This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json) Hash identifier: It5PlwD9Dt3I1GGrITCyHTQYzI5ochUJP7KZxe8xcLI= Subject key identifier: BE:45:28:B8:D9:03:8B:F7:FC:9E:1E:7C:22:D2:82:51:5B:8B:C2:21 Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d Certificate serial: 019AFB43146553ED1D4872790B57E3031A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft Manifest number: 0BFE Signing time: Mon 08 Dec 2025 00:01:08 +0000 Manifest this update: Mon 08 Dec 2025 00:01:08 +0000 Manifest next update: Tue 09 Dec 2025 00:01:08 +0000 Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: MyE3U7aRh8WKsveWm+UlHssG7e5siaCgOtHZshpm7kM=) 2: tDViTLbFVVWzWp648mpw0pgtqtQ.roa (hash: AWegmrkFC3NXllKk74cxCubNxQm6gCshWBp51Ys3Cd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:14:65:53:ed:1d:48:72:79:0b:57:e3:03:1a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d Validity Not Before: Dec 8 00:01:08 2025 GMT Not After : Dec 9 00:01:08 2025 GMT Subject: CN=be4528b8d9038bf7fc9e1e7c22d282515b8bc221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:f6:e1:91:78:90:ba:3b:ba:5d:27:db:13: 18:67:51:e3:17:5a:41:e1:81:cd:89:73:76:2c:3d: b4:e3:d4:68:1f:d0:75:85:41:51:d9:8c:15:ea:ea: 85:02:94:d4:80:44:ad:41:76:78:9b:77:10:46:69: 15:b5:bd:fc:65:93:c3:c9:03:ae:d4:c6:fd:78:92: 14:28:8f:38:99:68:20:e2:f3:59:a9:fe:6c:bd:0e: f0:78:e7:24:1f:e5:99:69:6d:55:9c:9b:a1:77:6b: f1:5e:d2:55:bd:85:b5:97:5f:27:c0:21:e3:f4:df: 05:a5:5b:8b:5d:50:47:88:5f:9a:27:79:54:f5:1b: 0c:0b:be:e4:88:14:a9:bd:50:d5:44:c7:a4:f1:d7: 61:73:bc:68:26:33:45:2a:2c:e1:87:b8:fb:ae:ec: ff:f2:40:83:69:3f:5d:f4:db:cb:4f:be:59:95:6f: 33:74:a8:e7:99:29:16:e4:a4:22:71:a7:4d:54:34: e6:5e:ea:78:31:f0:cd:33:25:c2:89:93:b4:47:6f: f6:77:f0:95:5a:c8:4e:8d:b8:71:d1:75:74:3a:84: 27:04:74:12:a2:4c:22:44:11:94:9e:fb:5b:eb:7d: 6f:1d:5a:da:cc:44:03:2b:63:5c:e7:0a:7b:5b:cd: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:45:28:B8:D9:03:8B:F7:FC:9E:1E:7C:22:D2:82:51:5B:8B:C2:21 X509v3 Authority Key Identifier: keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:27:27:74:72:71:df:b7:e5:bb:f5:6f:f9:d2:d9:8f:ff:67: db:c3:a9:91:a2:71:db:27:f8:ca:90:02:b0:b1:73:bb:e6:17: b8:48:bd:ff:36:0f:e4:5e:06:aa:29:2a:fc:bc:03:83:a7:04: 53:60:7b:c8:9c:b4:8e:4a:97:e6:71:25:1b:2b:9c:36:db:63: 83:44:2f:66:58:8b:84:b3:06:9a:66:20:87:3e:6c:ce:45:b8: 98:84:fb:0e:5c:37:a0:39:d6:b3:63:b6:06:a5:e1:e3:26:7a: c0:b9:c1:70:d0:23:5b:20:3a:61:a7:fa:d4:1b:f5:3b:70:2d: 3e:07:d1:b5:4f:4b:06:98:4c:66:08:a1:0b:88:5e:8d:03:38: 04:f5:95:68:df:8e:df:31:f5:5a:c0:3b:26:6b:29:d8:fc:ed: bb:26:3c:bb:2c:cc:00:de:7b:19:87:ec:92:88:af:62:9b:0a: a2:36:fe:c4:c3:33:b0:4b:72:8e:70:16:6f:90:40:cd:92:04: 0b:28:e3:01:75:e7:d5:73:3b:64:50:3d:4c:7c:f9:71:5e:80: 92:06:74:2f:59:e2:bb:75:49:f3:cb:27:9b:4b:27:06:13:95: 5f:d9:ca:77:f1:3d:a3:d7:f2:b0:80:d3:ea:7d:8f:c5:4b:4c: eb:83:8f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QxRlU+0dSHJ5C1fjAxp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1 NzNmN2QwHhcNMjUxMjA4MDAwMTA4WhcNMjUxMjA5MDAwMTA4WjAzMTEwLwYDVQQD EyhiZTQ1MjhiOGQ5MDM4YmY3ZmM5ZTFlN2MyMmQyODI1MTViOGJjMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyX24ZF4kLo7ul0n2xMYZ1HjF1pB 4YHNiXN2LD2049RoH9B1hUFR2YwV6uqFApTUgEStQXZ4m3cQRmkVtb38ZZPDyQOu 1Mb9eJIUKI84mWgg4vNZqf5svQ7weOckH+WZaW1VnJuhd2vxXtJVvYW1l18nwCHj 9N8FpVuLXVBHiF+aJ3lU9RsMC77kiBSpvVDVRMek8ddhc7xoJjNFKizhh7j7ruz/ 8kCDaT9d9NvLT75ZlW8zdKjnmSkW5KQicadNVDTmXup4MfDNMyXCiZO0R2/2d/CV WshOjbhx0XV0OoQnBHQSokwiRBGUnvtb631vHVrazEQDK2Nc5wp7W82GQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5FKLjZA4v3/J4efCLSglFbi8IhMB8GA1UdIwQY MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQScndHJx 37flu/Vv+dLZj/9n28OpkaJx2yf4ypACsLFzu+YXuEi9/zYP5F4Gqikq/LwDg6cE U2B7yJy0jkqX5nElGyucNttjg0QvZliLhLMGmmYghz5szkW4mIT7Dlw3oDnWs2O2 BqXh4yZ6wLnBcNAjWyA6Yaf61Bv1O3AtPgfRtU9LBphMZgihC4hejQM4BPWVaN+O 3zH1WsA7Jmsp2PztuyY8uyzMAN57GYfskoivYpsKojb+xMMzsEtyjnAWb5BAzZIE CyjjAXXn1XM7ZFA9THz5cV6AkgZ0L1niu3VJ88snm0snBhOVX9nKd/E9o9fysIDT 6n2PxUtM64OP8A== -----END CERTIFICATE-----Generated at Mon Dec 8 10:11:15 2025 by rpki-client