This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json) Hash identifier: FM/SgGD1DHpNX3Q7hYjtonP3zWKARC+Sih+7Ev5Dako= Subject key identifier: 36:2A:04:46:10:BF:7A:EC:86:B9:44:B6:D7:C6:04:D7:BD:EB:77:23 Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30 Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730 Certificate serial: 019AF19B918506225E38A86EE732C581F3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: QNum4SI1l4oyN1pYbAjb/9EMhPGW4W2XAJ8NL3H/bVA=) 2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:91:85:06:22:5e:38:a8:6e:e7:32:c5:81:f3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730 Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=362a044610bf7aec86b944b6d7c604d7bdeb7723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:bc:d0:30:a5:b8:b3:ab:db:78:f0:22:0e: a6:6a:2d:76:71:b5:08:08:20:3a:c3:88:aa:77:f3: f8:59:e0:5d:72:1c:49:91:92:dc:a5:ab:9d:c0:79: 0a:18:42:83:50:86:ed:5c:45:a8:14:db:59:06:8e: 36:da:b0:76:cc:25:b5:df:9f:33:84:6b:74:35:e2: 1d:47:62:fd:6d:f3:3b:72:26:f5:92:ef:bb:2d:b9: 89:f4:75:1f:e8:1b:c8:29:10:bd:db:a1:58:ae:01: d9:74:2f:d5:6f:e8:1d:19:d8:10:cf:7d:7e:5a:9c: 78:8b:93:49:35:90:a5:08:bb:b6:7b:f1:f7:40:7d: 32:b8:d4:9a:79:64:9e:b8:e2:ad:14:03:b7:90:b6: d7:22:3f:a8:88:96:0d:0e:1c:13:c8:a1:93:c0:69: b1:90:e9:04:c3:81:77:81:93:7a:18:a8:89:64:81: 7e:1d:4d:db:13:36:cb:23:0c:0c:61:ce:e5:81:8f: de:83:49:be:6f:79:75:c6:89:b9:06:cd:81:1e:81: ae:ac:95:20:d7:5e:48:7a:f3:a9:03:ad:93:65:3a: 66:cb:2a:ea:93:ae:13:6b:1f:e0:7c:68:9b:9f:0d: 3f:e7:a3:20:6b:2a:b2:df:0c:49:4b:e7:4e:a4:73: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2A:04:46:10:BF:7A:EC:86:B9:44:B6:D7:C6:04:D7:BD:EB:77:23 X509v3 Authority Key Identifier: keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:1d:31:2c:95:4c:44:40:89:07:67:06:07:8a:4f:c2:41: 37:7e:4f:ce:64:7c:c9:bf:a1:43:7a:32:dc:7d:2a:84:49:46: ad:f5:79:95:f5:3a:55:2a:8c:68:5d:4f:15:a5:90:76:bd:58: f3:0d:20:32:fc:71:a2:54:75:8b:a1:3c:d2:8c:55:db:09:bd: 92:42:e7:52:db:83:12:10:46:a6:ed:2d:25:5e:17:0c:74:01: 1d:63:09:fb:1b:93:7e:34:db:ad:56:b5:98:7a:51:ee:2f:a7: 75:dd:11:02:18:32:bb:a5:1c:3a:05:c1:71:ff:5a:fe:9d:0b: 7b:7d:a4:14:20:d5:23:05:23:3c:92:1a:8b:88:cb:b5:67:2f: 09:21:a4:56:d3:98:13:43:ec:de:90:f2:ad:b5:2c:19:7e:ac: ba:b6:04:5d:8a:a7:21:52:c8:4b:9b:5d:a5:72:47:9e:12:cc: 37:ea:11:8b:e5:21:e4:a3:d2:16:00:b4:87:e6:d1:26:80:52: 9c:8e:52:5a:12:3f:c4:1e:a6:17:af:10:8e:02:cc:18:78:46: aa:fb:a9:eb:0f:5a:d9:19:7c:fe:73:de:f7:fe:49:7a:9b:3b: 97:9b:33:18:29:e9:8f:28:63:f7:c5:a3:62:2a:67:67:8c:4d: 0b:8b:8a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5GFBiJeOKhu5zLFgfO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YzY1MTczNmUyNDNkNWVhNmNlY2NhNjNhZmRiNGEwMzEy ZDc3MzAwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD EygzNjJhMDQ0NjEwYmY3YWVjODZiOTQ0YjZkN2M2MDRkN2JkZWI3NzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt+80DCluLOr23jwIg6mai12cbUI CCA6w4iqd/P4WeBdchxJkZLcpaudwHkKGEKDUIbtXEWoFNtZBo422rB2zCW1358z hGt0NeIdR2L9bfM7cib1ku+7LbmJ9HUf6BvIKRC926FYrgHZdC/Vb+gdGdgQz31+ Wpx4i5NJNZClCLu2e/H3QH0yuNSaeWSeuOKtFAO3kLbXIj+oiJYNDhwTyKGTwGmx kOkEw4F3gZN6GKiJZIF+HU3bEzbLIwwMYc7lgY/eg0m+b3l1xom5Bs2BHoGurJUg 115IevOpA62TZTpmyyrqk64Tax/gfGibnw0/56Mgayqy3wxJS+dOpHO9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYqBEYQv3rshrlEttfGBNe963cjMB8GA1UdIwQY MBaAFDfGUXNuJD1eps7Mpjr9tKAxLXcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMt YWJlYTYyNTg2OGE4LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMtYWJlYTYyNTg2OGE4 LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesUdMSyV TERAiQdnBgeKT8JBN35PzmR8yb+hQ3oy3H0qhElGrfV5lfU6VSqMaF1PFaWQdr1Y 8w0gMvxxolR1i6E80oxV2wm9kkLnUtuDEhBGpu0tJV4XDHQBHWMJ+xuTfjTbrVa1 mHpR7i+ndd0RAhgyu6UcOgXBcf9a/p0Le32kFCDVIwUjPJIai4jLtWcvCSGkVtOY E0Ps3pDyrbUsGX6surYEXYqnIVLIS5tdpXJHnhLMN+oRi+Uh5KPSFgC0h+bRJoBS nI5SWhI/xB6mF68QjgLMGHhGqvup6w9a2Rl8/nPe9/5Jeps7l5szGCnpjyhj98Wj YipnZ4xNC4uKog== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:32 2025 by rpki-client