This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: /gNlGYOjrIv7RnNi/T4v3HNN24yxkThk62nGQXqzF/w= Subject key identifier: 5E:A2:57:B4:0A:EB:68:1F:0F:C7:8D:4E:5F:BB:A5:A0:D8:11:F7:B2 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019B4091F8B84CD70DBF77A6002A68049FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1002 Signing time: Sun 21 Dec 2025 11:01:06 +0000 Manifest this update: Sun 21 Dec 2025 11:01:06 +0000 Manifest next update: Mon 22 Dec 2025 11:01:06 +0000 Files and hashes: 1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=) 2: 6tWl5a8eFbUzEfNoih8c-OFqi5M.roa (hash: nPQyQaRgXoHjIA2ktajZTr/QGc6vcJckxFwuI2DrnzI=) 3: GRA3t_KyWFYxg2CQJHBaXlViSP8.roa (hash: N4cHeR4tmiAj9zbtfRvcPi/r/p86jgb0tb1toEi1byE=) 4: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 9W0OMWRc/FhoLb5PSLDEJy7Vn2aR2hfukyhr6sOUrJY=) 5: ZgDs75tq49WzNx-mbPV0VOcMnUo.roa (hash: dGFHkQk1n2qHo9JpwRfTWZBitzuU26dRmqqWQYzC5Vc=) 6: mVQLg2vFtKhXYkiJgy9EzEclH78.roa (hash: 8XlUZL+eJtMSbbcbuZH2lnnnxy7c34P4HzZYP3Ogx2U=) 7: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=) 8: skB4egbM7u7r86GQ4gobtzP81aY.roa (hash: ZN5QoZ1Z/xaovGfuEq8TXCil2/F2l9H4YG9aIDk2RjU=) 9: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:f8:b8:4c:d7:0d:bf:77:a6:00:2a:68:04:9f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Dec 21 11:01:06 2025 GMT Not After : Dec 22 11:01:06 2025 GMT Subject: CN=5ea257b40aeb681f0fc78d4e5fbba5a0d811f7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:03:54:16:ef:fb:7d:c3:ae:d0:33:27:07:65: 78:20:ee:43:3b:d5:f9:20:b5:d6:66:c0:d5:09:98: d1:68:e3:0e:09:f7:3e:d0:2a:8b:d9:db:c5:7e:56: 88:c4:ac:9f:38:d5:5b:a8:fb:8f:c5:7d:7d:67:c3: 8e:a1:7c:51:0e:2b:c9:51:07:21:e8:d1:d3:e3:20: 66:fd:82:9a:56:4e:f2:61:64:35:63:f0:ee:9a:49: 49:84:9a:d4:3c:a0:c1:24:20:1d:40:e3:19:7b:18: 8c:45:1d:db:f5:7c:c9:66:85:8c:e2:7b:58:63:d5: dc:c3:c0:73:c4:74:77:26:94:98:67:43:c8:ba:a7: 00:32:96:ca:a8:e2:d2:04:3c:58:9e:a4:47:31:bf: d9:a5:01:34:ba:9d:c0:f1:fc:4c:49:0d:7e:89:17: a8:b7:b2:48:94:19:6a:29:11:a8:44:ec:67:3c:4a: c1:3f:37:a7:04:a4:b9:9e:10:f7:73:00:fd:f1:c0: d0:b3:17:f4:36:07:0f:50:47:e1:b6:9f:7f:4b:e3: 2f:c7:75:87:4c:60:b9:a2:e8:98:36:07:09:fb:ff: 7b:1b:df:bc:35:78:fa:dd:e4:2b:55:09:c9:e3:1e: a6:86:c4:17:e9:f0:05:d5:73:d5:b1:c6:74:0d:85: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:57:B4:0A:EB:68:1F:0F:C7:8D:4E:5F:BB:A5:A0:D8:11:F7:B2 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fc:a7:91:5d:cd:97:5d:9b:67:b6:6e:d7:b9:69:00:05:b7: 91:f2:47:0f:da:c2:24:5f:e4:b5:8e:eb:f2:51:84:58:f4:e4: 1d:f9:5c:27:1b:ac:35:ed:11:bd:b8:43:1e:ae:2b:da:b4:24: 89:8d:fa:37:94:eb:34:e5:f2:96:a6:f1:bd:b3:49:25:95:97: 9c:6d:18:91:79:9e:10:8c:0f:72:10:a9:85:1e:a6:18:a4:b7: 5d:c5:52:97:34:26:1c:c9:b3:1d:a2:d9:cb:b2:78:9e:ec:5b: e0:59:1f:66:f7:d3:a1:27:3c:81:5e:a0:3d:a5:37:62:ae:f1: b3:db:df:5a:75:54:26:ad:3d:ae:69:9b:91:96:02:f0:51:be: 6f:b2:7f:e9:c0:6c:d3:58:33:9f:6b:47:02:e7:94:03:fb:f3: 0d:1b:96:5f:13:60:78:e9:d2:3d:17:48:f9:9e:ed:e7:9b:99: 27:25:af:93:1c:fb:bf:8c:24:00:06:d5:2d:6b:79:5c:cf:0a: f0:28:3b:66:04:49:2b:6e:51:e5:30:c2:62:b7:f9:dd:fe:1a: a7:ed:c1:04:78:7e:48:b0:51:6a:49:11:95:a8:0f:0d:7e:ac: 5d:e4:77:d0:69:69:c5:9c:55:73:6d:b6:94:6f:ed:4d:b6:9e: bd:80:e0:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfi4TNcNv3emACpoBJ/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjUxMjIxMTEwMTA2WhcNMjUxMjIyMTEwMTA2WjAzMTEwLwYDVQQD Eyg1ZWEyNTdiNDBhZWI2ODFmMGZjNzhkNGU1ZmJiYTVhMGQ4MTFmN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ANUFu/7fcOu0DMnB2V4IO5DO9X5 ILXWZsDVCZjRaOMOCfc+0CqL2dvFflaIxKyfONVbqPuPxX19Z8OOoXxRDivJUQch 6NHT4yBm/YKaVk7yYWQ1Y/DumklJhJrUPKDBJCAdQOMZexiMRR3b9XzJZoWM4ntY Y9Xcw8BzxHR3JpSYZ0PIuqcAMpbKqOLSBDxYnqRHMb/ZpQE0up3A8fxMSQ1+iReo t7JIlBlqKRGoROxnPErBPzenBKS5nhD3cwD98cDQsxf0NgcPUEfhtp9/S+Mvx3WH TGC5ouiYNgcJ+/97G9+8NXj63eQrVQnJ4x6mhsQX6fAF1XPVscZ0DYUs3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6iV7QK62gfD8eNTl+7paDYEfeyMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfynkV3N l12bZ7Zu17lpAAW3kfJHD9rCJF/ktY7r8lGEWPTkHflcJxusNe0RvbhDHq4r2rQk iY36N5TrNOXylqbxvbNJJZWXnG0YkXmeEIwPchCphR6mGKS3XcVSlzQmHMmzHaLZ y7J4nuxb4FkfZvfToSc8gV6gPaU3Yq7xs9vfWnVUJq09rmmbkZYC8FG+b7J/6cBs 01gzn2tHAueUA/vzDRuWXxNgeOnSPRdI+Z7t55uZJyWvkxz7v4wkAAbVLWt5XM8K 8Cg7ZgRJK25R5TDCYrf53f4ap+3BBHh+SLBRakkRlagPDX6sXeR30GlpxZxVc222 lG/tTbaevYDgLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:01 2025 by rpki-client