This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json) Hash identifier: WimZJPCUNVwPDzbSsYqvofqL2DVV5bNIDr7YMV7D2fU= Subject key identifier: 0E:DF:DC:EF:6C:53:07:A4:E8:A2:58:AB:ED:8D:87:39:CC:5A:9E:DB Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20 Certificate serial: 019AF1D1C8C38436E5A40823F572582FFEE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft Manifest number: 17A6 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: B8q_Ibebc5xuxzRGd478Vz8wacc.roa (hash: 7TxxkXjJMigm1zrdep1gr/0+c2ofcQeuEJMCWogNg+s=) 2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: xQV5DunIurRAPI7l0woDbUV3xAjA4nX54KqN/MNSHDo=) 3: fokVVRta6Se4qMfm0QW8Wvhb8to.roa (hash: GVDAbNxQsgJw7rFS4VJXxWwqpIOjbAD4y/lPqd19DXM=) 4: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c8:c3:84:36:e5:a4:08:23:f5:72:58:2f:fe:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=0edfdcef6c5307a4e8a258abed8d8739cc5a9edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:ec:85:ce:ba:a7:4e:c2:17:2e:14:26:28: 34:43:fa:dc:4a:1f:7a:1e:59:d4:4e:27:5b:b9:c4: d3:5b:ab:c2:02:bb:b2:72:cf:12:53:fc:70:e6:68: 84:9d:3c:03:2e:f0:8e:b5:87:67:7f:46:e9:c8:81: ba:1b:1e:19:17:c1:22:22:b0:db:c2:b1:ac:fe:cc: 68:3b:23:f3:53:38:f3:bc:8f:27:63:a5:72:0f:de: c0:a0:5e:16:3a:66:05:43:bf:f2:ab:15:ac:b7:6b: 16:16:54:ba:7d:34:a2:d3:0e:1a:8a:36:fa:45:af: 0e:43:27:4e:0d:e8:6f:51:1f:a3:5f:8c:ec:2b:c1: 9d:da:35:49:52:14:28:83:35:03:87:86:b0:6a:9c: af:35:14:b9:de:b3:11:bd:47:e9:40:56:61:1e:03: c9:d0:b0:ba:94:a4:8c:28:ee:4f:28:22:d0:7c:9e: e9:d6:3b:05:b5:e9:a6:29:30:c8:c9:ca:32:9e:69: de:e6:5b:f6:f9:91:00:1d:73:cf:62:bd:de:e3:48: 96:94:0c:78:33:b4:91:7e:ff:57:ef:61:f9:24:01: ed:21:20:64:1b:bb:11:5f:25:55:0a:01:04:89:24: 2c:92:87:7e:07:94:33:bd:bf:7a:fe:ae:00:7c:40: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DF:DC:EF:6C:53:07:A4:E8:A2:58:AB:ED:8D:87:39:CC:5A:9E:DB X509v3 Authority Key Identifier: keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d6:66:5a:d3:73:a9:75:d4:d3:51:ca:7e:2d:47:67:17:46: 14:16:3a:23:93:20:15:c2:5d:67:63:18:a8:25:6d:38:c0:11: 1e:e3:0f:b7:85:8f:38:aa:5c:f3:e7:fc:b7:7b:c7:19:4e:12: a0:f0:ec:e3:52:84:32:d2:c8:a1:34:8a:03:25:a8:d1:c6:9c: c4:e2:5f:e8:25:61:f0:c9:5c:5f:f6:02:89:1f:d0:54:4d:b2: 78:08:b0:a5:fe:4b:13:49:13:3a:2b:8b:6c:7a:cb:72:d2:47: 73:ec:8f:40:93:df:4f:d8:18:24:45:ec:31:78:77:b4:28:06: 6a:77:55:22:9f:0b:6a:02:1e:d3:ef:85:c0:55:e0:62:59:21: 3e:7b:4d:ec:3d:ae:be:77:b4:f7:32:b5:cc:a4:98:91:b5:b3: f9:35:43:0d:64:b4:83:ea:8d:42:e4:04:49:f9:82:60:c1:40: dd:77:0c:7c:7b:e2:41:7a:79:e9:20:4a:fc:5b:45:72:5d:87: 44:8d:7d:79:3d:93:df:c6:7e:b6:65:b1:d7:2d:c3:85:aa:ec: 38:f8:0a:7a:48:6b:75:ba:5c:80:94:c3:19:0c:54:ae:f4:40: 4f:c4:d5:0e:f0:1e:25:8e:96:a1:d3:9e:ea:d6:85:ce:42:41: d2:7e:da:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cjDhDblpAgj9XJYL/7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0 OTRlMjAwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygwZWRmZGNlZjZjNTMwN2E0ZThhMjU4YWJlZDhkODczOWNjNWE5ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPvshc66p07CFy4UJig0Q/rcSh96 HlnUTidbucTTW6vCAruycs8SU/xw5miEnTwDLvCOtYdnf0bpyIG6Gx4ZF8EiIrDb wrGs/sxoOyPzUzjzvI8nY6VyD97AoF4WOmYFQ7/yqxWst2sWFlS6fTSi0w4aijb6 Ra8OQydODehvUR+jX4zsK8Gd2jVJUhQogzUDh4awapyvNRS53rMRvUfpQFZhHgPJ 0LC6lKSMKO5PKCLQfJ7p1jsFtemmKTDIycoynmne5lv2+ZEAHXPPYr3e40iWlAx4 M7SRfv9X72H5JAHtISBkG7sRXyVVCgEEiSQskod+B5Qzvb96/q4AfECC4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7f3O9sUwek6KJYq+2NhznMWp7bMB8GA1UdIwQY MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9ZmWtNz qXXU01HKfi1HZxdGFBY6I5MgFcJdZ2MYqCVtOMARHuMPt4WPOKpc8+f8t3vHGU4S oPDs41KEMtLIoTSKAyWo0cacxOJf6CVh8MlcX/YCiR/QVE2yeAiwpf5LE0kTOiuL bHrLctJHc+yPQJPfT9gYJEXsMXh3tCgGandVIp8LagIe0++FwFXgYlkhPntN7D2u vne09zK1zKSYkbWz+TVDDWS0g+qNQuQESfmCYMFA3XcMfHviQXp56SBK/FtFcl2H RI19eT2T38Z+tmWx1y3DharsOPgKekhrdbpcgJTDGQxUrvRAT8TVDvAeJY6WodOe 6taFzkJB0n7amQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:58 2025 by rpki-client