This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json) Hash identifier: R5ZC6GE1kJy/PIg81saZIxlPYjetycXlX1FpavQhVsE= Subject key identifier: D7:03:AA:77:80:D6:8E:A5:38:A8:68:55:1B:65:52:FF:6E:8B:F5:3B Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30 Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730 Certificate serial: 019B695707A7768281E9C36663CC83F013BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 09:01:09 +0000 Manifest this update: Mon 29 Dec 2025 09:01:09 +0000 Manifest next update: Tue 30 Dec 2025 09:01:09 +0000 Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: moycT8UNeZaWMjIWSXOzwMQpK5UzSqck4P9e8RhiSqU=) 2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:07:a7:76:82:81:e9:c3:66:63:cc:83:f0:13:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730 Validity Not Before: Dec 29 09:01:09 2025 GMT Not After : Dec 30 09:01:09 2025 GMT Subject: CN=d703aa7780d68ea538a868551b6552ff6e8bf53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:b8:b8:90:a1:e6:86:05:f7:91:e7:3e:80: 31:b2:81:b5:46:6b:d3:06:3b:d4:0e:97:e6:c0:57: de:a5:55:70:44:c8:76:11:a2:4b:0d:a0:f8:9d:33: 17:f9:2b:9f:3a:fa:cb:6d:db:2d:ab:52:5c:96:05: 6b:3f:7c:3f:65:94:8a:79:ce:d7:85:00:15:c8:ec: 6b:b0:a8:5f:31:77:94:b6:9d:73:b3:84:22:1b:e2: a2:be:96:d4:73:3c:e6:2e:f9:68:d9:de:ec:cb:ef: 12:15:74:e2:a9:ed:06:62:c3:00:a1:ee:11:16:4d: 54:26:6d:ef:12:cc:24:60:10:3f:90:63:81:d1:c4: 4f:c5:ca:8a:73:f3:16:ec:c7:e8:16:29:8a:87:38: b7:8e:e4:15:3b:a6:1b:ef:56:de:5b:98:c8:b8:d0: 6b:0a:fa:f7:39:14:d5:e7:15:2d:a3:f7:61:fa:40: 9a:7f:3a:58:8b:f2:62:af:ae:38:4c:91:43:82:8d: 2f:4c:ad:e4:5e:9c:3d:1b:c4:40:8b:5a:52:5d:dd: 13:04:47:5c:8e:88:26:25:d2:91:94:0a:d2:63:ef: 1e:d9:e1:ee:ab:70:cc:15:2e:bb:4a:3e:db:32:61: 0a:cf:24:0a:05:ab:0a:40:a9:ac:0d:91:fc:a3:38: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:03:AA:77:80:D6:8E:A5:38:A8:68:55:1B:65:52:FF:6E:8B:F5:3B X509v3 Authority Key Identifier: keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:94:22:ec:8f:56:fe:db:ad:92:d1:40:2d:42:00:a3:69:9e: 0e:7c:88:03:0c:d5:74:ff:ea:77:e1:47:68:10:8d:c5:f8:c7: 08:60:36:e8:aa:f1:b6:ec:c7:28:c6:4d:d3:fd:b2:6e:57:d3: d5:0e:13:86:47:aa:60:8e:b3:b1:7b:39:ec:d2:d1:1c:31:62: 1e:ca:9f:dd:bd:10:11:61:fe:cd:05:14:04:50:e2:74:68:1b: 97:27:6c:03:e8:fe:95:58:7a:9f:ac:d5:d0:cb:41:3f:e1:d6: 7e:4a:dc:56:ee:b9:25:0a:d7:28:32:df:a4:5e:6b:a5:42:7b: 5b:ef:70:46:5d:75:8b:92:6b:5c:b7:77:e2:a2:41:2d:72:20: e6:2c:af:6f:d9:4a:9b:69:ca:88:d2:e9:77:75:e0:54:75:72: 82:d8:09:36:40:63:ea:93:36:f1:3f:56:0a:29:f6:34:40:5c: 7a:d4:5b:66:f9:23:1c:2a:6d:87:19:e0:5b:e9:66:7b:b2:64: 6a:bd:e8:8e:9e:14:31:ab:cc:7f:97:17:88:72:b8:07:66:3b: 04:55:ae:c8:2b:da:a0:ce:83:26:24:f4:37:67:47:ed:09:38: 7c:0c:01:f5:c7:00:ac:36:56:eb:ba:36:a0:c7:73:3e:0e:20: 13:c4:cc:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVwendoKB6cNmY8yD8BO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YzY1MTczNmUyNDNkNWVhNmNlY2NhNjNhZmRiNGEwMzEy ZDc3MzAwHhcNMjUxMjI5MDkwMTA5WhcNMjUxMjMwMDkwMTA5WjAzMTEwLwYDVQQD EyhkNzAzYWE3NzgwZDY4ZWE1MzhhODY4NTUxYjY1NTJmZjZlOGJmNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOG4uJCh5oYF95HnPoAxsoG1RmvT BjvUDpfmwFfepVVwRMh2EaJLDaD4nTMX+SufOvrLbdstq1JclgVrP3w/ZZSKec7X hQAVyOxrsKhfMXeUtp1zs4QiG+KivpbUczzmLvlo2d7sy+8SFXTiqe0GYsMAoe4R Fk1UJm3vEswkYBA/kGOB0cRPxcqKc/MW7MfoFimKhzi3juQVO6Yb71beW5jIuNBr Cvr3ORTV5xUto/dh+kCafzpYi/Jir644TJFDgo0vTK3kXpw9G8RAi1pSXd0TBEdc jogmJdKRlArSY+8e2eHuq3DMFS67Sj7bMmEKzyQKBasKQKmsDZH8oziNjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcDqneA1o6lOKhoVRtlUv9ui/U7MB8GA1UdIwQY MBaAFDfGUXNuJD1eps7Mpjr9tKAxLXcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMt YWJlYTYyNTg2OGE4LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMtYWJlYTYyNTg2OGE4 LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpQi7I9W /tutktFALUIAo2meDnyIAwzVdP/qd+FHaBCNxfjHCGA26KrxtuzHKMZN0/2yblfT 1Q4ThkeqYI6zsXs57NLRHDFiHsqf3b0QEWH+zQUUBFDidGgblydsA+j+lVh6n6zV 0MtBP+HWfkrcVu65JQrXKDLfpF5rpUJ7W+9wRl11i5JrXLd34qJBLXIg5iyvb9lK m2nKiNLpd3XgVHVygtgJNkBj6pM28T9WCin2NEBcetRbZvkjHCpthxngW+lme7Jk ar3ojp4UMavMf5cXiHK4B2Y7BFWuyCvaoM6DJiT0N2dH7Qk4fAwB9ccArDZW67o2 oMdzPg4gE8TMcg== -----END CERTIFICATE-----Generated at Mon Dec 29 16:28:01 2025 by rpki-client