This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: hrsgBiG1cWPtcX7mv8l8J4DykgCjq8uJ5tfHoDvBoLk= Subject key identifier: 68:B4:97:AF:FE:08:AF:95:D1:AB:73:A9:8E:E0:1A:33:0A:05:95:2D Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019B3AC671F8BA0B0F9B96EB11B4D5599887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 0FFF Signing time: Sat 20 Dec 2025 08:00:42 +0000 Manifest this update: Sat 20 Dec 2025 08:00:42 +0000 Manifest next update: Sun 21 Dec 2025 08:00:42 +0000 Files and hashes: 1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=) 2: 6tWl5a8eFbUzEfNoih8c-OFqi5M.roa (hash: nPQyQaRgXoHjIA2ktajZTr/QGc6vcJckxFwuI2DrnzI=) 3: GRA3t_KyWFYxg2CQJHBaXlViSP8.roa (hash: N4cHeR4tmiAj9zbtfRvcPi/r/p86jgb0tb1toEi1byE=) 4: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: EBvzszSmaBOuCN7uJw/ZjrE2APJZP2uuVzpEUIbaAz8=) 5: ZgDs75tq49WzNx-mbPV0VOcMnUo.roa (hash: dGFHkQk1n2qHo9JpwRfTWZBitzuU26dRmqqWQYzC5Vc=) 6: mVQLg2vFtKhXYkiJgy9EzEclH78.roa (hash: 8XlUZL+eJtMSbbcbuZH2lnnnxy7c34P4HzZYP3Ogx2U=) 7: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=) 8: skB4egbM7u7r86GQ4gobtzP81aY.roa (hash: ZN5QoZ1Z/xaovGfuEq8TXCil2/F2l9H4YG9aIDk2RjU=) 9: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:71:f8:ba:0b:0f:9b:96:eb:11:b4:d5:59:98:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Dec 20 08:00:42 2025 GMT Not After : Dec 21 08:00:42 2025 GMT Subject: CN=68b497affe08af95d1ab73a98ee01a330a05952d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:3d:d0:3a:84:f6:dc:d8:67:ae:43:64:95: 08:6e:fa:d2:44:ac:f3:6b:ce:cf:6c:45:91:b7:56: 40:9a:e1:b7:ba:31:c4:ce:68:8a:e9:76:88:a9:b9: 20:66:be:b7:23:9b:d6:60:cb:99:30:91:92:05:3f: 27:21:27:9c:e8:01:76:9d:6a:35:b5:c4:06:4f:cd: 67:19:91:6a:f4:e1:d3:0f:1b:ac:12:f0:48:0f:d5: 66:2a:75:34:1b:ee:0d:48:fe:e1:b3:2c:dc:04:c1: e4:ca:b9:bd:71:a8:99:e8:7f:0c:a9:30:21:99:93: 70:7a:4c:ba:a0:62:04:db:7d:2b:d0:5b:b2:13:82: 0e:ad:07:62:21:e6:d8:ff:6c:b3:b8:45:7c:c7:55: da:79:27:90:cd:b4:6d:49:92:88:85:d9:7a:55:d1: 64:ea:53:7c:3a:30:26:85:c1:8d:65:f8:69:c0:9f: 50:32:f5:d1:d7:1f:8d:09:ee:03:db:07:1a:20:ff: 22:e1:34:46:34:21:84:96:fe:63:71:65:69:cb:38: 37:62:fa:c1:5b:05:6c:11:ad:0c:b2:4b:4c:e3:88: 99:05:a0:09:b1:4d:e0:e4:05:97:44:b6:59:86:3c: e7:58:30:a6:dc:42:04:e8:31:84:2b:df:a8:06:d2: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B4:97:AF:FE:08:AF:95:D1:AB:73:A9:8E:E0:1A:33:0A:05:95:2D X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a5:ed:3e:b3:0d:20:16:d8:7b:40:d2:82:30:d1:b3:35:88: 2e:bb:ba:d7:4a:aa:48:aa:ac:19:90:4e:95:94:d0:cd:86:c1: e5:5a:4b:2b:30:ce:b0:49:14:fd:1d:9d:de:50:a3:61:0b:94: 93:c1:8d:83:12:6a:09:cd:49:e8:d7:c5:9a:92:8c:e1:a8:cc: 1b:29:57:5f:e9:e5:a9:ed:2b:d3:84:69:4c:7b:1d:8b:d8:95: af:7c:82:5b:16:eb:f4:33:3d:b2:f8:e2:1a:64:e8:8c:45:8b: f5:87:8d:1a:b0:e5:7e:4f:13:c8:2a:7d:90:21:1b:b0:fd:63: 06:c8:2a:51:e5:ae:35:03:23:a5:eb:1d:09:ac:82:a3:fc:58: 18:27:70:cc:88:71:d7:7f:18:f2:7c:94:f4:59:cf:6a:03:38: ff:37:e9:dd:f2:09:a9:a3:8a:8c:14:2e:bb:92:c1:d1:19:fc: b6:13:3f:03:8a:f6:51:a9:dd:a3:8c:97:31:e7:98:8d:1d:ec: d2:3a:6d:d9:26:9e:89:2c:67:8b:62:4f:f2:01:f2:be:d6:ac: 00:55:ab:d5:d3:70:6a:e1:b7:d1:4d:4f:67:52:cb:f4:de:94: 86:d3:4b:ef:d3:2a:3e:46:ff:e9:81:f3:86:26:9b:1e:ab:98: 03:83:83:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xnH4ugsPm5brEbTVWZiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjUxMjIwMDgwMDQyWhcNMjUxMjIxMDgwMDQyWjAzMTEwLwYDVQQD Eyg2OGI0OTdhZmZlMDhhZjk1ZDFhYjczYTk4ZWUwMWEzMzBhMDU5NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurQ90DqE9tzYZ65DZJUIbvrSRKzz a87PbEWRt1ZAmuG3ujHEzmiK6XaIqbkgZr63I5vWYMuZMJGSBT8nISec6AF2nWo1 tcQGT81nGZFq9OHTDxusEvBID9VmKnU0G+4NSP7hsyzcBMHkyrm9caiZ6H8MqTAh mZNweky6oGIE230r0FuyE4IOrQdiIebY/2yzuEV8x1XaeSeQzbRtSZKIhdl6VdFk 6lN8OjAmhcGNZfhpwJ9QMvXR1x+NCe4D2wcaIP8i4TRGNCGElv5jcWVpyzg3YvrB WwVsEa0MsktM44iZBaAJsU3g5AWXRLZZhjznWDCm3EIE6DGEK9+oBtIAzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi0l6/+CK+V0atzqY7gGjMKBZUtMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKXtPrMN IBbYe0DSgjDRszWILru610qqSKqsGZBOlZTQzYbB5VpLKzDOsEkU/R2d3lCjYQuU k8GNgxJqCc1J6NfFmpKM4ajMGylXX+nlqe0r04RpTHsdi9iVr3yCWxbr9DM9svji GmTojEWL9YeNGrDlfk8TyCp9kCEbsP1jBsgqUeWuNQMjpesdCayCo/xYGCdwzIhx 138Y8nyU9FnPagM4/zfp3fIJqaOKjBQuu5LB0Rn8thM/A4r2Uando4yXMeeYjR3s 0jpt2SaeiSxni2JP8gHyvtasAFWr1dNwauG30U1PZ1LL9N6UhtNL79MqPkb/6YHz hiabHquYA4ODAg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:53 2025 by rpki-client