This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json) Hash identifier: 7bldOfepxQtQ1FN1D1aLFPavb8PJK5UdM7n0qaOt1C0= Subject key identifier: 35:79:FB:2E:92:BC:C1:9C:25:02:38:37:F2:E7:4F:42:A4:23:F1:9D Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d Certificate serial: 019B4A70DC18FB233EF7C090B4D35CBEB660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft Manifest number: 0BA4 Signing time: Tue 23 Dec 2025 09:01:08 +0000 Manifest this update: Tue 23 Dec 2025 09:01:08 +0000 Manifest next update: Wed 24 Dec 2025 09:01:08 +0000 Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: flEV5yUu0l4fA2vmYxJrBiNSwNmCIUSLfu6lO4gnfGg=) 2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:dc:18:fb:23:3e:f7:c0:90:b4:d3:5c:be:b6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d Validity Not Before: Dec 23 09:01:08 2025 GMT Not After : Dec 24 09:01:08 2025 GMT Subject: CN=3579fb2e92bcc19c25023837f2e74f42a423f19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:72:fa:96:0d:7b:fd:84:1b:93:be:fd:f3: 56:46:4f:eb:66:c9:48:a1:09:4b:db:31:f7:2a:e2: d5:8c:aa:f8:a7:37:f8:44:a8:3b:27:ee:2f:9c:f9: 57:4e:cd:1c:91:99:43:7f:40:dd:43:9b:24:a5:0d: 72:68:b4:7b:46:73:4d:7d:34:0e:f9:a6:4a:5e:f0: 87:8e:b6:59:30:1e:43:58:2f:89:b8:26:57:3d:80: a4:39:9f:3c:41:69:31:b0:d1:41:9b:a1:91:ea:07: a5:49:70:77:2b:8c:bf:f7:31:5c:8a:02:64:3a:6d: ba:d3:ee:1d:1b:b1:ba:fd:3b:53:c0:35:6d:46:a3: 3a:4e:52:e2:61:19:f2:84:ba:22:ae:b3:34:26:b9: 95:cc:e9:f4:b4:5a:2c:2c:33:3c:f5:66:cf:4d:66: 64:c6:37:8e:34:2b:d5:ec:a8:3a:97:e7:f3:f9:8c: 9a:ac:d3:74:fd:1d:3a:76:99:62:e4:a6:ed:74:24: 50:71:bb:32:ca:ac:2f:53:f4:b8:d3:4a:75:d8:97: b0:fc:d1:9c:6f:52:2f:e9:bb:f6:ef:eb:4b:18:06: 9e:ff:70:f2:c3:27:48:7d:86:94:e5:3d:e3:39:93: c1:af:1f:ff:76:e2:ad:e2:69:03:33:91:f7:2d:54: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:FB:2E:92:BC:C1:9C:25:02:38:37:F2:E7:4F:42:A4:23:F1:9D X509v3 Authority Key Identifier: keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:99:72:8d:70:e8:69:81:02:a5:ac:b9:d9:43:1a:36:15:d7: c4:a2:bd:49:2f:4c:fe:8f:b3:28:a9:d9:73:84:17:56:f0:7d: 20:18:d9:e6:a5:5e:61:03:c1:3c:2f:f9:40:c4:7a:c8:ff:f0: 74:3f:ba:49:cc:46:66:17:5d:0e:ca:f3:d5:46:fb:b6:30:88: bf:f9:05:cd:e5:73:10:15:fd:7d:a4:05:54:fa:fc:15:1a:25: 58:7a:8d:d0:8d:6a:ac:0a:60:d6:3d:bf:93:c9:43:28:2a:af: 9e:cf:f1:13:e4:7a:c1:b9:6b:e5:dd:99:55:f5:21:40:94:2e: 5a:26:91:e1:92:50:a0:31:a9:cb:c2:01:0b:d4:d5:73:4e:71: da:64:c3:ff:3a:30:31:70:8a:51:4b:24:57:93:3a:03:fc:fb: 90:af:3d:1f:5c:ac:bc:88:db:c3:06:5b:22:79:89:3e:a3:dd: af:5d:ad:62:fa:33:bb:f5:71:52:b3:a5:25:6e:13:de:2b:cc: dd:05:cd:c6:cf:84:76:f7:fa:46:ed:3a:63:d6:b0:bb:26:d5: 6c:f9:cf:bc:c5:81:29:82:69:e0:db:40:49:b0:35:da:4f:53: 3d:9d:06:86:14:43:f6:ea:8e:cc:28:93:95:d5:44:9c:75:33: f1:e3:a1:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcNwY+yM+98CQtNNcvrZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2E1MDAyMjgyOGQ5MDFiZjQyYjI3OThmNzg0NDEwNGIw NTQwNGQwHhcNMjUxMjIzMDkwMTA4WhcNMjUxMjI0MDkwMTA4WjAzMTEwLwYDVQQD EygzNTc5ZmIyZTkyYmNjMTljMjUwMjM4MzdmMmU3NGY0MmE0MjNmMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcly+pYNe/2EG5O+/fNWRk/rZslI oQlL2zH3KuLVjKr4pzf4RKg7J+4vnPlXTs0ckZlDf0DdQ5skpQ1yaLR7RnNNfTQO +aZKXvCHjrZZMB5DWC+JuCZXPYCkOZ88QWkxsNFBm6GR6gelSXB3K4y/9zFcigJk Om260+4dG7G6/TtTwDVtRqM6TlLiYRnyhLoirrM0JrmVzOn0tFosLDM89WbPTWZk xjeONCvV7Kg6l+fz+YyarNN0/R06dpli5KbtdCRQcbsyyqwvU/S400p12Jew/NGc b1Iv6bv27+tLGAae/3DywydIfYaU5T3jOZPBrx//duKt4mkDM5H3LVQUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDV5+y6SvMGcJQI4N/LnT0KkI/GdMB8GA1UdIwQY MBaAFDfKUAIoKNkBv0KyeY94RBBLBUBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYt NWM4MzBmZTRiYWQwLzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYtNWM4MzBmZTRiYWQw LzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJlyjXDo aYECpay52UMaNhXXxKK9SS9M/o+zKKnZc4QXVvB9IBjZ5qVeYQPBPC/5QMR6yP/w dD+6ScxGZhddDsrz1Ub7tjCIv/kFzeVzEBX9faQFVPr8FRolWHqN0I1qrApg1j2/ k8lDKCqvns/xE+R6wblr5d2ZVfUhQJQuWiaR4ZJQoDGpy8IBC9TVc05x2mTD/zow MXCKUUskV5M6A/z7kK89H1ysvIjbwwZbInmJPqPdr12tYvozu/VxUrOlJW4T3ivM 3QXNxs+Edvf6Ru06Y9awuybVbPnPvMWBKYJp4NtASbA12k9TPZ0GhhRD9uqOzCiT ldVEnHUz8eOhvw== -----END CERTIFICATE-----Generated at Tue Dec 23 13:04:41 2025 by rpki-client