This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json) Hash identifier: LeH14Yj/lHvrq3LQxsFY0P7D7vuJthO3TsREzA4zeK4= Subject key identifier: B6:00:E7:95:5D:2A:29:0B:F7:F5:DD:91:E3:7A:80:3F:48:E0:8E:B2 Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Certificate serial: 019B4A39A56AEC007EE3C6C47988D3488711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 08:00:50 +0000 Manifest this update: Tue 23 Dec 2025 08:00:50 +0000 Manifest next update: Wed 24 Dec 2025 08:00:50 +0000 Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: oRtDEG411bgxVOBiDglYETe+uvKJgLSHLW0WHlGxQHE=) 2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=) 3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=) 4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:a5:6a:ec:00:7e:e3:c6:c4:79:88:d3:48:87:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Validity Not Before: Dec 23 08:00:50 2025 GMT Not After : Dec 24 08:00:50 2025 GMT Subject: CN=b600e7955d2a290bf7f5dd91e37a803f48e08eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:60:26:d1:59:37:68:37:6c:14:9e:df:fd: 9d:64:5a:06:75:27:95:92:0f:31:68:0f:81:91:16: 03:b9:69:40:d8:2a:29:1f:e1:b5:45:04:eb:13:e2: d5:f7:3a:72:53:b1:dc:dc:36:2f:8f:69:86:f5:c9: af:c3:dc:7c:81:6e:1b:5e:e4:53:6c:2e:0a:e0:99: c2:af:fe:91:b6:1a:c7:bc:f1:58:56:87:3f:1f:54: ef:10:f9:64:68:bc:7b:74:13:56:eb:7c:25:fd:3b: 38:14:51:d6:0c:13:f3:4f:67:70:0a:09:1e:39:30: b1:a3:8a:b0:e8:dd:d9:f3:8c:2e:f1:8a:29:03:1c: bb:3f:a3:ab:cc:d5:09:4a:52:48:f7:5e:45:82:8a: a7:e3:d8:51:b5:59:7b:40:d9:d7:f6:49:6f:36:62: ff:ab:33:97:5d:8f:7f:f5:02:01:c7:01:f4:15:37: 47:fe:ad:ba:43:09:bc:42:ff:65:12:7a:a7:32:08: fe:68:99:7a:02:b8:e4:c8:34:2f:5a:a7:39:64:62: 3c:19:62:f3:47:e2:91:e1:04:09:a8:e9:de:f0:10: 69:c3:2b:c4:bf:b6:9d:47:ed:d3:a7:5d:4f:53:3a: 34:6a:66:36:95:f8:fe:9a:42:f3:80:1a:e2:80:d4: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:00:E7:95:5D:2A:29:0B:F7:F5:DD:91:E3:7A:80:3F:48:E0:8E:B2 X509v3 Authority Key Identifier: keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a8:a0:0d:de:bd:5b:fa:94:eb:58:1b:1b:b6:e1:cc:8a:5a: 5d:6f:8a:46:e0:1f:fb:42:ac:f0:2c:9e:39:bc:3d:fa:c2:2d: 48:92:46:8c:3e:af:40:94:46:a6:c6:65:97:87:73:e2:61:8e: c7:b4:76:71:d3:63:57:02:2a:49:9c:d8:2a:92:52:f8:ab:d4: 1f:d6:46:5e:6b:49:4f:87:b1:f8:9d:92:b8:92:92:63:ad:99: bf:c6:ec:54:c7:ab:41:e0:dc:2e:e2:75:35:29:32:71:e7:38: 86:aa:50:50:09:e3:19:05:d7:06:a4:b0:4f:06:d5:55:0e:d0: 1d:f7:d4:65:bd:86:94:a0:76:7e:1a:eb:b3:74:25:3a:d4:0d: fe:19:75:d7:c3:0a:6f:fd:69:49:5e:5f:ae:4e:63:70:52:7c: cb:ef:ab:9a:63:a6:b1:ac:3c:f3:73:ff:84:1f:a7:a1:e3:b5: 14:91:5d:37:19:f7:0e:32:6a:c8:5e:b2:64:c6:e5:4f:c9:fa: 84:1a:c0:9d:6a:6b:93:87:67:0a:06:85:84:ac:58:10:ac:22: 1c:36:28:cd:37:0d:d5:53:7e:79:36:c7:6a:90:23:99:a4:4a: 16:d0:a3:bf:11:63:e3:79:e1:a3:a8:09:55:e2:4e:b6:51:a4: 8c:10:da:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOaVq7AB+48bEeYjTSIcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz YTQxZjgwHhcNMjUxMjIzMDgwMDUwWhcNMjUxMjI0MDgwMDUwWjAzMTEwLwYDVQQD EyhiNjAwZTc5NTVkMmEyOTBiZjdmNWRkOTFlMzdhODAzZjQ4ZTA4ZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc9gJtFZN2g3bBSe3/2dZFoGdSeV kg8xaA+BkRYDuWlA2CopH+G1RQTrE+LV9zpyU7Hc3DYvj2mG9cmvw9x8gW4bXuRT bC4K4JnCr/6RthrHvPFYVoc/H1TvEPlkaLx7dBNW63wl/Ts4FFHWDBPzT2dwCgke OTCxo4qw6N3Z84wu8YopAxy7P6OrzNUJSlJI915Fgoqn49hRtVl7QNnX9klvNmL/ qzOXXY9/9QIBxwH0FTdH/q26Qwm8Qv9lEnqnMgj+aJl6ArjkyDQvWqc5ZGI8GWLz R+KR4QQJqOne8BBpwyvEv7adR+3Tp11PUzo0amY2lfj+mkLzgBrigNTCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYA55VdKikL9/XdkeN6gD9I4I6yMB8GA1UdIwQY MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6igDd69 W/qU61gbG7bhzIpaXW+KRuAf+0Ks8CyeObw9+sItSJJGjD6vQJRGpsZll4dz4mGO x7R2cdNjVwIqSZzYKpJS+KvUH9ZGXmtJT4ex+J2SuJKSY62Zv8bsVMerQeDcLuJ1 NSkycec4hqpQUAnjGQXXBqSwTwbVVQ7QHffUZb2GlKB2fhrrs3QlOtQN/hl118MK b/1pSV5frk5jcFJ8y++rmmOmsaw883P/hB+noeO1FJFdNxn3DjJqyF6yZMblT8n6 hBrAnWprk4dnCgaFhKxYEKwiHDYozTcN1VN+eTbHapAjmaRKFtCjvxFj43nho6gJ VeJOtlGkjBDa9g== -----END CERTIFICATE-----Generated at Tue Dec 23 14:53:14 2025 by rpki-client