This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json) Hash identifier: j8wqH00gCHYbPMWuZ2T2c3+FejPTZHyrpESz4aakeCY= Subject key identifier: 20:35:CB:11:96:CC:30:7A:A4:55:52:73:8F:6B:A1:22:A9:2F:80:85 Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c Certificate serial: 019AF6F9EB38FDCFAE3DB855D92EB475696E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 04:02:44 +0000 Manifest this update: Sun 07 Dec 2025 04:02:44 +0000 Manifest next update: Mon 08 Dec 2025 04:02:44 +0000 Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=) 2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: rX0Lo6zQUKflcax8zjfuO9GJSTuu9a8VTM9r/VPcMkA=) 3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:eb:38:fd:cf:ae:3d:b8:55:d9:2e:b4:75:69:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c Validity Not Before: Dec 7 04:02:44 2025 GMT Not After : Dec 8 04:02:44 2025 GMT Subject: CN=2035cb1196cc307aa45552738f6ba122a92f8085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:88:6f:19:e0:34:65:35:b4:8e:bc:13:8c: e0:15:15:20:64:1b:b7:64:f8:94:66:36:9e:71:f1: 4e:b0:f3:c6:30:90:f6:06:92:8d:79:29:59:2e:8b: e6:e5:51:70:e4:e9:20:42:be:21:b2:c4:57:b7:06: c1:62:fe:ac:f0:e8:ff:75:98:69:f1:f6:fc:f3:3f: 8c:51:e4:fd:5a:f0:de:41:69:34:d8:23:1d:9f:83: 2d:4c:1d:32:b7:d5:9e:11:5c:f7:7a:15:ae:dc:7f: b6:df:12:a1:45:a5:9c:62:98:51:5b:26:30:7d:44: b0:96:52:20:63:87:52:9f:14:e7:0a:47:e8:68:20: e8:28:eb:eb:ba:9d:17:f4:f6:b8:a0:fc:74:97:06: 8f:91:31:a9:a9:d8:8d:aa:00:ac:4d:0c:8c:95:86: 30:e9:6e:77:fe:df:13:38:21:97:d0:59:f3:d0:1b: 57:fb:06:23:74:a8:c8:92:56:ff:41:f9:5d:a6:f6: 36:5d:53:b5:fb:63:f2:7e:e2:c4:15:95:19:f6:4d: e5:89:f5:2f:07:6b:4c:98:fe:d4:31:26:a8:79:c8: fb:6e:25:98:6b:5c:e5:fc:9d:dc:e6:55:7b:53:5b: b1:f3:0e:54:36:cf:72:04:54:1d:90:f9:f6:19:14: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:CB:11:96:CC:30:7A:A4:55:52:73:8F:6B:A1:22:A9:2F:80:85 X509v3 Authority Key Identifier: keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:93:00:ef:7d:b8:2d:68:15:c1:ce:2d:1b:5a:89:ca:1e:e4: 99:fc:cf:40:10:71:4f:fd:e6:14:ba:00:2a:81:a6:fa:3a:bc: 7f:a5:45:09:82:8f:68:21:91:80:35:ea:c6:e5:e0:29:d3:f1: a7:8e:88:bd:58:74:ce:73:78:f8:8c:00:6f:dc:21:6f:bb:f4: 19:e3:61:35:51:54:ba:82:cf:29:3d:58:37:6f:61:de:2d:1e: b3:64:4a:84:f6:9f:30:49:c6:a5:f5:64:93:83:04:18:2c:04: a0:5c:5d:16:d2:38:e6:64:f2:df:1a:88:4c:7a:56:4f:46:7c: 79:b6:e4:92:7b:d5:43:d0:91:db:5f:f2:88:7a:5c:fc:31:8f: 8e:c9:4f:b5:d3:8f:b7:53:cd:74:10:42:f8:9e:6d:8a:86:5b: e2:96:2f:b0:33:67:d8:ca:db:df:67:c0:c4:0e:c2:23:6b:ec: ac:db:3e:60:1a:c7:6f:b7:2b:05:ef:37:4b:75:de:cc:d9:08: 2d:dd:b6:bd:71:21:70:14:ad:0b:d9:41:f8:fe:a6:e6:a6:0d: c5:96:0a:47:26:97:3a:75:24:db:61:06:ba:8b:0c:cf:f9:aa: d2:d1:1f:1d:2c:a8:90:f6:64:31:6d:05:fc:7b:65:21:ab:89: 3e:b1:7d:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+es4/c+uPbhV2S60dWluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz ZWRjMWMwHhcNMjUxMjA3MDQwMjQ0WhcNMjUxMjA4MDQwMjQ0WjAzMTEwLwYDVQQD EygyMDM1Y2IxMTk2Y2MzMDdhYTQ1NTUyNzM4ZjZiYTEyMmE5MmY4MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc2IbxngNGU1tI68E4zgFRUgZBu3 ZPiUZjaecfFOsPPGMJD2BpKNeSlZLovm5VFw5OkgQr4hssRXtwbBYv6s8Oj/dZhp 8fb88z+MUeT9WvDeQWk02CMdn4MtTB0yt9WeEVz3ehWu3H+23xKhRaWcYphRWyYw fUSwllIgY4dSnxTnCkfoaCDoKOvrup0X9Pa4oPx0lwaPkTGpqdiNqgCsTQyMlYYw 6W53/t8TOCGX0Fnz0BtX+wYjdKjIklb/QfldpvY2XVO1+2PyfuLEFZUZ9k3lifUv B2tMmP7UMSaoecj7biWYa1zl/J3c5lV7U1ux8w5UNs9yBFQdkPn2GRQziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA1yxGWzDB6pFVSc49roSKpL4CFMB8GA1UdIwQY MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5MA7324 LWgVwc4tG1qJyh7kmfzPQBBxT/3mFLoAKoGm+jq8f6VFCYKPaCGRgDXqxuXgKdPx p46IvVh0znN4+IwAb9whb7v0GeNhNVFUuoLPKT1YN29h3i0es2RKhPafMEnGpfVk k4MEGCwEoFxdFtI45mTy3xqITHpWT0Z8ebbkknvVQ9CR21/yiHpc/DGPjslPtdOP t1PNdBBC+J5tioZb4pYvsDNn2Mrb32fAxA7CI2vsrNs+YBrHb7crBe83S3XezNkI Ld22vXEhcBStC9lB+P6m5qYNxZYKRyaXOnUk22EGuosMz/mq0tEfHSyokPZkMW0F /HtlIauJPrF9Zw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:22 2025 by rpki-client