This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: SB32N4U+mAU9iw2qmPCsfao++NtODNrW/h1G68bI9vo= Subject key identifier: C7:CD:CD:11:EC:C9:DC:E0:EA:DF:BD:8A:02:33:E7:ED:57:8F:07:1D Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019AE3DF1E1FC81F90CE0BAA912B4A30322E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 0FD2 Signing time: Wed 03 Dec 2025 11:00:41 +0000 Manifest this update: Wed 03 Dec 2025 11:00:41 +0000 Manifest next update: Thu 04 Dec 2025 11:00:41 +0000 Files and hashes: 1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=) 2: 6tWl5a8eFbUzEfNoih8c-OFqi5M.roa (hash: nPQyQaRgXoHjIA2ktajZTr/QGc6vcJckxFwuI2DrnzI=) 3: GRA3t_KyWFYxg2CQJHBaXlViSP8.roa (hash: N4cHeR4tmiAj9zbtfRvcPi/r/p86jgb0tb1toEi1byE=) 4: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: tULCX3qo5LC54vUh2rtjoWmQZq02ZQPbAR3/rUEnX1Q=) 5: ZgDs75tq49WzNx-mbPV0VOcMnUo.roa (hash: dGFHkQk1n2qHo9JpwRfTWZBitzuU26dRmqqWQYzC5Vc=) 6: mVQLg2vFtKhXYkiJgy9EzEclH78.roa (hash: 8XlUZL+eJtMSbbcbuZH2lnnnxy7c34P4HzZYP3Ogx2U=) 7: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=) 8: skB4egbM7u7r86GQ4gobtzP81aY.roa (hash: ZN5QoZ1Z/xaovGfuEq8TXCil2/F2l9H4YG9aIDk2RjU=) 9: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:df:1e:1f:c8:1f:90:ce:0b:aa:91:2b:4a:30:32:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Dec 3 11:00:41 2025 GMT Not After : Dec 4 11:00:41 2025 GMT Subject: CN=c7cdcd11ecc9dce0eadfbd8a0233e7ed578f071d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:80:0a:c0:8d:ed:dd:ec:36:ca:67:eb:74:c3: 15:93:a9:e6:b9:23:62:cc:c7:7e:e1:73:ea:d9:7d: f2:4a:40:ff:22:c9:e4:47:98:e2:7e:89:51:d0:fc: 1f:6d:d5:67:a5:4f:ca:21:c4:a5:46:a9:a4:d9:70: cb:23:78:7b:66:21:8b:37:32:ab:06:2e:8e:fe:43: e0:02:bd:44:f3:b9:3b:fd:3b:6d:a2:eb:10:19:26: 93:72:a5:74:8d:dc:68:ff:d1:51:c9:03:09:98:88: aa:10:f8:a7:3a:4c:2b:8a:be:a6:3f:53:f7:20:d4: eb:c6:ef:6d:10:b7:fc:f1:41:bd:37:ff:16:89:24: 93:c9:bd:da:29:29:24:5d:11:a5:82:99:c1:12:12: 1d:0d:74:9f:a2:04:36:e8:a7:2a:14:b5:48:91:fa: 8d:3b:1b:58:0d:02:20:79:f0:48:6a:81:9d:b3:22: 5b:31:6d:d1:a7:ec:83:d6:67:47:1d:3e:94:66:3c: 4d:09:59:55:8a:92:ae:38:5b:25:42:e6:de:5e:20: b4:e8:c4:69:99:71:d8:b9:ff:83:41:d1:be:88:6f: bf:3a:9e:0e:23:84:fa:aa:1e:1e:05:5f:5e:5e:b2: 79:34:02:67:8c:ec:35:c4:e1:0c:80:94:24:46:8d: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:CD:11:EC:C9:DC:E0:EA:DF:BD:8A:02:33:E7:ED:57:8F:07:1D X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c8:49:57:eb:b9:70:9d:54:8d:24:b1:8f:41:fb:7f:cb:cc: b0:bd:fb:75:aa:6f:f8:ee:f5:1e:c5:89:69:2b:07:c8:9b:1b: 0c:af:99:35:7a:60:5a:d1:c1:31:e2:f5:3e:d9:4c:e3:f2:34: 42:bf:83:b4:9b:8f:96:c6:ea:d2:23:81:16:26:bf:33:92:be: f8:90:59:a9:a7:f5:86:22:93:cc:5e:8c:68:1b:e8:97:a8:ce: 94:4e:62:0c:c0:ee:b7:98:30:97:48:bd:7f:d5:a8:26:12:18: fc:cb:2d:18:c6:d8:f2:25:c9:4e:86:c3:04:62:51:1d:33:ca: a1:9d:2f:f5:34:17:9e:84:f7:f4:a0:46:22:97:23:4d:fc:a5: 18:95:66:44:20:68:8f:28:f4:72:b7:a9:9e:d7:36:bb:6b:c9: 37:30:d7:99:8e:e6:a2:7d:b6:f2:4a:43:0d:96:98:ee:8a:87: 60:37:ce:73:89:e8:80:3c:8a:02:14:ea:d1:77:46:52:fb:6f: e5:80:29:14:69:76:84:1f:73:9f:ed:fc:00:9b:a7:0f:ca:e3: bf:28:af:5d:1f:ea:c7:71:4d:b6:6a:69:f9:cf:b8:db:9a:5a: 62:3a:26:3c:cb:c0:6c:b4:a8:d6:ca:d6:14:42:51:fc:d7:76: c8:47:bf:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrj3x4fyB+QzguqkStKMDIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjUxMjAzMTEwMDQxWhcNMjUxMjA0MTEwMDQxWjAzMTEwLwYDVQQD EyhjN2NkY2QxMWVjYzlkY2UwZWFkZmJkOGEwMjMzZTdlZDU3OGYwNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoAKwI3t3ew2ymfrdMMVk6nmuSNi zMd+4XPq2X3ySkD/IsnkR5jifolR0PwfbdVnpU/KIcSlRqmk2XDLI3h7ZiGLNzKr Bi6O/kPgAr1E87k7/TttousQGSaTcqV0jdxo/9FRyQMJmIiqEPinOkwrir6mP1P3 INTrxu9tELf88UG9N/8WiSSTyb3aKSkkXRGlgpnBEhIdDXSfogQ26KcqFLVIkfqN OxtYDQIgefBIaoGdsyJbMW3Rp+yD1mdHHT6UZjxNCVlVipKuOFslQubeXiC06MRp mXHYuf+DQdG+iG+/Op4OI4T6qh4eBV9eXrJ5NAJnjOw1xOEMgJQkRo22ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfNzRHsydzg6t+9igIz5+1XjwcdMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASshJV+u5 cJ1UjSSxj0H7f8vMsL37dapv+O71HsWJaSsHyJsbDK+ZNXpgWtHBMeL1PtlM4/I0 Qr+DtJuPlsbq0iOBFia/M5K++JBZqaf1hiKTzF6MaBvol6jOlE5iDMDut5gwl0i9 f9WoJhIY/MstGMbY8iXJTobDBGJRHTPKoZ0v9TQXnoT39KBGIpcjTfylGJVmRCBo jyj0crepntc2u2vJNzDXmY7mon228kpDDZaY7oqHYDfOc4nogDyKAhTq0XdGUvtv 5YApFGl2hB9zn+38AJunD8rjvyivXR/qx3FNtmpp+c+425paYjomPMvAbLSo1srW FEJR/Nd2yEe/7w== -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:48 2025 by rpki-client