9c:23:c3:d8:71:00:66:98:80: 07:9d:ca:ae:1b:e9:f4:24:ef:ee:df:cc:90:b6:d0: de:3b:3f:91:9a:7c:96:65:73:6c:2f:ea:14:5e:39: 28:28:a4:57:ab:93:c0:25:0a:06:95:b7:88:bc:bd: 33:9d:fc:aa:b4:be:93:cd:f0:d9:3f:81:1c:dd:a4: f3:cb:56:db:be:84:5a:ff:65:24:16:f6:4f:e2:9a: aa:90:d8:db:da:d2:64:1d:8c:61:de:39:fc:4e:2d: 03:71:31:0a:ad:34:ed:9f:2e:1d:a4:8d:5d:04:cf: a1:a7:61:ad:01:8a:68:b3:fa:6f:ed:a6:5c:ef:8e: bf:e8:7a:34:d7:78:2d:20:8c:4e:2c:09:22:b8:c7: 39:d6:3c:90:46:ac:0e:da:7f:ee:4d:49:11:74:14: 92:3c:bc:ba:52:61:d5:a4:8b:32:64:da:7e:a6:c9: 1e:22:c2:6f:1b:ce:42:d7:9d:2d:3c:f2:3a:28:50: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:F5:4B:FD:15:65:D9:7E:DC:F4:AA:DB:93:C5:61:E5:E8:7F:5A X509v3 Authority Key Identifier: keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:5f:ba:bc:b0:45:7a:a4:a7:56:eb:96:e4:bf:0d:3b:e8: df:6e:0f:e5:dc:f7:d3:51:3a:c8:f8:35:ee:a4:0f:36:1d:bf: 97:90:69:52:4d:53:d8:2c:05:99:5a:85:8c:fe:05:d8:ce:e8: 82:db:b8:5d:a6:84:79:a3:4c:26:26:5f:f6:c6:de:1d:4b:06: 13:fd:c8:e7:1b:48:5e:18:2c:35:08:40:49:09:97:4d:09:3e: 7c:03:6e:8c:4f:17:0b:59:bc:b1:a4:fb:e2:ad:b6:c8:88:e2: 02:b0:d7:8a:ec:c2:85:fe:e0:b4:51:07:8e:20:fd:4e:fb:1c: d1:39:ee:66:80:51:b5:e5:3f:01:14:a3:7c:1e:cd:d6:25:69: 36:63:f8:7c:7e:d0:ae:9c:f1:87:f0:4b:72:6c:3f:3b:d5:a0: 0c:d6:06:c5:dd:29:13:12:3c:c5:4a:40:e2:87:e4:23:65:ed: e8:b1:45:98:4f:2c:87:7a:10:b4:1f:70:51:17:f1:5b:3e:05: b3:15:6a:12:46:d4:48:03:9d:50:ea:bc:7f:8a:31:e5:61:b3: de:66:9c:f0:ff:89:4c:ac:e2:cf:db:76:ad:a0:d7:34:24:f8: 84:5d:06:a4:f8:a3:9c:e4:66:e5:05:b0:7b:1d:38:8c:f5:e5: 1a:1d:bb:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFaYQ/zpGQyQgGZ76azCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy NDYxNTUwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EyhkNmJjZjU0YmZkMTU2NWQ5N2VkY2Y0YWFkYjkzYzU2MWU1ZTg3ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oh57FDU/ai8KEJwave/RtYSRLXU ZZ6tgKKB3a6+HDJYKWzkg4TOtiIU9fQleoPdOQXBRXwRQ/4iugtGmgNIouOcI8PY cQBmmIAHncquG+n0JO/u38yQttDeOz+RmnyWZXNsL+oUXjkoKKRXq5PAJQoGlbeI vL0znfyqtL6TzfDZP4Ec3aTzy1bbvoRa/2UkFvZP4pqqkNjb2tJkHYxh3jn8Ti0D cTEKrTTtny4dpI1dBM+hp2GtAYpos/pv7aZc746/6Ho013gtIIxOLAkiuMc51jyQ RqwO2n/uTUkRdBSSPLy6UmHVpIsyZNp+pskeIsJvG85C150tPPI6KFCodQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa89Uv9FWXZftz0qtuTxWHl6H9aMB8GA1UdIwQY MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTFfuryw RXqkp1brluS/DTvo324P5dz301E6yPg17qQPNh2/l5BpUk1T2CwFmVqFjP4F2M7o gtu4XaaEeaNMJiZf9sbeHUsGE/3I5xtIXhgsNQhASQmXTQk+fANujE8XC1m8saT7 4q22yIjiArDXiuzChf7gtFEHjiD9Tvsc0TnuZoBRteU/ARSjfB7N1iVpNmP4fH7Q rpzxh/BLcmw/O9WgDNYGxd0pExI8xUpA4ofkI2Xt6LFFmE8sh3oQtB9wURfxWz4F sxVqEkbUSAOdUOq8f4ox5WGz3mac8P+JTKziz9t2raDXNCT4hF0GpPijnORm5QWw ex04jPXlGh27kg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:28 2025 by rpki-client