This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: i3Xykkpulpk8EijRoY5wVIohlIdSZWmThOmptn6GP/k= Subject key identifier: D8:F2:4A:09:C4:A6:62:CC:60:92:75:7A:F8:CB:34:72:EF:23:F3:4A Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019BF386C089CCD3526C4A6B9C45CB6F706E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1064 Signing time: Sun 25 Jan 2026 05:00:53 +0000 Manifest this update: Sun 25 Jan 2026 05:00:53 +0000 Manifest next update: Mon 26 Jan 2026 05:00:53 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: t+96gSa+v2AgPuHNYouD70Dns0H8+kv4Hp7K8hpC1kU=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:c0:89:cc:d3:52:6c:4a:6b:9c:45:cb:6f:70:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jan 25 05:00:53 2026 GMT Not After : Jan 26 05:00:53 2026 GMT Subject: CN=d8f24a09c4a662cc6092757af8cb3472ef23f34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:22:99:ad:a0:ab:7f:b0:8f:34:9e:df:c6: 61:01:b8:ba:5c:e6:52:5f:ac:06:1a:a2:d7:a3:7a: 14:9f:1b:f9:c5:d7:b6:b6:e1:f7:48:f4:62:5c:df: 97:ca:7e:05:f0:d9:70:ae:fd:88:d7:0c:ab:70:2a: 10:3d:0f:e7:a7:1d:1e:ed:22:c8:fe:fa:e9:53:7b: 9e:23:76:93:c2:dd:40:f2:41:22:d4:93:0a:64:2b: 26:5f:76:44:1d:03:bd:47:26:fb:b8:4f:a2:f3:ab: 4c:4d:53:3c:9c:42:90:99:9f:40:94:64:20:d4:f2: 61:3c:37:83:84:3b:9a:24:7c:a4:3a:4b:fa:4f:97: 17:99:f8:e6:c0:fe:00:ed:df:17:d1:14:f4:05:57: 98:91:fc:01:cd:f5:b4:5a:f6:f8:8c:61:ad:30:fb: 86:f2:ad:17:3f:ae:66:94:14:2c:22:27:60:f3:c4: 99:ca:97:55:23:82:7e:de:b2:84:cc:ad:b3:73:e1: c8:30:e5:af:b5:70:62:ec:29:63:07:1c:c1:f3:24: 3a:f8:f8:0b:6c:eb:ba:2f:86:f4:ee:47:b7:a9:aa: a6:53:39:fa:fd:d4:7c:ee:e8:c3:91:20:ff:4f:2a: 4d:f0:4c:87:98:78:aa:12:57:42:c5:2d:f3:d3:d1: 7e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F2:4A:09:C4:A6:62:CC:60:92:75:7A:F8:CB:34:72:EF:23:F3:4A X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:5b:cb:ab:b6:96:c6:ca:aa:08:77:54:3b:8d:f2:ae:3c: 37:80:a8:04:c2:93:d7:8b:84:79:44:0f:e1:42:69:08:8e:14: ac:d0:fe:d6:cd:22:bd:51:68:bf:0c:2b:f2:d4:88:c2:0d:e9: c2:3f:36:40:76:a4:54:4a:09:c3:f9:29:c0:c1:9e:dc:32:49: 28:3d:e0:58:67:9f:d4:aa:fb:75:a5:3f:02:88:f4:f2:b8:08: 4b:eb:da:0a:3a:c4:5f:69:ea:4e:fa:92:5d:b9:60:1e:04:ec: 60:78:e8:db:e1:67:b6:22:77:2b:c5:67:b0:2c:8d:1a:5f:98: 36:e2:50:e5:a2:1d:9b:90:e9:2f:f6:8f:d3:ad:ac:5c:1c:ea: 19:6a:6c:fd:49:68:ef:bb:01:95:77:e5:af:57:1d:66:d8:27: 88:89:da:c3:5c:21:61:30:de:27:4d:ff:0f:87:7d:c9:47:e1: 53:1a:09:c5:97:9e:88:3d:ba:60:1b:d2:f3:6f:68:3d:79:4e: 15:ad:d3:c3:c8:f0:5e:49:a3:21:bc:f2:49:2c:f2:9c:3f:0b: 9b:eb:00:06:69:8f:31:b7:6e:df:34:ab:06:82:3c:cb:06:30: 3a:52:d2:70:7a:3c:38:e5:d0:55:a4:64:c6:20:92:9a:73:58: 30:d8:2c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhsCJzNNSbEprnEXLb3BuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMTI1MDUwMDUzWhcNMjYwMTI2MDUwMDUzWjAzMTEwLwYDVQQD EyhkOGYyNGEwOWM0YTY2MmNjNjA5Mjc1N2FmOGNiMzQ3MmVmMjNmMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYcima2gq3+wjzSe38ZhAbi6XOZS X6wGGqLXo3oUnxv5xde2tuH3SPRiXN+Xyn4F8Nlwrv2I1wyrcCoQPQ/npx0e7SLI /vrpU3ueI3aTwt1A8kEi1JMKZCsmX3ZEHQO9Ryb7uE+i86tMTVM8nEKQmZ9AlGQg 1PJhPDeDhDuaJHykOkv6T5cXmfjmwP4A7d8X0RT0BVeYkfwBzfW0Wvb4jGGtMPuG 8q0XP65mlBQsIidg88SZypdVI4J+3rKEzK2zc+HIMOWvtXBi7CljBxzB8yQ6+PgL bOu6L4b07ke3qaqmUzn6/dR87ujDkSD/TypN8EyHmHiqEldCxS3z09F+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjySgnEpmLMYJJ1evjLNHLvI/NKMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw1by6u2 lsbKqgh3VDuN8q48N4CoBMKT14uEeUQP4UJpCI4UrND+1s0ivVFovwwr8tSIwg3p wj82QHakVEoJw/kpwMGe3DJJKD3gWGef1Kr7daU/Aoj08rgIS+vaCjrEX2nqTvqS XblgHgTsYHjo2+FntiJ3K8VnsCyNGl+YNuJQ5aIdm5DpL/aP062sXBzqGWps/Ulo 77sBlXflr1cdZtgniInaw1whYTDeJ03/D4d9yUfhUxoJxZeeiD26YBvS829oPXlO Fa3Tw8jwXkmjIbzySSzynD8Lm+sABmmPMbdu3zSrBoI8ywYwOlLScHo8OOXQVaRk xiCSmnNYMNgscA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:44 2026 by rpki-client