This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json) Hash identifier: M8JXQmRFGHVZp95r8NU6+joIkAbimYv9aGgE3QW9tR0= Subject key identifier: 92:FC:32:A8:7E:DA:9D:A9:C4:AE:8A:BD:67:D6:1E:BA:62:2D:0B:68 Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05 Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05 Certificate serial: 019B3042E257C2679D3398C3C32CFD9A0D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft Manifest number: 0B2E Signing time: Thu 18 Dec 2025 07:00:48 +0000 Manifest this update: Thu 18 Dec 2025 07:00:48 +0000 Manifest next update: Fri 19 Dec 2025 07:00:48 +0000 Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: XukvY8IIboA24VC/TJbKgT+amH8AheCsisVoAlR0QhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:e2:57:c2:67:9d:33:98:c3:c3:2c:fd:9a:0d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05 Validity Not Before: Dec 18 07:00:48 2025 GMT Not After : Dec 19 07:00:48 2025 GMT Subject: CN=92fc32a87eda9da9c4ae8abd67d61eba622d0b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:09:7f:7a:75:0e:31:01:41:a3:b8:2f:ee: 3e:7b:24:0f:eb:fd:ce:91:6d:f3:a7:a9:11:e5:50: fe:8d:7f:33:5c:a6:0b:db:3f:c3:db:a9:73:03:81: f7:62:8c:fd:38:a0:d0:6b:9e:36:4f:7f:d1:21:d5: c1:fa:7b:b5:5e:e4:8d:15:68:21:67:8c:34:d3:31: 02:1c:e1:19:a2:f4:dc:99:fe:f6:43:3b:f2:fb:71: 0e:6f:c9:14:25:05:30:83:93:50:67:28:a9:19:6d: 3d:92:57:16:52:a8:f3:5b:0c:7b:0e:38:89:62:db: e2:6c:cf:93:cd:b2:a2:56:19:6b:cb:09:a1:03:17: dd:85:20:2b:f8:d2:9e:aa:dc:94:a3:f8:f3:4c:70: 60:a5:82:ae:47:9d:61:ec:6e:b6:4a:6d:d6:50:ef: 22:66:72:af:4d:f6:e2:b7:23:de:69:7d:96:2a:5a: a2:94:dd:01:1d:bf:9e:5c:76:d2:62:22:b9:53:15: 8f:ac:3e:85:77:de:12:18:fe:ba:02:0f:ea:12:3e: e2:0b:1c:a5:6d:9c:a1:c5:99:81:2f:2b:7d:1b:53: 5c:70:8d:7e:86:0d:f1:16:df:76:a2:3e:74:2c:b2: 8b:e4:96:bf:88:4b:0c:1b:74:51:60:e9:d0:54:c9: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FC:32:A8:7E:DA:9D:A9:C4:AE:8A:BD:67:D6:1E:BA:62:2D:0B:68 X509v3 Authority Key Identifier: keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e2:2e:5f:24:4b:8f:dd:a9:a1:53:89:dd:24:7d:5c:24:91: 88:bd:8d:f2:13:cd:a8:95:9a:2a:06:d0:42:48:76:a2:66:0f: 3f:9b:a3:7a:ea:06:00:45:7b:ea:c1:9e:91:b1:ee:01:74:8b: 1f:c2:bb:b2:38:72:f8:3c:2b:3b:71:1a:2d:92:26:cb:5c:1d: aa:78:ff:66:0f:fb:01:49:4e:33:3e:a8:68:0e:b1:20:80:e1: 89:3b:cf:b8:41:d5:43:6e:52:5c:c5:cf:39:4d:eb:90:0c:c8: b9:54:2b:0c:50:f1:92:5e:f6:73:36:86:0b:51:ea:67:42:a2: d2:95:bb:90:45:37:7d:d6:42:9a:75:e7:79:07:91:fc:6f:7b: 71:bc:65:19:99:e1:77:95:5c:50:98:6a:ad:af:94:12:17:de: 45:6c:1d:71:74:e6:f5:f1:9f:49:8f:33:14:d1:91:3f:46:24: ca:57:42:07:ee:24:f4:3e:b8:5e:e7:a0:0e:4e:01:db:71:b6: 40:63:cb:9c:c5:4e:02:f3:ff:e6:d5:fd:68:2f:d0:b0:09:43: 67:7c:bc:8c:37:cc:39:0d:53:61:a3:e0:51:eb:65:ac:5a:cd: 68:5c:cd:12:fa:2d:d7:60:1e:3f:7e:b5:5d:70:a9:18:a1:9e: 75:52:e4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQuJXwmedM5jDwyz9mg0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YTU1NWUxNDZiZTRhZTVmN2NjZmU1YTNjMTJkM2YyYTI1 NDNiMDUwHhcNMjUxMjE4MDcwMDQ4WhcNMjUxMjE5MDcwMDQ4WjAzMTEwLwYDVQQD Eyg5MmZjMzJhODdlZGE5ZGE5YzRhZThhYmQ2N2Q2MWViYTYyMmQwYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos8Jf3p1DjEBQaO4L+4+eyQP6/3O kW3zp6kR5VD+jX8zXKYL2z/D26lzA4H3Yoz9OKDQa542T3/RIdXB+nu1XuSNFWgh Z4w00zECHOEZovTcmf72Qzvy+3EOb8kUJQUwg5NQZyipGW09klcWUqjzWwx7DjiJ YtvibM+TzbKiVhlrywmhAxfdhSAr+NKeqtyUo/jzTHBgpYKuR51h7G62Sm3WUO8i ZnKvTfbityPeaX2WKlqilN0BHb+eXHbSYiK5UxWPrD6Fd94SGP66Ag/qEj7iCxyl bZyhxZmBLyt9G1NccI1+hg3xFt92oj50LLKL5Ja/iEsMG3RRYOnQVMnUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL8Mqh+2p2pxK6KvWfWHrpiLQtoMB8GA1UdIwQY MBaAFDWlVeFGvkrl98z+WjwS0/KiVDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgt MDUxY2QzMGNiY2YxLzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgtMDUxY2QzMGNiY2Yx LzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOIuXyRL j92poVOJ3SR9XCSRiL2N8hPNqJWaKgbQQkh2omYPP5ujeuoGAEV76sGekbHuAXSL H8K7sjhy+DwrO3EaLZImy1wdqnj/Zg/7AUlOMz6oaA6xIIDhiTvPuEHVQ25SXMXP OU3rkAzIuVQrDFDxkl72czaGC1HqZ0Ki0pW7kEU3fdZCmnXneQeR/G97cbxlGZnh d5VcUJhqra+UEhfeRWwdcXTm9fGfSY8zFNGRP0YkyldCB+4k9D64XuegDk4B23G2 QGPLnMVOAvP/5tX9aC/QsAlDZ3y8jDfMOQ1TYaPgUetlrFrNaFzNEvot12AeP361 XXCpGKGedVLk+A== -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:47 2025 by rpki-client