This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json) Hash identifier: h86LH9s+Ly7ruUZEbhyFpVGRXmFmLs4gjEsWvRjWlLU= Subject key identifier: 0E:F4:68:1C:1C:DE:21:5B:B9:A9:07:4A:63:14:E1:81:94:AD:24:99 Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99 Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99 Certificate serial: 019AF49C5B2D9EA7D688390F69FF5F407469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 17:01:18 +0000 Manifest this update: Sat 06 Dec 2025 17:01:18 +0000 Manifest next update: Sun 07 Dec 2025 17:01:18 +0000 Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=) 2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: 9LJhj5KagFmD6+btvxjyunbC3xdpcCiadPC4kBKb974=) 3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5b:2d:9e:a7:d6:88:39:0f:69:ff:5f:40:74:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99 Validity Not Before: Dec 6 17:01:18 2025 GMT Not After : Dec 7 17:01:18 2025 GMT Subject: CN=0ef4681c1cde215bb9a9074a6314e18194ad2499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:c3:57:83:e6:21:4c:30:2c:31:87:a1:14: a9:44:c7:a2:a6:1c:52:5f:d3:f0:cc:e3:44:a8:d8: de:34:72:77:3f:01:9e:75:be:ba:cf:a0:0a:f9:80: 31:1a:1b:f0:87:a5:9e:76:5a:ed:04:51:fd:ef:5e: c5:84:1e:d9:21:e9:85:69:d0:02:08:34:a4:37:f4: fb:40:99:e2:49:a1:32:03:94:50:8c:4e:db:d9:84: ae:eb:81:66:83:b4:0b:6a:b7:6c:bf:33:f6:9d:26: df:ad:02:9b:c5:c6:2a:2d:8c:b3:c3:be:9a:04:9b: b3:4a:d1:08:86:69:fa:13:06:2d:b8:f5:40:91:4d: a7:9a:27:ef:e2:dc:25:73:83:73:17:19:ad:6b:f5: 9d:90:2b:3f:21:e9:4d:0e:7b:14:2e:8e:b2:32:19: 3d:ed:49:a8:e7:b6:55:4d:c1:69:ac:f0:93:53:ce: 04:a6:70:d9:be:c1:3b:49:43:10:74:f8:a0:05:5e: 37:08:50:7d:81:1d:4a:58:dd:85:e6:84:d2:f8:b9: 3d:de:db:c9:3d:f6:5d:c5:b6:f5:8c:37:34:30:eb: f2:89:52:85:cc:b2:fb:31:3b:6f:5d:2f:a8:fa:c5: 7c:9b:ea:5c:09:db:d9:9c:ac:e4:d5:a7:dc:3e:6a: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:68:1C:1C:DE:21:5B:B9:A9:07:4A:63:14:E1:81:94:AD:24:99 X509v3 Authority Key Identifier: keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:05:c1:ae:46:74:0c:e0:97:89:80:4e:4d:9b:12:db:0f:e9: 2b:ce:7c:c0:da:7b:8d:db:8d:9d:ed:7d:1d:1c:47:dd:dc:05: e6:e0:d4:c8:2d:9d:fe:92:b8:a8:75:d1:ef:9a:0c:07:53:03: 04:90:f1:c7:be:b3:ef:ec:11:df:ff:67:bb:9d:1c:f4:4c:87: 40:dc:6d:5a:27:e5:6d:be:d4:12:52:1c:e6:58:e2:15:a6:1d: ec:3e:af:ed:33:ae:49:ae:57:b9:39:1b:70:04:aa:ec:0c:0f: 2d:3d:9c:ff:fd:08:41:8a:8d:33:10:ea:18:b4:bf:ac:c4:8b: 47:16:24:28:a0:18:2a:b5:c6:f6:ad:ed:de:da:00:6c:6a:ad: b5:20:c9:c3:bb:44:5f:df:c2:ee:b2:53:13:f2:5c:ee:6d:71: 7e:31:2e:29:ee:0c:d6:b7:14:d6:61:d4:83:ad:52:1f:13:91: 13:f2:3a:22:c3:79:19:d0:0e:67:35:a8:c5:f7:70:73:53:1c: cf:e3:ae:cc:9b:9a:79:20:2b:fb:46:f7:73:5c:a0:0d:45:ee: ad:4f:46:91:8f:6c:5f:ba:80:1c:7a:6f:a5:73:ec:fe:c5:ed: 16:f0:b8:a5:cb:00:09:12:2a:7f:10:1c:e4:23:d0:ce:92:da: 44:8d:f0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFstnqfWiDkPaf9fQHRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5 ZGZjOTkwHhcNMjUxMjA2MTcwMTE4WhcNMjUxMjA3MTcwMTE4WjAzMTEwLwYDVQQD EygwZWY0NjgxYzFjZGUyMTViYjlhOTA3NGE2MzE0ZTE4MTk0YWQyNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw7DV4PmIUwwLDGHoRSpRMeiphxS X9PwzONEqNjeNHJ3PwGedb66z6AK+YAxGhvwh6WedlrtBFH9717FhB7ZIemFadAC CDSkN/T7QJniSaEyA5RQjE7b2YSu64Fmg7QLardsvzP2nSbfrQKbxcYqLYyzw76a BJuzStEIhmn6EwYtuPVAkU2nmifv4twlc4NzFxmta/WdkCs/IelNDnsULo6yMhk9 7Umo57ZVTcFprPCTU84EpnDZvsE7SUMQdPigBV43CFB9gR1KWN2F5oTS+Lk93tvJ PfZdxbb1jDc0MOvyiVKFzLL7MTtvXS+o+sV8m+pcCdvZnKzk1afcPmpKDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA70aBwc3iFbuakHSmMU4YGUrSSZMB8GA1UdIwQY MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQXBrkZ0 DOCXiYBOTZsS2w/pK858wNp7jduNne19HRxH3dwF5uDUyC2d/pK4qHXR75oMB1MD BJDxx76z7+wR3/9nu50c9EyHQNxtWiflbb7UElIc5ljiFaYd7D6v7TOuSa5XuTkb cASq7AwPLT2c//0IQYqNMxDqGLS/rMSLRxYkKKAYKrXG9q3t3toAbGqttSDJw7tE X9/C7rJTE/Jc7m1xfjEuKe4M1rcU1mHUg61SHxORE/I6IsN5GdAOZzWoxfdwc1Mc z+OuzJuaeSAr+0b3c1ygDUXurU9GkY9sX7qAHHpvpXPs/sXtFvC4pcsACRIqfxAc 5CPQzpLaRI3whQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:39 2025 by rpki-client