This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json) Hash identifier: mxj1dK/zT4Ssvdku8urKsN4PngKTicnqE0g49IAgywM= Subject key identifier: 1A:53:C0:BE:BB:07:5E:86:03:0E:52:66:C1:9A:1F:92:A2:DB:B8:03 Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c Certificate serial: 019B3E6C17CBA54B918D901C6A8B78F19537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:00:29 +0000 Manifest this update: Sun 21 Dec 2025 01:00:29 +0000 Manifest next update: Mon 22 Dec 2025 01:00:29 +0000 Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=) 2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: O3GLusykgUu68pLucx4AOSBW75NMpOEjE1ieVBIe0I4=) 3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:17:cb:a5:4b:91:8d:90:1c:6a:8b:78:f1:95:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c Validity Not Before: Dec 21 01:00:29 2025 GMT Not After : Dec 22 01:00:29 2025 GMT Subject: CN=1a53c0bebb075e86030e5266c19a1f92a2dbb803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:2c:47:20:72:4b:ea:83:9a:14:2a:b6:c0: 4e:cc:1a:ef:4d:ea:8f:12:8e:a3:96:0a:35:2f:65: 42:f3:67:a4:a3:9e:02:4d:fa:d1:1d:87:ad:7b:8e: c7:ea:da:91:ff:87:0f:87:00:31:44:2a:b8:4d:22: 34:3e:95:0b:34:41:4a:3f:bc:3f:fd:87:de:f3:d8: 6f:19:46:c4:f2:c1:95:50:70:c1:4d:5e:bb:83:d8: f8:ef:ce:8c:22:7c:30:7d:a5:12:1e:be:d1:6f:ba: b2:e5:1d:26:ea:59:11:9d:9c:38:61:e8:88:ca:f9: 51:ed:1a:a0:ba:e6:ab:d0:94:75:d6:d2:23:80:19: 53:0d:56:46:9a:e5:8b:27:13:95:91:a3:3d:5c:48: 2f:e7:b1:dc:dc:b6:77:25:dd:93:4d:50:22:70:8f: ee:61:ab:5c:dc:4c:5a:aa:c1:00:21:d4:2a:d3:95: 5f:94:38:19:b1:4e:ec:1c:bf:a6:2b:fc:5e:33:1f: e4:1d:c0:94:9d:5f:24:c6:22:0b:7d:bf:5d:e7:4b: a5:7b:0b:23:af:3c:6a:33:fe:99:05:bb:25:d3:2c: d9:ad:a8:35:2d:17:9e:5f:8a:8e:51:39:ac:62:72: cc:62:ea:cd:82:56:2d:cc:a4:6b:f6:09:10:02:b1: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:53:C0:BE:BB:07:5E:86:03:0E:52:66:C1:9A:1F:92:A2:DB:B8:03 X509v3 Authority Key Identifier: keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:42:f3:8f:4e:d6:0c:d6:00:42:56:1e:3b:a9:6f:6c:d4:3d: ca:d7:83:63:dd:8d:44:5a:19:4d:ca:a5:91:40:e0:09:e7:e6: b1:1d:46:59:e0:dd:5e:94:23:2c:a2:3d:8e:d7:69:4f:33:8d: e3:d4:67:a8:2e:b4:2a:18:6b:4f:ce:d0:95:b8:27:ad:39:00: 7a:f8:10:81:24:0a:93:54:7a:2e:d5:f4:4d:8f:cb:5b:3d:84: 20:88:53:52:18:d0:05:c6:55:5c:53:61:57:e8:3e:6b:26:ef: a1:5a:8d:8c:a1:df:cf:59:33:0d:d7:7f:3c:da:f3:17:bb:65: 82:fb:79:38:30:19:a2:8b:28:ad:1e:18:c6:59:df:23:60:f1: 8a:ba:f2:9e:2e:ff:c4:9c:02:76:f1:47:4c:65:69:3d:5e:71: e6:48:bc:e5:f6:d6:e1:12:1d:e3:c8:e7:b4:c8:f1:88:b9:2f: 45:53:c5:d8:1c:d1:0a:ce:f6:84:b4:5d:b6:03:bb:d8:67:dd: 67:2f:c9:e5:25:a4:1e:f6:0e:27:95:b6:5c:6e:91:51:77:68: fb:be:62:82:2d:0c:4b:a8:8f:7b:73:7c:30:ea:b2:a2:db:ac: 56:cc:75:e0:ca:0b:f2:05:9e:4e:f1:e7:66:b1:d3:8c:d2:bc: 78:5d:20:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bBfLpUuRjZAcaot48ZU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz ZWRjMWMwHhcNMjUxMjIxMDEwMDI5WhcNMjUxMjIyMDEwMDI5WjAzMTEwLwYDVQQD EygxYTUzYzBiZWJiMDc1ZTg2MDMwZTUyNjZjMTlhMWY5MmEyZGJiODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui0sRyByS+qDmhQqtsBOzBrvTeqP Eo6jlgo1L2VC82eko54CTfrRHYete47H6tqR/4cPhwAxRCq4TSI0PpULNEFKP7w/ /Yfe89hvGUbE8sGVUHDBTV67g9j4786MInwwfaUSHr7Rb7qy5R0m6lkRnZw4YeiI yvlR7Rqguuar0JR11tIjgBlTDVZGmuWLJxOVkaM9XEgv57Hc3LZ3Jd2TTVAicI/u Yatc3ExaqsEAIdQq05VflDgZsU7sHL+mK/xeMx/kHcCUnV8kxiILfb9d50ulewsj rzxqM/6ZBbsl0yzZrag1LReeX4qOUTmsYnLMYurNglYtzKRr9gkQArGmewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpTwL67B16GAw5SZsGaH5Ki27gDMB8GA1UdIwQY MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqULzj07W DNYAQlYeO6lvbNQ9yteDY92NRFoZTcqlkUDgCefmsR1GWeDdXpQjLKI9jtdpTzON 49RnqC60KhhrT87QlbgnrTkAevgQgSQKk1R6LtX0TY/LWz2EIIhTUhjQBcZVXFNh V+g+aybvoVqNjKHfz1kzDdd/PNrzF7tlgvt5ODAZoosorR4YxlnfI2Dxirryni7/ xJwCdvFHTGVpPV5x5ki85fbW4RId48jntMjxiLkvRVPF2BzRCs72hLRdtgO72Gfd Zy/J5SWkHvYOJ5W2XG6RUXdo+75igi0MS6iPe3N8MOqyotusVsx14MoL8gWeTvHn ZrHTjNK8eF0gzg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:18 2025 by rpki-client