This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json) Hash identifier: Mfc2vAC/Y0QnT3v+onamundEc1QSm3vaNs7KyDAoCi4= Subject key identifier: 0D:FC:2D:E1:00:6C:2B:75:CA:3E:E8:6A:BD:25:09:FE:A2:2A:30:00 Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Certificate serial: 019B446E58865CC132B57F3E84BBFD960ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 05:00:40 +0000 Manifest this update: Mon 22 Dec 2025 05:00:40 +0000 Manifest next update: Tue 23 Dec 2025 05:00:40 +0000 Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: qYZ/c7alvCdR0zw+kyEqFi8u8TLyPBoA7yughtEubNU=) 2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=) 3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=) 4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:58:86:5c:c1:32:b5:7f:3e:84:bb:fd:96:0a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Validity Not Before: Dec 22 05:00:40 2025 GMT Not After : Dec 23 05:00:40 2025 GMT Subject: CN=0dfc2de1006c2b75ca3ee86abd2509fea22a3000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:9e:1d:ab:da:4a:2f:4e:e5:39:7c:34:c4: 17:e9:06:49:43:bf:eb:eb:cf:8b:30:72:df:74:71: 08:97:09:c0:37:bc:52:ec:63:5a:f2:02:97:6d:f8: 6c:52:3c:f3:d7:0c:4f:85:68:ca:ae:41:e9:b1:4b: 4f:05:37:af:b4:61:62:52:6a:c7:58:90:ff:0b:07: 81:2f:41:b4:ba:4a:cb:77:9d:5f:9f:b9:85:45:5b: 87:ce:cd:ff:e7:d4:93:36:72:1d:3d:43:b1:69:25: 4c:c1:49:d7:6e:8c:e9:bd:fb:2c:97:c0:3b:08:33: 13:4f:9b:8a:5e:80:12:b9:25:6e:1f:97:22:34:c0: d2:af:25:fe:39:cd:56:2a:06:a0:81:bd:3e:44:29: e9:7f:d6:6c:83:23:d3:39:5b:29:40:54:d2:ed:11: ff:23:b9:3f:d3:29:75:46:f4:9f:e4:d1:c0:7d:a3: 65:ea:47:69:4f:de:4a:39:44:37:9c:4e:bc:af:24: 8b:6f:3e:6d:14:6c:0b:19:5d:df:59:80:ff:c0:6b: 97:1f:bf:d1:38:6f:c2:30:c6:ad:e5:73:f0:ae:59: a5:55:8b:7d:41:e4:83:1f:45:62:3a:da:c0:c7:13: b7:90:88:fd:5b:30:7e:59:ae:f5:f5:35:25:bc:90: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FC:2D:E1:00:6C:2B:75:CA:3E:E8:6A:BD:25:09:FE:A2:2A:30:00 X509v3 Authority Key Identifier: keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b7:4e:bb:39:41:25:77:70:fc:7d:f9:d9:e4:c4:a1:92:29: a4:a0:b6:5a:4c:2e:e8:18:24:bf:ef:20:38:4c:f7:1f:be:dd: 8c:90:b8:a7:aa:27:67:3f:52:75:24:75:cd:eb:9b:55:87:8f: 52:70:21:eb:05:0b:6f:17:e5:73:10:35:bf:ce:0d:42:c6:ec: 2d:c3:1b:bf:88:c6:56:46:5f:0f:1c:90:4d:87:f9:20:13:97: cc:2d:a5:31:e6:e5:38:af:37:f3:fe:60:78:ca:63:dd:af:eb: af:7e:86:eb:c6:92:40:e0:4c:20:bb:8c:44:5d:dc:63:87:a6: 43:09:c1:fd:de:24:80:92:c3:1e:df:be:07:5e:7d:16:0d:17: 6c:81:90:8e:45:fc:b4:d2:c7:bb:db:43:5e:a8:35:40:2c:ee: 77:e4:c9:64:c8:f3:0b:fc:a7:07:38:bf:1d:ff:7f:64:79:07: db:b3:cf:f3:f0:b4:a1:1b:a6:32:47:f3:0e:3a:17:0d:d5:08: 5a:e3:6a:f5:86:86:1f:6d:df:a2:0b:4c:99:23:ee:f1:10:98: d9:de:f6:ab:6d:1a:4a:ef:63:7b:69:c7:bd:39:4e:01:e7:9a: d5:66:8c:2b:ed:e0:89:83:a2:7b:9f:b2:44:0e:36:83:7c:5d: ee:ba:0a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbliGXMEytX8+hLv9lgq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz YTQxZjgwHhcNMjUxMjIyMDUwMDQwWhcNMjUxMjIzMDUwMDQwWjAzMTEwLwYDVQQD EygwZGZjMmRlMTAwNmMyYjc1Y2EzZWU4NmFiZDI1MDlmZWEyMmEzMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy2eHavaSi9O5Tl8NMQX6QZJQ7/r 68+LMHLfdHEIlwnAN7xS7GNa8gKXbfhsUjzz1wxPhWjKrkHpsUtPBTevtGFiUmrH WJD/CweBL0G0ukrLd51fn7mFRVuHzs3/59STNnIdPUOxaSVMwUnXbozpvfssl8A7 CDMTT5uKXoASuSVuH5ciNMDSryX+Oc1WKgaggb0+RCnpf9ZsgyPTOVspQFTS7RH/ I7k/0yl1RvSf5NHAfaNl6kdpT95KOUQ3nE68rySLbz5tFGwLGV3fWYD/wGuXH7/R OG/CMMat5XPwrlmlVYt9QeSDH0ViOtrAxxO3kIj9WzB+Wa719TUlvJDxxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA38LeEAbCt1yj7oar0lCf6iKjAAMB8GA1UdIwQY MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbdOuzlB JXdw/H352eTEoZIppKC2Wkwu6Bgkv+8gOEz3H77djJC4p6onZz9SdSR1zeubVYeP UnAh6wULbxflcxA1v84NQsbsLcMbv4jGVkZfDxyQTYf5IBOXzC2lMeblOK838/5g eMpj3a/rr36G68aSQOBMILuMRF3cY4emQwnB/d4kgJLDHt++B159Fg0XbIGQjkX8 tNLHu9tDXqg1QCzud+TJZMjzC/ynBzi/Hf9/ZHkH27PP8/C0oRumMkfzDjoXDdUI WuNq9YaGH23fogtMmSPu8RCY2d72q20aSu9je2nHvTlOAeea1WaMK+3giYOie5+y RA42g3xd7roKCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:14:10 2025 by rpki-client