This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json) Hash identifier: OzYzQ2iQbG+Rql14AA17ukHh6+sMUnSjM4BC0/MymOg= Subject key identifier: 9A:B7:C8:1F:F7:32:26:D0:28:F8:AC:BF:3A:6A:35:08:8D:B9:38:C6 Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Certificate serial: 019B341FF74369B114082A356744DC437348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft Manifest number: 047C Signing time: Fri 19 Dec 2025 01:01:08 +0000 Manifest this update: Fri 19 Dec 2025 01:01:08 +0000 Manifest next update: Sat 20 Dec 2025 01:01:08 +0000 Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=) 2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: 42kcvzCf3WW3Db0djJl5tOLhR4Hl8nxeCs/W181MN+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:f7:43:69:b1:14:08:2a:35:67:44:dc:43:73:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Validity Not Before: Dec 19 01:01:08 2025 GMT Not After : Dec 20 01:01:08 2025 GMT Subject: CN=9ab7c81ff73226d028f8acbf3a6a35088db938c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:40:8d:20:d3:71:29:65:50:da:80:58:5f: d8:71:c7:23:ad:ce:ff:2d:25:1f:cd:a2:16:68:3a: 7c:31:d0:91:0a:c6:98:3a:ae:8a:04:ff:3e:a3:94: 4e:69:4b:00:3a:00:50:94:e6:73:9d:6c:46:97:1f: bb:73:de:fc:db:ca:5b:24:15:d7:85:38:e0:2a:c2: 6d:c5:b2:ef:d3:73:34:8d:3d:08:0b:1c:66:eb:76: 7c:60:c3:71:08:ec:9c:31:9a:0e:36:23:3e:04:43: 6d:fa:10:9b:09:5f:54:0c:e2:89:78:4f:e8:07:c6: dc:86:64:38:db:bb:93:ce:bf:1a:11:e7:4e:9b:51: 8d:0e:db:3e:bc:dc:2f:cc:68:51:75:94:62:0d:e0: 84:3a:6d:ca:f9:7c:3f:2a:32:73:da:80:33:ea:a6: 54:fc:be:95:26:78:01:8a:22:70:3a:c3:bf:62:c3: 42:24:ea:64:d6:0a:76:da:53:52:cd:d2:a7:27:41: 0d:ae:0d:e9:b8:4c:02:32:01:f5:a0:07:53:07:63: b1:dd:71:14:7e:e3:90:6f:95:63:fc:c8:b3:12:f1: fb:14:af:63:15:c6:32:e6:c4:a9:87:be:8c:40:24: 9c:95:61:16:05:35:6c:18:01:64:9e:2c:ee:d6:b9: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:C8:1F:F7:32:26:D0:28:F8:AC:BF:3A:6A:35:08:8D:B9:38:C6 X509v3 Authority Key Identifier: keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fa:e3:aa:a5:0b:71:51:be:50:20:c9:a8:6d:99:17:61:79: 2c:f1:dd:5b:41:c8:d0:09:fe:9f:c0:36:94:00:da:11:91:39: 82:0f:a0:9a:96:fe:a1:d6:93:fa:80:d7:83:37:1d:e2:fe:18: 20:b2:f1:a1:6b:73:d9:09:9a:70:8b:59:c6:bc:09:05:7c:5b: 8d:2d:f5:bb:8c:51:14:7f:13:78:44:79:d5:b0:33:c4:6a:ff: 23:da:7c:e7:12:49:d1:3a:a7:67:91:4b:34:11:cb:ca:cc:8d: 77:5b:52:10:1c:0f:a2:09:56:72:33:26:5c:ad:f8:28:3a:2c: fc:e2:f4:f9:fa:cb:70:5a:04:3f:ce:f9:d7:f2:10:41:c7:0d: 2a:3d:64:b7:0e:f9:f4:25:2b:db:8d:9f:6f:b1:df:ef:70:6a: e4:97:eb:fe:f3:7b:e9:ac:e5:09:ce:ca:10:3d:de:07:7b:cf: 07:08:62:9d:a9:74:3f:7d:2e:e2:12:c7:48:3b:99:07:b6:7c: ab:53:2f:1e:dd:ae:2b:6f:47:e6:4a:34:5b:43:29:31:d2:d3: 50:76:4a:81:5b:3f:02:b1:6a:dc:54:d7:35:de:26:a6:6d:d0: 35:61:68:32:b0:5f:89:df:65:65:a6:32:39:ff:31:a1:ad:1d: de:e1:31:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H/dDabEUCCo1Z0TcQ3NIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh MDFlNTcwHhcNMjUxMjE5MDEwMTA4WhcNMjUxMjIwMDEwMTA4WjAzMTEwLwYDVQQD Eyg5YWI3YzgxZmY3MzIyNmQwMjhmOGFjYmYzYTZhMzUwODhkYjkzOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppZAjSDTcSllUNqAWF/Ycccjrc7/ LSUfzaIWaDp8MdCRCsaYOq6KBP8+o5ROaUsAOgBQlOZznWxGlx+7c97828pbJBXX hTjgKsJtxbLv03M0jT0ICxxm63Z8YMNxCOycMZoONiM+BENt+hCbCV9UDOKJeE/o B8bchmQ427uTzr8aEedOm1GNDts+vNwvzGhRdZRiDeCEOm3K+Xw/KjJz2oAz6qZU /L6VJngBiiJwOsO/YsNCJOpk1gp22lNSzdKnJ0ENrg3puEwCMgH1oAdTB2Ox3XEU fuOQb5Vj/MizEvH7FK9jFcYy5sSph76MQCSclWEWBTVsGAFknizu1rns9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq3yB/3MibQKPisvzpqNQiNuTjGMB8GA1UdIwQY MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt Yzk4ODAwOTBlM2M1LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1 LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPrjqqUL cVG+UCDJqG2ZF2F5LPHdW0HI0An+n8A2lADaEZE5gg+gmpb+odaT+oDXgzcd4v4Y ILLxoWtz2QmacItZxrwJBXxbjS31u4xRFH8TeER51bAzxGr/I9p85xJJ0TqnZ5FL NBHLysyNd1tSEBwPoglWcjMmXK34KDos/OL0+frLcFoEP8751/IQQccNKj1ktw75 9CUr242fb7Hf73Bq5Jfr/vN76azlCc7KED3eB3vPBwhinal0P30u4hLHSDuZB7Z8 q1MvHt2uK29H5ko0W0MpMdLTUHZKgVs/ArFq3FTXNd4mpm3QNWFoMrBfid9lZaYy Of8xoa0d3uEx9g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:25 2025 by rpki-client