This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json) Hash identifier: anp7a/mwgI1Pr7fwFeDVDxFoEWyWunfwh+/SmYCj4MA= Subject key identifier: 28:CE:9B:76:B4:1D:F5:B5:D7:EE:B5:C8:56:1A:44:09:D1:4E:67:62 Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05 Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05 Certificate serial: 019AFC1EDECF4B4E809AB4D08CC8E27FA685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft Manifest number: 0B13 Signing time: Mon 08 Dec 2025 04:01:12 +0000 Manifest this update: Mon 08 Dec 2025 04:01:12 +0000 Manifest next update: Tue 09 Dec 2025 04:01:12 +0000 Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: dSIOrJyioIqESWV5XgmKH0gpxqh9oTOgiMaVGVE4DK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1e:de:cf:4b:4e:80:9a:b4:d0:8c:c8:e2:7f:a6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05 Validity Not Before: Dec 8 04:01:12 2025 GMT Not After : Dec 9 04:01:12 2025 GMT Subject: CN=28ce9b76b41df5b5d7eeb5c8561a4409d14e6762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:80:bf:27:a8:57:f5:e0:ec:f7:bf:8f:e6: 14:31:c6:33:9d:f4:14:4d:9a:d4:56:39:9d:2e:cd: 89:e4:0c:37:a9:85:f7:cd:a4:c8:d9:9a:14:0c:68: 5f:be:50:12:11:c1:58:2c:92:c3:f3:47:f4:66:f8: ac:de:ce:95:80:58:b3:2a:49:08:3e:92:04:12:a2: fb:a6:95:d1:b9:38:92:13:23:05:72:3f:ce:10:ba: 2b:c6:e9:3f:46:e8:62:f9:31:e9:71:a2:eb:ae:c0: 12:cb:4f:9e:e5:23:00:fd:4e:ca:a5:00:e5:91:38: 80:19:84:f2:61:04:b0:fc:5d:5a:e1:59:70:c4:b6: 52:9b:81:aa:d7:14:1b:8f:7a:fa:b2:33:91:2c:59: 86:95:a4:1e:30:f4:b9:4c:a1:91:a9:fd:92:dc:4a: ba:5d:33:8d:55:30:26:4f:24:cb:0c:8b:b7:d0:6c: 2e:bf:a2:83:0e:03:9f:ae:62:75:cd:fc:3d:7c:4b: 3a:4a:3f:3a:25:0c:ff:77:30:4d:47:fe:fb:63:95: bd:28:be:c3:ca:f7:3d:80:76:b3:f5:3b:d4:7f:5e: f9:b5:0f:25:20:be:94:2e:6f:d3:3f:8e:67:8e:a8: c6:6f:5f:5e:78:ee:5a:a9:23:31:50:9c:b5:08:5f: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CE:9B:76:B4:1D:F5:B5:D7:EE:B5:C8:56:1A:44:09:D1:4E:67:62 X509v3 Authority Key Identifier: keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9e:58:e9:8e:1d:39:9c:d6:2c:91:55:3a:39:cf:cc:e0:96: e2:86:7d:39:43:ca:a8:a8:ad:02:d8:ef:40:ae:c2:29:d8:0a: db:e2:9b:99:48:13:cc:59:58:1a:91:03:69:5b:00:ee:cd:bc: 0d:1b:30:62:a6:92:21:ef:e7:b6:dc:8c:f7:77:6b:46:25:45: b6:d9:aa:53:84:01:04:2f:6a:bd:a1:5e:7c:bf:8e:0b:95:d8: e3:51:82:ff:aa:cd:8a:d9:24:2d:3b:8d:56:9b:90:19:b5:93: 90:be:c0:27:58:3c:d1:d8:57:0a:2d:31:ff:4a:1e:61:4e:71: fb:2e:ef:4f:5a:ed:83:7b:19:3d:de:44:8e:3c:18:70:e1:23: b8:93:73:a3:29:15:f6:76:e4:c9:27:9b:3c:3b:26:96:dc:c5: 36:ca:5d:9c:77:aa:cb:e7:a6:f6:da:88:8d:59:1a:28:5f:42: ef:30:99:4b:c0:c1:09:5d:42:05:33:8f:19:84:02:f5:7a:c1: dc:06:99:13:68:40:66:d9:bd:84:67:2f:28:80:ae:d1:f7:fe: 4b:d2:22:78:eb:de:84:01:83:52:5d:3f:38:7d:d5:82:72:65: b9:ff:d1:8b:86:17:59:a2:66:bb:ea:35:ae:34:32:3a:a5:b7: 8b:57:14:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8Ht7PS06AmrTQjMjif6aFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YTU1NWUxNDZiZTRhZTVmN2NjZmU1YTNjMTJkM2YyYTI1 NDNiMDUwHhcNMjUxMjA4MDQwMTEyWhcNMjUxMjA5MDQwMTEyWjAzMTEwLwYDVQQD EygyOGNlOWI3NmI0MWRmNWI1ZDdlZWI1Yzg1NjFhNDQwOWQxNGU2NzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrqAvyeoV/Xg7Pe/j+YUMcYznfQU TZrUVjmdLs2J5Aw3qYX3zaTI2ZoUDGhfvlASEcFYLJLD80f0Zvis3s6VgFizKkkI PpIEEqL7ppXRuTiSEyMFcj/OELorxuk/Ruhi+THpcaLrrsASy0+e5SMA/U7KpQDl kTiAGYTyYQSw/F1a4VlwxLZSm4Gq1xQbj3r6sjORLFmGlaQeMPS5TKGRqf2S3Eq6 XTONVTAmTyTLDIu30Gwuv6KDDgOfrmJ1zfw9fEs6Sj86JQz/dzBNR/77Y5W9KL7D yvc9gHaz9TvUf175tQ8lIL6ULm/TP45njqjGb19eeO5aqSMxUJy1CF9GPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjOm3a0HfW11+61yFYaRAnRTmdiMB8GA1UdIwQY MBaAFDWlVeFGvkrl98z+WjwS0/KiVDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgt MDUxY2QzMGNiY2YxLzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgtMDUxY2QzMGNiY2Yx LzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABp5Y6Y4d OZzWLJFVOjnPzOCW4oZ9OUPKqKitAtjvQK7CKdgK2+KbmUgTzFlYGpEDaVsA7s28 DRswYqaSIe/nttyM93drRiVFttmqU4QBBC9qvaFefL+OC5XY41GC/6rNitkkLTuN VpuQGbWTkL7AJ1g80dhXCi0x/0oeYU5x+y7vT1rtg3sZPd5EjjwYcOEjuJNzoykV 9nbkySebPDsmltzFNspdnHeqy+em9tqIjVkaKF9C7zCZS8DBCV1CBTOPGYQC9XrB 3AaZE2hAZtm9hGcvKICu0ff+S9IieOvehAGDUl0/OH3VgnJluf/Ri4YXWaJmu+o1 rjQyOqW3i1cUUA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:31 2025 by rpki-client