This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json) Hash identifier: HvnKJlLBAT55tuzXyVOSTjMSZTvhPtHXYPZjTwSQYG8= Subject key identifier: D7:0A:74:36:AB:BE:64:69:15:D3:B6:92:AD:07:2A:57:55:55:FC:52 Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d Certificate serial: 019B5FAF4AD2FCE10E3D2F8A9845A9D0AE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft Manifest number: 0C32 Signing time: Sat 27 Dec 2025 12:01:21 +0000 Manifest this update: Sat 27 Dec 2025 12:01:21 +0000 Manifest next update: Sun 28 Dec 2025 12:01:21 +0000 Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: 8sPQytVwvic034PlfGfATvwDagxe6lAg+fxcCvjJgMY=) 2: tDViTLbFVVWzWp648mpw0pgtqtQ.roa (hash: AWegmrkFC3NXllKk74cxCubNxQm6gCshWBp51Ys3Cd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:4a:d2:fc:e1:0e:3d:2f:8a:98:45:a9:d0:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d Validity Not Before: Dec 27 12:01:21 2025 GMT Not After : Dec 28 12:01:21 2025 GMT Subject: CN=d70a7436abbe646915d3b692ad072a575555fc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:29:50:64:ce:f0:53:b5:5c:30:95:fc:f3: cc:59:19:bb:8d:95:d0:66:4d:c8:8d:b5:4c:0b:46: 28:71:23:e1:f7:e7:89:c9:20:85:50:57:01:6d:dd: 2c:d7:5e:95:fc:87:29:c0:b1:ed:6b:d8:da:15:08: 08:14:ae:46:47:a2:d5:6d:43:af:cf:ba:aa:88:34: 60:06:a3:e5:74:ed:e0:c6:ea:1c:dc:9b:19:b7:36: 19:a0:7e:c8:09:cd:05:92:12:bb:05:11:dc:94:3a: e0:eb:3e:5d:10:dd:79:32:f5:97:20:fc:20:9d:0b: 03:7e:da:cd:cc:3c:5f:f7:ff:29:5e:96:40:b0:6a: 58:25:ea:da:f8:ee:b4:76:68:e9:18:28:37:da:09: 38:34:92:d1:ec:13:b3:aa:f9:8e:cb:b1:e6:e3:9f: 04:8c:15:9f:74:67:05:72:41:43:a3:a6:e0:ba:05: 47:f3:8a:9e:4d:50:48:72:73:d9:82:15:1d:6e:7b: d4:fc:38:65:78:22:c1:86:db:29:71:2c:a5:ea:b2: bd:ec:4a:d8:23:2a:9d:a8:12:0e:c8:a2:9e:bc:d7: 88:3a:15:90:fc:53:4e:74:47:5b:d4:f5:dc:b4:1b: 1a:46:a4:c3:94:50:85:0c:1f:c2:10:65:bb:96:ae: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:74:36:AB:BE:64:69:15:D3:B6:92:AD:07:2A:57:55:55:FC:52 X509v3 Authority Key Identifier: keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:60:6f:42:03:33:b1:0a:bd:d3:f3:9a:96:5e:a5:c8:3c:a6: 4a:6d:9d:15:3a:b1:bb:ef:27:e7:42:d2:9d:07:53:51:1f:43: 4a:3e:42:8c:56:74:a5:77:0f:45:9a:46:df:0f:8d:87:84:64: 89:94:e1:27:13:96:57:0f:2e:f6:8c:7d:e5:3c:bf:b7:7b:02: 8d:1d:a7:00:af:b5:97:06:ae:92:d8:bc:76:09:8a:af:30:54: 37:ae:e1:52:74:f6:18:be:6e:4d:02:04:02:74:f3:67:35:ac: db:f8:57:dd:b6:fb:5e:1d:a9:f2:72:48:8e:73:24:9f:be:b5: cd:7c:78:cc:c1:cc:77:40:30:8a:d6:0d:e8:74:7e:46:e1:1d: ff:6e:10:66:1a:54:3f:18:e9:1f:b0:ee:8a:e3:c1:c5:14:5c: 97:8e:51:26:2c:9c:09:3e:61:49:0c:1e:77:d8:25:30:22:03: 7d:2a:a8:4a:66:93:84:99:3f:fd:3a:49:0a:d2:8d:c2:ef:c4: a9:d7:d5:34:c5:20:b8:71:34:29:61:6d:d7:89:47:fc:0c:f7: ba:ee:d1:a0:ba:6a:10:5b:14:26:b3:aa:38:e8:c2:83:39:22: 2f:c5:99:54:1d:0e:6c:a6:9e:13:71:eb:71:23:d1:da:91:24: 92:62:e0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr0rS/OEOPS+KmEWp0K49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1 NzNmN2QwHhcNMjUxMjI3MTIwMTIxWhcNMjUxMjI4MTIwMTIxWjAzMTEwLwYDVQQD EyhkNzBhNzQzNmFiYmU2NDY5MTVkM2I2OTJhZDA3MmE1NzU1NTVmYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNgpUGTO8FO1XDCV/PPMWRm7jZXQ Zk3IjbVMC0YocSPh9+eJySCFUFcBbd0s116V/IcpwLHta9jaFQgIFK5GR6LVbUOv z7qqiDRgBqPldO3gxuoc3JsZtzYZoH7ICc0FkhK7BRHclDrg6z5dEN15MvWXIPwg nQsDftrNzDxf9/8pXpZAsGpYJera+O60dmjpGCg32gk4NJLR7BOzqvmOy7Hm458E jBWfdGcFckFDo6bgugVH84qeTVBIcnPZghUdbnvU/DhleCLBhtspcSyl6rK97ErY IyqdqBIOyKKevNeIOhWQ/FNOdEdb1PXctBsaRqTDlFCFDB/CEGW7lq5n9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcKdDarvmRpFdO2kq0HKldVVfxSMB8GA1UdIwQY MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWBvQgMz sQq90/Oall6lyDymSm2dFTqxu+8n50LSnQdTUR9DSj5CjFZ0pXcPRZpG3w+Nh4Rk iZThJxOWVw8u9ox95Ty/t3sCjR2nAK+1lwaukti8dgmKrzBUN67hUnT2GL5uTQIE AnTzZzWs2/hX3bb7Xh2p8nJIjnMkn761zXx4zMHMd0AwitYN6HR+RuEd/24QZhpU PxjpH7DuiuPBxRRcl45RJiycCT5hSQwed9glMCIDfSqoSmaThJk//TpJCtKNwu/E qdfVNMUguHE0KWFt14lH/Az3uu7RoLpqEFsUJrOqOOjCgzkiL8WZVB0ObKaeE3Hr cSPR2pEkkmLgrQ== -----END CERTIFICATE-----Generated at Sat Dec 27 21:03:28 2025 by rpki-client