This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json) Hash identifier: 78x+0sctfwXXiClpcbO/wzJbwMJzeVGOFe/fBsuLcD4= Subject key identifier: 24:CD:9E:63:BD:47:1E:2B:9D:92:86:E9:04:02:CC:1B:17:C2:32:69 Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d Certificate serial: 019B67683C7DC51F5E61548607298A0E8E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft Manifest number: 0BB3 Signing time: Mon 29 Dec 2025 00:00:43 +0000 Manifest this update: Mon 29 Dec 2025 00:00:43 +0000 Manifest next update: Tue 30 Dec 2025 00:00:43 +0000 Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: qQZPFjAh9i+8rSDlIMelV1RJIDDjNN7lTVN054UWtUI=) 2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:3c:7d:c5:1f:5e:61:54:86:07:29:8a:0e:8e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d Validity Not Before: Dec 29 00:00:43 2025 GMT Not After : Dec 30 00:00:43 2025 GMT Subject: CN=24cd9e63bd471e2b9d9286e90402cc1b17c23269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:be:0d:19:16:ed:c4:55:24:80:2b:a6:df: e8:bb:f5:e5:43:02:10:3e:14:5b:7b:87:73:6f:a6: b4:35:ea:43:90:07:d1:54:12:54:be:a9:64:7f:f8: a2:ee:f2:46:53:65:e9:fc:0b:44:aa:2c:78:a7:92: b1:c4:3f:32:20:f3:23:31:60:08:22:a2:3b:92:c5: da:15:d9:58:35:cf:27:b4:3f:05:30:db:bd:44:20: dd:75:ae:e7:71:72:6b:04:e1:81:9e:8c:25:6e:49: dd:1c:38:12:b2:67:16:8d:52:56:fe:a7:a0:89:c5: fb:76:b0:64:ce:c8:9e:d4:32:23:82:ec:db:26:7d: f3:82:97:e0:e1:6a:b1:80:7c:5f:af:f7:eb:b7:de: d9:d6:e7:ef:17:7c:14:a3:4a:1d:8d:60:3a:7a:02: 19:fd:23:fb:6a:5c:4f:a8:c9:14:69:98:15:5d:77: 1c:67:d2:ba:01:53:c6:4a:97:82:6c:b2:96:41:87: 85:70:f4:03:39:c7:f0:7b:dc:7f:df:dd:c5:f4:c1: 79:20:ad:f6:38:20:b5:99:86:d7:2c:88:09:b3:34: c5:21:95:63:f6:b9:36:f0:65:0a:56:61:a9:68:3b: dc:ca:fe:1c:4f:59:1d:d1:09:dc:56:62:6e:e2:f3: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CD:9E:63:BD:47:1E:2B:9D:92:86:E9:04:02:CC:1B:17:C2:32:69 X509v3 Authority Key Identifier: keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:77:20:ff:c6:4e:08:a5:52:0a:bb:e5:d4:aa:34:23:65:53: 35:51:79:f3:d9:73:3e:ee:a0:0f:7b:05:6e:ce:12:3f:38:0c: ea:df:12:77:42:51:63:a8:2a:4c:77:a9:c6:78:ef:a5:64:f5: e9:66:e9:00:c7:9f:0a:96:85:b8:dd:70:f9:22:4a:6f:84:f8: 67:59:b9:94:1e:40:54:90:3a:82:0b:7b:f4:af:be:e9:2c:5f: 82:d7:fe:99:d4:c6:98:98:82:f9:12:88:f5:a6:c0:60:e4:18: 5c:4a:08:a5:ca:b7:91:c1:95:fa:2a:46:5c:cf:ae:5c:af:22: f9:e9:72:21:26:4d:d2:19:a4:fe:52:f8:4f:df:75:30:87:04: 88:34:69:36:42:cc:d8:3d:04:d1:cd:e9:1b:bc:fc:fc:8e:1e: b4:38:88:95:c2:e7:5b:e3:32:9c:74:c6:58:e3:08:9d:58:50: a8:7b:03:c2:46:0e:a1:2d:b4:87:ce:fd:63:71:50:1c:23:45: 72:32:f5:ed:01:0d:57:02:9f:52:ab:08:d5:c9:ec:00:d9:bb: e1:a2:ba:ae:dc:ae:79:ad:c6:56:6e:ce:8a:16:fc:ba:aa:b3: 18:8f:37:f6:22:95:0a:f5:1e:2d:cf:4b:ff:73:e8:f3:24:8c: 24:29:c0:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaDx9xR9eYVSGBymKDo5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2E1MDAyMjgyOGQ5MDFiZjQyYjI3OThmNzg0NDEwNGIw NTQwNGQwHhcNMjUxMjI5MDAwMDQzWhcNMjUxMjMwMDAwMDQzWjAzMTEwLwYDVQQD EygyNGNkOWU2M2JkNDcxZTJiOWQ5Mjg2ZTkwNDAyY2MxYjE3YzIzMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypq+DRkW7cRVJIArpt/ou/XlQwIQ PhRbe4dzb6a0NepDkAfRVBJUvqlkf/ii7vJGU2Xp/AtEqix4p5KxxD8yIPMjMWAI IqI7ksXaFdlYNc8ntD8FMNu9RCDdda7ncXJrBOGBnowlbkndHDgSsmcWjVJW/qeg icX7drBkzsie1DIjguzbJn3zgpfg4WqxgHxfr/frt97Z1ufvF3wUo0odjWA6egIZ /SP7alxPqMkUaZgVXXccZ9K6AVPGSpeCbLKWQYeFcPQDOcfwe9x/393F9MF5IK32 OCC1mYbXLIgJszTFIZVj9rk28GUKVmGpaDvcyv4cT1kd0QncVmJu4vNXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTNnmO9Rx4rnZKG6QQCzBsXwjJpMB8GA1UdIwQY MBaAFDfKUAIoKNkBv0KyeY94RBBLBUBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYt NWM4MzBmZTRiYWQwLzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYtNWM4MzBmZTRiYWQw LzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzncg/8ZO CKVSCrvl1Ko0I2VTNVF589lzPu6gD3sFbs4SPzgM6t8Sd0JRY6gqTHepxnjvpWT1 6WbpAMefCpaFuN1w+SJKb4T4Z1m5lB5AVJA6ggt79K++6Sxfgtf+mdTGmJiC+RKI 9abAYOQYXEoIpcq3kcGV+ipGXM+uXK8i+elyISZN0hmk/lL4T991MIcEiDRpNkLM 2D0E0c3pG7z8/I4etDiIlcLnW+MynHTGWOMInVhQqHsDwkYOoS20h879Y3FQHCNF cjL17QENVwKfUqsI1cnsANm74aK6rtyuea3GVm7Oihb8uqqzGI839iKVCvUeLc9L /3Po8ySMJCnAqw== -----END CERTIFICATE-----Generated at Mon Dec 29 02:52:08 2025 by rpki-client