This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json) Hash identifier: CryM/c6qWLIFvZVG424BT5Fz6xqp/wOCsAC9eEyZ4VI= Subject key identifier: 02:9D:06:B0:00:F2:E4:B9:C6:5D:EF:77:96:0B:7F:8B:2C:39:E3:1C Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99 Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99 Certificate serial: 019B5AF694C38CBE313EEF86510E72F2B6B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft Manifest number: 179D Signing time: Fri 26 Dec 2025 14:01:07 +0000 Manifest this update: Fri 26 Dec 2025 14:01:07 +0000 Manifest next update: Sat 27 Dec 2025 14:01:07 +0000 Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=) 2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: c05N+llNkmy3U/BG5N4KPede/SmODhIUGGYcKlrKiYY=) 3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:94:c3:8c:be:31:3e:ef:86:51:0e:72:f2:b6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99 Validity Not Before: Dec 26 14:01:07 2025 GMT Not After : Dec 27 14:01:07 2025 GMT Subject: CN=029d06b000f2e4b9c65def77960b7f8b2c39e31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:ef:4e:a8:4a:4a:16:c6:81:24:ed:19:72: f3:cf:18:41:09:82:aa:ac:ec:b1:9a:cc:c8:dd:d9: 9c:71:19:30:e4:36:14:0c:e1:a4:24:4c:bb:62:26: 25:02:ec:1c:30:58:67:37:29:d7:1c:68:c9:22:85: 99:26:1e:e7:a1:25:23:8c:bb:79:53:a1:3a:10:e0: 54:52:ec:81:7d:72:89:00:dd:5b:0c:fc:d5:57:39: c5:3f:91:5c:5e:50:f5:5a:d3:52:e9:9d:42:f0:57: 34:e4:aa:e8:ac:86:33:18:4a:61:7c:06:20:01:3a: 8d:86:4c:2e:d5:19:23:5f:2f:98:53:28:3a:6c:14: f9:af:67:92:0d:66:e2:48:2a:e8:43:bd:dd:5f:d1: ff:44:c6:6f:33:ef:cb:0b:35:ce:84:c0:3e:90:cc: 1e:7a:d7:4a:8d:47:bf:37:73:7a:7b:5f:b5:5b:a9: 62:87:f3:29:f4:b7:74:f8:7b:8a:92:08:d4:72:6a: e8:52:03:dd:3a:c1:d5:b5:ce:b3:6b:04:4e:fc:b3: 3c:3f:ba:57:21:cb:ae:16:0b:fa:4f:b9:3a:29:63: 42:71:09:f2:66:a3:94:c5:5a:21:a8:51:bc:70:bf: e0:0a:ce:6c:f3:01:1d:1e:42:b6:23:db:60:08:d1: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9D:06:B0:00:F2:E4:B9:C6:5D:EF:77:96:0B:7F:8B:2C:39:E3:1C X509v3 Authority Key Identifier: keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:13:46:d1:7f:22:c1:94:f2:df:4e:e9:1b:5e:8b:91:ae:e7: 1e:74:99:ca:63:ed:22:c5:60:43:ae:ed:3f:3a:a8:62:32:83: 5b:ff:75:91:4a:ba:f1:19:9b:88:58:48:3f:7a:e6:a7:6e:51: 95:5a:5f:92:d6:19:c4:35:d1:16:f0:e9:28:24:58:12:f0:d6: 73:4a:79:36:1e:7e:bd:5a:7e:71:2f:ba:4b:43:1c:69:9e:49: 96:21:bc:e9:1a:7e:e5:89:6e:2d:33:2c:c8:6b:b6:88:d2:e1: e8:69:fe:37:47:f9:c4:74:85:e7:90:03:f7:cd:69:d9:12:e8: dd:63:f8:89:18:09:18:62:38:f4:ca:95:e7:37:d9:70:9c:a7: f0:9d:a2:c3:65:ce:a2:a9:9f:f5:25:0a:12:cf:ed:be:60:b0: 5a:a3:9e:45:21:cb:32:3e:67:94:9d:90:ed:28:e7:a6:83:78: c4:26:5a:98:e4:a6:d5:df:48:0a:95:66:94:a5:8d:b1:78:29: 0c:52:c4:0b:14:9e:6a:61:f9:3b:6e:61:c9:c3:cf:4c:5d:b3: 8b:a0:fe:00:f6:6e:21:24:00:47:75:44:12:03:8e:24:29:86: b4:76:6f:12:ee:49:6b:94:ba:7c:e3:a2:cb:0a:df:75:3f:76: 92:bf:89:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9pTDjL4xPu+GUQ5y8rawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5 ZGZjOTkwHhcNMjUxMjI2MTQwMTA3WhcNMjUxMjI3MTQwMTA3WjAzMTEwLwYDVQQD EygwMjlkMDZiMDAwZjJlNGI5YzY1ZGVmNzc5NjBiN2Y4YjJjMzllMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QXvTqhKShbGgSTtGXLzzxhBCYKq rOyxmszI3dmccRkw5DYUDOGkJEy7YiYlAuwcMFhnNynXHGjJIoWZJh7noSUjjLt5 U6E6EOBUUuyBfXKJAN1bDPzVVznFP5FcXlD1WtNS6Z1C8Fc05KrorIYzGEphfAYg ATqNhkwu1RkjXy+YUyg6bBT5r2eSDWbiSCroQ73dX9H/RMZvM+/LCzXOhMA+kMwe etdKjUe/N3N6e1+1W6lih/Mp9Ld0+HuKkgjUcmroUgPdOsHVtc6zawRO/LM8P7pX IcuuFgv6T7k6KWNCcQnyZqOUxVohqFG8cL/gCs5s8wEdHkK2I9tgCNGzoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKdBrAA8uS5xl3vd5YLf4ssOeMcMB8GA1UdIwQY MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhNG0X8i wZTy307pG16Lka7nHnSZymPtIsVgQ67tPzqoYjKDW/91kUq68RmbiFhIP3rmp25R lVpfktYZxDXRFvDpKCRYEvDWc0p5Nh5+vVp+cS+6S0McaZ5JliG86Rp+5YluLTMs yGu2iNLh6Gn+N0f5xHSF55AD981p2RLo3WP4iRgJGGI49MqV5zfZcJyn8J2iw2XO oqmf9SUKEs/tvmCwWqOeRSHLMj5nlJ2Q7SjnpoN4xCZamOSm1d9ICpVmlKWNsXgp DFLECxSeamH5O25hycPPTF2zi6D+APZuISQAR3VEEgOOJCmGtHZvEu5Ja5S6fOOi ywrfdT92kr+JBg== -----END CERTIFICATE-----Generated at Fri Dec 26 22:41:20 2025 by rpki-client