This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json) Hash identifier: TQc0iVjPxoQ31a0GrYVZEuIcntMT4cchKi3tY0g13cw= Subject key identifier: 29:D4:D3:3C:75:40:F8:7B:D6:A4:4E:0D:AB:40:2D:B5:5E:9E:A5:31 Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d Certificate serial: 019B59E42EDDFEFCBBEFB373445EA4944634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft Manifest number: 0C2F Signing time: Fri 26 Dec 2025 09:01:24 +0000 Manifest this update: Fri 26 Dec 2025 09:01:24 +0000 Manifest next update: Sat 27 Dec 2025 09:01:24 +0000 Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: kmexfvq0rixtZOaB3qsAssAR6A6pmcDOE0VFmvOXxwA=) 2: tDViTLbFVVWzWp648mpw0pgtqtQ.roa (hash: AWegmrkFC3NXllKk74cxCubNxQm6gCshWBp51Ys3Cd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:2e:dd:fe:fc:bb:ef:b3:73:44:5e:a4:94:46:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d Validity Not Before: Dec 26 09:01:24 2025 GMT Not After : Dec 27 09:01:24 2025 GMT Subject: CN=29d4d33c7540f87bd6a44e0dab402db55e9ea531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:5b:a3:17:56:79:0f:dc:f6:99:a8:bb:60: 24:eb:0e:ff:2b:16:24:06:7d:35:7b:73:19:b4:d1: 89:5f:16:73:f9:46:ff:c8:63:08:31:dd:cd:c7:3f: e0:7f:d6:be:34:dc:7f:11:45:17:8d:e6:1f:3b:0e: 52:47:87:b1:11:f7:03:9b:d1:3e:82:34:72:62:eb: 10:ee:c3:81:05:e7:fd:08:68:6a:5c:20:f5:d2:80: c4:17:79:d1:d7:d6:fe:66:17:aa:82:0b:ec:59:9f: ef:99:ab:57:c2:ed:88:38:bb:7b:14:a5:e9:ed:2e: 0a:20:b6:17:d1:7e:91:4f:10:73:6f:67:5d:72:a2: 54:e6:bb:5b:40:6d:60:7c:34:b2:66:0c:13:08:af: b2:70:22:a8:c8:db:7a:20:d5:bd:ce:fb:37:be:18: 14:d9:89:02:13:27:d0:48:d2:4a:3c:ef:33:29:a0: c6:ca:2f:7c:be:35:66:9a:b1:ce:10:4f:bb:d3:86: 5e:7d:13:9d:cc:84:2a:0a:96:7b:aa:b9:06:d9:0c: 7e:b6:40:bf:ef:c1:0b:73:bc:0f:dd:79:dc:61:98: 19:55:fa:34:df:ce:1f:57:ed:00:1d:c1:36:42:08: 35:f9:50:67:64:83:24:7f:77:6f:6e:45:a4:8f:c6: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D4:D3:3C:75:40:F8:7B:D6:A4:4E:0D:AB:40:2D:B5:5E:9E:A5:31 X509v3 Authority Key Identifier: keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2b:cf:4f:4e:7b:ca:0b:53:09:03:3f:6b:e2:9c:60:64:c3: b2:68:fa:9e:0b:cc:e1:ae:bd:72:7f:02:fb:e1:50:d5:f4:73: 66:ff:59:30:9d:58:a2:07:f5:48:8d:b3:c9:8f:a8:fb:64:88: 0b:36:f3:0e:1b:ff:ca:83:03:5d:cb:7f:e5:24:13:fb:5a:e0: 63:37:b3:98:00:43:d5:4d:6e:1a:73:a4:0f:5d:e3:b5:30:cc: ad:63:e5:d6:5d:4a:3e:4c:12:cd:b0:35:90:7f:d0:56:61:5a: e5:12:20:fc:3c:7f:c3:4d:8b:b9:fb:d9:f1:f8:7d:e3:58:78: 7c:cc:97:03:ce:47:5e:4e:53:3d:aa:95:8f:bb:49:27:55:fd: 72:19:a2:26:65:91:f4:99:0e:d9:3d:31:0d:9b:d9:06:b5:39: 92:99:ac:ce:a4:24:01:03:bc:60:aa:8e:f3:5f:4e:98:da:ab: 5c:08:bb:b3:93:9e:c4:08:3c:8c:d4:3e:d6:f3:75:b1:ec:14: 67:f3:57:b6:6f:52:d0:10:d2:e6:89:7e:df:70:4f:18:ab:2f: fb:4e:3c:57:2a:6f:70:c9:24:13:06:ea:35:96:2f:2f:2c:8d: 41:7b:33:91:f7:fc:4e:14:6e:b0:59:69:5c:ac:1a:46:85:4a: cc:e7:59:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5C7d/vy777NzRF6klEY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1 NzNmN2QwHhcNMjUxMjI2MDkwMTI0WhcNMjUxMjI3MDkwMTI0WjAzMTEwLwYDVQQD EygyOWQ0ZDMzYzc1NDBmODdiZDZhNDRlMGRhYjQwMmRiNTVlOWVhNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiedboxdWeQ/c9pmou2Ak6w7/KxYk Bn01e3MZtNGJXxZz+Ub/yGMIMd3Nxz/gf9a+NNx/EUUXjeYfOw5SR4exEfcDm9E+ gjRyYusQ7sOBBef9CGhqXCD10oDEF3nR19b+ZheqggvsWZ/vmatXwu2IOLt7FKXp 7S4KILYX0X6RTxBzb2ddcqJU5rtbQG1gfDSyZgwTCK+ycCKoyNt6INW9zvs3vhgU 2YkCEyfQSNJKPO8zKaDGyi98vjVmmrHOEE+704ZefROdzIQqCpZ7qrkG2Qx+tkC/ 78ELc7wP3XncYZgZVfo0384fV+0AHcE2Qgg1+VBnZIMkf3dvbkWkj8afjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnU0zx1QPh71qRODatALbVenqUxMB8GA1UdIwQY MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaivPT057 ygtTCQM/a+KcYGTDsmj6ngvM4a69cn8C++FQ1fRzZv9ZMJ1Yogf1SI2zyY+o+2SI CzbzDhv/yoMDXct/5SQT+1rgYzezmABD1U1uGnOkD13jtTDMrWPl1l1KPkwSzbA1 kH/QVmFa5RIg/Dx/w02LufvZ8fh941h4fMyXA85HXk5TPaqVj7tJJ1X9chmiJmWR 9JkO2T0xDZvZBrU5kpmszqQkAQO8YKqO819OmNqrXAi7s5OexAg8jNQ+1vN1sewU Z/NXtm9S0BDS5ol+33BPGKsv+048VypvcMkkEwbqNZYvLyyNQXszkff8ThRusFlp XKwaRoVKzOdZpg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:41:22 2025 by rpki-client