This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json) Hash identifier: J1YJYQOUC0FV9J6d8/p8+mmAJeYVy5UnzxC9WBSuKfM= Subject key identifier: AC:F1:18:A3:56:B5:FA:5D:E7:5A:38:91:4D:58:13:70:7A:E3:79:1E Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d Certificate serial: 019AF5780360AA68CA71DF983EF2846EBEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft Manifest number: 0B78 Signing time: Sat 06 Dec 2025 21:01:14 +0000 Manifest this update: Sat 06 Dec 2025 21:01:14 +0000 Manifest next update: Sun 07 Dec 2025 21:01:14 +0000 Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: 0jV63iEe9rJijLXlZWUCuHUJxHDv0DU5paE4w6QTTVg=) 2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:03:60:aa:68:ca:71:df:98:3e:f2:84:6e:be:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d Validity Not Before: Dec 6 21:01:14 2025 GMT Not After : Dec 7 21:01:14 2025 GMT Subject: CN=acf118a356b5fa5de75a38914d5813707ae3791e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:dc:2c:fb:4d:11:e0:b9:df:3e:ca:dd:a0: 46:d8:82:a7:20:92:e9:1b:dc:54:f7:65:ae:f5:0a: 00:22:56:5f:90:2c:e8:70:21:aa:6b:26:a0:e1:98: 3b:e9:a8:32:51:d1:4a:bb:0f:67:f9:62:87:d8:c6: 13:e2:5a:78:2a:6b:bb:17:18:90:e8:af:4e:58:4d: 49:cb:10:c6:76:7f:3f:b0:e8:e0:3c:d5:49:b8:64: 2c:78:df:1b:ca:d4:b9:84:b4:86:ea:ba:41:07:2e: 5a:cf:cf:14:44:86:25:11:70:b8:9f:f4:bf:84:bd: b1:57:fe:3c:b6:a8:9b:4a:aa:df:a8:f8:23:a5:b1: 06:82:35:74:1d:55:eb:15:e7:e7:14:f2:19:80:91: 1e:de:75:4d:50:15:f9:b0:3a:71:10:60:a5:ed:d5: 16:18:4a:3d:99:53:59:e1:43:2e:9f:0e:c3:9a:51: 79:5f:9c:4c:28:35:f4:fe:42:fb:64:89:06:46:60: 63:fd:ca:f2:9a:f9:49:e6:9f:10:26:20:3d:7d:83: ff:d3:fb:b6:1f:5a:30:42:db:f3:c6:20:ae:41:25: 67:98:4e:a2:85:d4:ca:ad:31:18:e4:a6:e0:2e:e5: 6c:75:4d:c3:71:4c:b8:63:84:3d:36:49:32:6b:da: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F1:18:A3:56:B5:FA:5D:E7:5A:38:91:4D:58:13:70:7A:E3:79:1E X509v3 Authority Key Identifier: keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c3:bb:fc:12:16:4d:d0:22:b9:c0:d9:5c:ce:b1:14:74:ac: 7a:70:34:5b:9a:9d:72:42:ca:7a:61:f6:b2:72:22:a9:38:45: ac:73:c9:8b:12:37:77:68:12:26:26:23:57:87:00:d2:1c:91: 3f:43:11:9f:1e:de:b0:6e:8a:50:26:7f:12:da:5b:f7:ad:a0: 37:b8:fe:96:63:b1:e1:14:e3:bc:b7:a0:97:59:cb:d3:39:20: b3:bf:d7:25:ed:67:ec:36:db:e2:92:cc:57:81:a0:18:25:3f: 44:07:4f:6e:d9:0b:14:ce:9f:26:87:9c:b4:1d:04:99:4d:ba: 99:14:88:c3:2c:2a:fa:a0:5e:13:90:01:18:59:a1:f3:95:4d: 75:7c:a4:4e:8a:dc:e4:c3:ef:ec:7a:cb:d9:cf:f5:de:7a:79: b4:a7:98:21:57:c9:85:cb:c5:43:13:0d:83:be:34:5f:ee:bb: 1c:a4:03:e9:9a:a7:15:1f:05:c4:08:c1:3b:eb:ae:31:17:06: 8f:a7:0e:06:fe:d0:0b:0c:1d:33:74:a4:8d:42:59:ca:4a:55: 02:67:e8:2d:ad:23:3c:4d:31:3c:d0:41:8d:1b:e5:fc:c3:a4: 78:a7:87:a1:47:e1:04:ff:0f:d2:38:5f:9e:07:8f:07:ae:9a: cb:11:fd:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eANgqmjKcd+YPvKEbr7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2E1MDAyMjgyOGQ5MDFiZjQyYjI3OThmNzg0NDEwNGIw NTQwNGQwHhcNMjUxMjA2MjEwMTE0WhcNMjUxMjA3MjEwMTE0WjAzMTEwLwYDVQQD EyhhY2YxMThhMzU2YjVmYTVkZTc1YTM4OTE0ZDU4MTM3MDdhZTM3OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknDcLPtNEeC53z7K3aBG2IKnIJLp G9xU92Wu9QoAIlZfkCzocCGqayag4Zg76agyUdFKuw9n+WKH2MYT4lp4Kmu7FxiQ 6K9OWE1JyxDGdn8/sOjgPNVJuGQseN8bytS5hLSG6rpBBy5az88URIYlEXC4n/S/ hL2xV/48tqibSqrfqPgjpbEGgjV0HVXrFefnFPIZgJEe3nVNUBX5sDpxEGCl7dUW GEo9mVNZ4UMunw7DmlF5X5xMKDX0/kL7ZIkGRmBj/crymvlJ5p8QJiA9fYP/0/u2 H1owQtvzxiCuQSVnmE6ihdTKrTEY5KbgLuVsdU3DcUy4Y4Q9Nkkya9r5vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzxGKNWtfpd51o4kU1YE3B643keMB8GA1UdIwQY MBaAFDfKUAIoKNkBv0KyeY94RBBLBUBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYt NWM4MzBmZTRiYWQwLzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYtNWM4MzBmZTRiYWQw LzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcO7/BIW TdAiucDZXM6xFHSsenA0W5qdckLKemH2snIiqThFrHPJixI3d2gSJiYjV4cA0hyR P0MRnx7esG6KUCZ/Etpb962gN7j+lmOx4RTjvLegl1nL0zkgs7/XJe1n7Dbb4pLM V4GgGCU/RAdPbtkLFM6fJoectB0EmU26mRSIwywq+qBeE5ABGFmh85VNdXykTorc 5MPv7HrL2c/13np5tKeYIVfJhcvFQxMNg740X+67HKQD6ZqnFR8FxAjBO+uuMRcG j6cOBv7QCwwdM3SkjUJZykpVAmfoLa0jPE0xPNBBjRvl/MOkeKeHoUfhBP8P0jhf ngePB66ayxH9Mg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:32:20 2025 by rpki-client