This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json) Hash identifier: rVIm00S5GHJW1hvY3Xl+G/ekVCG8k8w+9zIfZhSoPHQ= Subject key identifier: 09:20:F9:16:40:A7:52:65:BF:A8:18:75:C5:64:B2:9A:F7:EF:BC:84 Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Certificate serial: 019B3268AE44E269863C36E087FA9E3D0296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft Manifest number: 12AC Signing time: Thu 18 Dec 2025 17:01:19 +0000 Manifest this update: Thu 18 Dec 2025 17:01:19 +0000 Manifest next update: Fri 19 Dec 2025 17:01:19 +0000 Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: KzRpTrwgA4NTiksZDC2/aPKcIIwDAGxyU25BW4xr6Hs=) 2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:ae:44:e2:69:86:3c:36:e0:87:fa:9e:3d:02:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Validity Not Before: Dec 18 17:01:19 2025 GMT Not After : Dec 19 17:01:19 2025 GMT Subject: CN=0920f91640a75265bfa81875c564b29af7efbc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:90:90:10:ac:ce:90:8c:ac:87:3f:f4:6a: 75:9d:43:ff:0d:9e:4d:1d:74:27:10:85:38:61:c1: 77:3f:b3:92:8f:ae:67:7f:40:a9:a2:8c:dc:c7:15: 47:c4:b3:85:37:87:61:11:03:92:17:1d:d0:02:9e: 0d:5f:26:8c:b7:f3:35:2e:c7:d6:d6:81:28:32:e9: 50:a5:f7:9b:f5:2a:3d:c0:8a:02:86:8b:a5:91:0d: c0:8d:b5:02:b0:d2:2c:99:f6:f7:a7:8a:28:7b:7e: e8:5b:d8:a8:0e:76:18:2f:3d:3c:36:80:03:b6:3a: 88:2b:9d:55:c7:eb:1e:4c:64:7a:a4:f0:c1:e0:b0: 76:2e:15:8a:be:6f:f2:a9:54:17:4f:67:30:2c:17: c7:da:3f:e1:46:b6:8c:ff:88:de:c7:60:3c:4a:03: 27:a7:61:cc:8b:c6:a3:04:b2:00:39:da:4b:df:2f: 7b:78:a1:15:64:1b:1a:73:22:1d:f1:a3:5f:be:d2: 3d:12:fc:dd:50:46:0c:79:7a:df:67:c2:8e:c3:f0: b7:57:3e:db:81:00:d2:0d:c1:f9:e1:ae:a6:58:ee: 0f:13:b9:94:4b:cc:09:b0:c4:4c:65:c6:9f:07:7c: 4c:d9:1c:89:dd:e7:38:85:a6:be:35:ce:90:73:60: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:20:F9:16:40:A7:52:65:BF:A8:18:75:C5:64:B2:9A:F7:EF:BC:84 X509v3 Authority Key Identifier: keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:91:1c:4f:c5:5a:c7:29:fc:62:7c:e1:9a:8d:f7:5b:86: 06:14:02:f7:97:d2:e3:7b:6f:9d:7d:10:6e:d9:7e:77:f1:ae: 38:a3:51:01:df:ca:3b:16:72:38:f9:05:18:c5:8e:2c:3d:36: 5d:b8:e2:71:ba:1d:7a:e7:ea:8d:ff:55:c9:dd:8d:2f:70:18: cd:03:f3:8b:a0:f4:67:6d:82:59:88:43:07:e5:8c:8e:95:b7: 23:13:64:d7:fe:99:bd:63:a7:c9:72:39:d0:47:90:aa:67:54: 72:89:cb:f6:26:47:5e:70:26:3f:f1:51:94:5e:10:2b:7e:e4: 28:0e:49:d6:a3:9a:59:39:62:e5:92:49:d4:fb:68:2f:32:0d: 86:d0:33:29:b6:3f:f4:d3:21:3c:c3:7c:c1:db:ba:b6:07:ea: 9e:2c:9b:1a:ca:1a:df:00:e9:4b:07:30:ec:32:25:0c:44:11: 4f:38:bb:6f:c9:2e:bb:7d:6b:d0:1c:af:8a:84:49:a8:68:56: 53:7a:7c:44:6f:2e:2d:36:4a:49:03:4b:ca:33:b1:53:a0:20: da:8b:ba:26:8b:1e:83:65:7b:c0:cf:16:df:54:1c:6b:e0:b9: 0f:8e:6d:f8:fc:ed:8a:c3:5a:07:4a:0b:90:9e:71:df:52:02: b2:fd:c3:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaK5E4mmGPDbgh/qePQKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3 MTQ0NTkwHhcNMjUxMjE4MTcwMTE5WhcNMjUxMjE5MTcwMTE5WjAzMTEwLwYDVQQD EygwOTIwZjkxNjQwYTc1MjY1YmZhODE4NzVjNTY0YjI5YWY3ZWZiYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1CQkBCszpCMrIc/9Gp1nUP/DZ5N HXQnEIU4YcF3P7OSj65nf0CpoozcxxVHxLOFN4dhEQOSFx3QAp4NXyaMt/M1LsfW 1oEoMulQpfeb9So9wIoChoulkQ3AjbUCsNIsmfb3p4ooe37oW9ioDnYYLz08NoAD tjqIK51Vx+seTGR6pPDB4LB2LhWKvm/yqVQXT2cwLBfH2j/hRraM/4jex2A8SgMn p2HMi8ajBLIAOdpL3y97eKEVZBsacyId8aNfvtI9EvzdUEYMeXrfZ8KOw/C3Vz7b gQDSDcH54a6mWO4PE7mUS8wJsMRMZcafB3xM2RyJ3ec4haa+Nc6Qc2AahQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkg+RZAp1Jlv6gYdcVkspr377yEMB8GA1UdIwQY MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0 LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi+RHE/F Wscp/GJ84ZqN91uGBhQC95fS43tvnX0Qbtl+d/GuOKNRAd/KOxZyOPkFGMWOLD02 Xbjicbodeufqjf9Vyd2NL3AYzQPzi6D0Z22CWYhDB+WMjpW3IxNk1/6ZvWOnyXI5 0EeQqmdUconL9iZHXnAmP/FRlF4QK37kKA5J1qOaWTli5ZJJ1PtoLzINhtAzKbY/ 9NMhPMN8wdu6tgfqniybGsoa3wDpSwcw7DIlDEQRTzi7b8kuu31r0ByvioRJqGhW U3p8RG8uLTZKSQNLyjOxU6Ag2ou6Joseg2V7wM8W31Qca+C5D45t+PztisNaB0oL kJ5x31ICsv3DNA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:12 2025 by rpki-client