This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json) Hash identifier: wxAb8qhyV1wAaYJxGOpLfFpFiqZKVkLGaRoWgrf5194= Subject key identifier: 3E:EA:E3:F3:60:EF:4E:B9:B8:1A:19:15:50:9E:A7:C1:54:06:12:E6 Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d Certificate serial: 019B8A2BC8A4F346C8D949C0A2EA53B274D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft Manifest number: 0BC6 Signing time: Sun 04 Jan 2026 18:01:23 +0000 Manifest this update: Sun 04 Jan 2026 18:01:23 +0000 Manifest next update: Mon 05 Jan 2026 18:01:23 +0000 Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: qVpxSPvFFFYCP4x7UwJGaYYMZ94ipapJ2AvVCW3jlxc=) 2: T8qj0TqqRzvgZV6bToFz4c0FM-4.roa (hash: RUkC3kCoEXyWtFRshNXK5Ou2vFrdu7iWv96bVF4GwyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:2b:c8:a4:f3:46:c8:d9:49:c0:a2:ea:53:b2:74:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d Validity Not Before: Jan 4 18:01:23 2026 GMT Not After : Jan 5 18:01:23 2026 GMT Subject: CN=3eeae3f360ef4eb9b81a1915509ea7c1540612e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:f7:85:72:11:84:0a:5a:0c:b8:f7:87:06: 74:7f:b9:d2:9b:d9:fe:6d:4d:56:87:28:85:45:5a: 35:39:97:ff:f5:de:92:59:87:81:0c:fa:3a:6d:5d: 63:b5:2b:8d:14:6d:58:6e:cf:00:5e:ab:16:f9:25: 17:39:e8:fa:dd:b9:93:5b:31:66:98:e3:b2:a0:7f: a3:f4:a8:17:36:08:cd:31:a7:c7:c5:85:c5:51:cf: 30:98:d8:5d:43:b3:1e:56:4a:b4:de:e1:c0:67:08: 01:c7:7d:84:e3:21:c4:31:84:1b:09:ad:3d:ae:dc: 61:11:05:cc:84:db:0f:f2:0b:14:b1:31:02:9b:6f: 2f:51:ea:c6:1c:eb:86:d1:bf:ac:df:68:fb:b6:93: 0e:36:32:42:dd:12:65:bb:6f:a6:13:82:c4:26:ad: d4:ae:fd:8f:c8:3a:d6:ac:66:82:41:07:c8:d8:0b: 19:e7:dc:f9:a9:c5:18:73:84:f0:bc:13:0b:1f:3c: 0d:e2:f8:60:64:72:10:a5:c5:b3:35:1a:bf:67:e4: c5:13:02:10:65:ef:96:e6:7e:af:da:54:0d:0b:c7: 1c:34:e8:a4:c0:01:7b:84:ed:c2:2a:98:68:b2:d9: 1b:0e:26:f0:d1:5c:cd:9f:49:17:a8:1a:68:58:e3: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:E3:F3:60:EF:4E:B9:B8:1A:19:15:50:9E:A7:C1:54:06:12:E6 X509v3 Authority Key Identifier: keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0b:ec:62:0b:64:22:50:d7:33:9a:5e:fb:c7:5c:4a:9b:e0: 5d:9f:c1:e2:b1:5c:8e:27:81:d3:67:ee:e8:ff:b6:f3:c1:ce: 19:e0:a9:9c:03:43:e6:53:cb:4d:c4:5f:37:09:11:9f:b1:2b: f1:22:38:34:ed:2e:a5:37:cd:36:e0:9c:5d:2d:be:4a:4e:f5: 74:e7:56:e9:84:a9:aa:4e:ca:62:0c:dc:d5:d7:39:d3:98:f8: c6:a0:df:89:73:2e:a0:5f:5e:36:4d:7e:5c:de:7e:33:06:9f: 38:21:30:d8:8a:6e:4d:2a:76:fa:08:16:86:20:59:b2:65:a3: 63:a2:0b:ba:57:1a:20:96:b1:d9:06:1d:d5:22:99:dd:a7:c0: 9b:25:3f:7c:b7:9c:46:84:94:41:d2:2e:46:e9:6d:e9:2e:a6: cc:f8:70:4a:8a:c0:c8:70:08:70:c9:41:5e:8f:28:c8:98:dc: 19:4e:45:dc:b8:77:e6:24:ce:40:ef:8d:f1:a6:ca:e2:1a:f4: 32:18:a6:f1:65:7f:ee:04:e9:43:54:ba:74:3a:be:9f:04:1f: 31:c6:73:17:1b:4e:1d:6a:b4:fc:9a:e0:7d:b1:1e:7f:d1:65: 7c:f1:2a:13:67:8d:62:06:31:fb:a7:c3:0c:0a:b6:48:bc:35: 2c:5d:56:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKK8ik80bI2UnAoupTsnTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2E1MDAyMjgyOGQ5MDFiZjQyYjI3OThmNzg0NDEwNGIw NTQwNGQwHhcNMjYwMTA0MTgwMTIzWhcNMjYwMTA1MTgwMTIzWjAzMTEwLwYDVQQD EygzZWVhZTNmMzYwZWY0ZWI5YjgxYTE5MTU1MDllYTdjMTU0MDYxMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYT3hXIRhApaDLj3hwZ0f7nSm9n+ bU1WhyiFRVo1OZf/9d6SWYeBDPo6bV1jtSuNFG1Ybs8AXqsW+SUXOej63bmTWzFm mOOyoH+j9KgXNgjNMafHxYXFUc8wmNhdQ7MeVkq03uHAZwgBx32E4yHEMYQbCa09 rtxhEQXMhNsP8gsUsTECm28vUerGHOuG0b+s32j7tpMONjJC3RJlu2+mE4LEJq3U rv2PyDrWrGaCQQfI2AsZ59z5qcUYc4TwvBMLHzwN4vhgZHIQpcWzNRq/Z+TFEwIQ Ze+W5n6v2lQNC8ccNOikwAF7hO3CKphostkbDibw0VzNn0kXqBpoWOOVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7q4/Ng7065uBoZFVCep8FUBhLmMB8GA1UdIwQY MBaAFDfKUAIoKNkBv0KyeY94RBBLBUBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYt NWM4MzBmZTRiYWQwLzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYtNWM4MzBmZTRiYWQw LzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAvsYgtk IlDXM5pe+8dcSpvgXZ/B4rFcjieB02fu6P+288HOGeCpnAND5lPLTcRfNwkRn7Er 8SI4NO0upTfNNuCcXS2+Sk71dOdW6YSpqk7KYgzc1dc505j4xqDfiXMuoF9eNk1+ XN5+MwafOCEw2IpuTSp2+ggWhiBZsmWjY6ILulcaIJax2QYd1SKZ3afAmyU/fLec RoSUQdIuRult6S6mzPhwSorAyHAIcMlBXo8oyJjcGU5F3Lh35iTOQO+N8abK4hr0 Mhim8WV/7gTpQ1S6dDq+nwQfMcZzFxtOHWq0/JrgfbEef9FlfPEqE2eNYgYx+6fD DAq2SLw1LF1W4g== -----END CERTIFICATE-----Generated at Mon Jan 5 03:05:13 2026 by rpki-client