This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json) Hash identifier: cXQsq7bTb6nFvd3ocDMs6BkuzzdjdaFYy63kdRo/8Ag= Subject key identifier: 7E:14:4B:CE:48:8C:10:C2:BE:B5:B3:FF:6A:22:5F:DE:52:43:C4:CD Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Certificate serial: 019B32316CCF3D9A67BCA4703F4ED108E7BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft Manifest number: 047B Signing time: Thu 18 Dec 2025 16:00:58 +0000 Manifest this update: Thu 18 Dec 2025 16:00:58 +0000 Manifest next update: Fri 19 Dec 2025 16:00:58 +0000 Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=) 2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: KiCY8XBE0w9vPQ+cg9tBCibk85g0LNY0fsFdh2UGzQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:6c:cf:3d:9a:67:bc:a4:70:3f:4e:d1:08:e7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Validity Not Before: Dec 18 16:00:58 2025 GMT Not After : Dec 19 16:00:58 2025 GMT Subject: CN=7e144bce488c10c2beb5b3ff6a225fde5243c4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:7d:a2:d3:94:5b:79:c7:2c:88:2d:c1:58: 21:e6:ba:88:ac:a4:8b:7e:6e:0c:07:e0:0e:11:78: 4c:01:6a:50:86:4d:15:e9:24:7d:21:20:7c:79:63: de:f1:cb:b2:e9:78:ed:e8:5c:2c:91:6d:f4:c4:1f: 48:a2:13:3a:37:a4:17:58:bb:e7:a2:7d:e5:f6:c4: ee:9d:11:40:74:80:4f:fc:89:0e:15:08:71:cb:86: 28:b0:42:50:b6:a5:4a:83:c0:8c:b7:ad:e7:10:db: 68:df:54:59:87:80:98:78:8e:71:7c:d2:66:95:5c: 89:26:7c:4b:76:d7:6b:32:bb:f0:7c:e5:e9:26:f4: ad:2d:0c:2a:0c:53:cc:b9:5e:fa:79:4a:0e:0b:ce: 19:bf:d9:ff:da:00:ae:6d:ca:d5:a0:25:0c:38:3d: 98:3b:50:7d:7f:41:9c:d8:3d:d0:ac:d1:1e:a0:5e: 19:cb:0d:0a:e2:92:49:c4:89:6c:14:fe:0a:e6:c2: 30:c6:fd:a2:05:a7:bf:f6:ed:f0:82:f3:69:de:3d: f8:bb:00:e7:b6:dd:dc:da:9b:39:f0:2d:ee:77:85: 6c:0c:ac:1c:54:38:a0:e5:4a:59:97:78:ea:dc:11: f3:82:8a:ea:3f:e6:0b:d3:bd:d0:79:e6:d4:c6:a1: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:14:4B:CE:48:8C:10:C2:BE:B5:B3:FF:6A:22:5F:DE:52:43:C4:CD X509v3 Authority Key Identifier: keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:38:88:0a:5f:04:a0:76:50:1c:43:4c:96:41:45:4e:23:44: 09:ab:85:10:d0:81:ec:85:54:e3:29:b8:73:0c:e0:63:01:fb: c6:75:69:51:1e:94:83:38:57:4b:13:05:08:11:38:a5:c9:78: f7:e5:95:bf:c1:80:01:d6:ee:e0:7e:f3:07:61:16:17:45:7a: 00:10:f4:ff:89:1c:13:7a:1e:a4:f9:2a:fe:cb:9e:67:6d:b2: a6:da:ac:0d:a6:3d:e8:76:1d:09:09:c0:b9:05:02:c1:46:29: 49:5a:78:84:5c:f5:4d:1b:7c:bd:6d:c9:7f:4b:36:c2:85:2b: 3c:e4:95:84:37:18:59:00:37:12:16:d5:9c:9b:de:60:f3:d7: b5:e9:4a:74:42:ba:d9:ac:aa:2a:52:d9:fe:b8:df:c5:81:be: c2:d3:60:bc:24:a8:c7:f9:77:aa:0c:ad:05:20:12:20:c4:21: 55:a5:83:06:51:cb:87:60:f2:a4:53:4e:50:1c:97:04:32:5c: 62:32:b6:09:29:d8:80:9e:b1:6a:27:bc:1e:5c:6c:4c:91:88: a4:bd:9a:b6:17:a1:05:41:8f:81:f3:be:cb:ae:c2:4d:83:25: e9:87:17:1b:c9:f0:0d:3b:27:ec:df:2e:e9:c0:8d:92:02:76: 46:ed:1a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWzPPZpnvKRwP07RCOe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh MDFlNTcwHhcNMjUxMjE4MTYwMDU4WhcNMjUxMjE5MTYwMDU4WjAzMTEwLwYDVQQD Eyg3ZTE0NGJjZTQ4OGMxMGMyYmViNWIzZmY2YTIyNWZkZTUyNDNjNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfB9otOUW3nHLIgtwVgh5rqIrKSL fm4MB+AOEXhMAWpQhk0V6SR9ISB8eWPe8cuy6Xjt6FwskW30xB9IohM6N6QXWLvn on3l9sTunRFAdIBP/IkOFQhxy4YosEJQtqVKg8CMt63nENto31RZh4CYeI5xfNJm lVyJJnxLdtdrMrvwfOXpJvStLQwqDFPMuV76eUoOC84Zv9n/2gCubcrVoCUMOD2Y O1B9f0Gc2D3QrNEeoF4Zyw0K4pJJxIlsFP4K5sIwxv2iBae/9u3wgvNp3j34uwDn tt3c2ps58C3ud4VsDKwcVDig5UpZl3jq3BHzgorqP+YL073QeebUxqHcqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4US85IjBDCvrWz/2oiX95SQ8TNMB8GA1UdIwQY MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt Yzk4ODAwOTBlM2M1LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1 LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALziICl8E oHZQHENMlkFFTiNECauFENCB7IVU4ym4cwzgYwH7xnVpUR6UgzhXSxMFCBE4pcl4 9+WVv8GAAdbu4H7zB2EWF0V6ABD0/4kcE3oepPkq/sueZ22yptqsDaY96HYdCQnA uQUCwUYpSVp4hFz1TRt8vW3Jf0s2woUrPOSVhDcYWQA3EhbVnJveYPPXtelKdEK6 2ayqKlLZ/rjfxYG+wtNgvCSox/l3qgytBSASIMQhVaWDBlHLh2DypFNOUByXBDJc YjK2CSnYgJ6xaie8HlxsTJGIpL2athehBUGPgfO+y67CTYMl6YcXG8nwDTsn7N8u 6cCNkgJ2Ru0arw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:26 2025 by rpki-client