This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json) Hash identifier: K9ZPdMN9EweNjB9cLLvB/JjkqupNkA1B/41JaCztnRg= Subject key identifier: 1E:5A:FC:F5:29:9F:C4:E9:08:00:1C:B0:FB:5A:EF:2C:18:49:0B:3F Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Certificate serial: 019B2D794605C701153D7A0EE6A0620ED473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft Manifest number: 14B8 Signing time: Wed 17 Dec 2025 18:01:20 +0000 Manifest this update: Wed 17 Dec 2025 18:01:20 +0000 Manifest next update: Thu 18 Dec 2025 18:01:20 +0000 Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: nhxNl30DzjGSXTzjvexLCMQ/1eM38sRFE5XQ38GrrX4=) 2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:46:05:c7:01:15:3d:7a:0e:e6:a0:62:0e:d4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Validity Not Before: Dec 17 18:01:20 2025 GMT Not After : Dec 18 18:01:20 2025 GMT Subject: CN=1e5afcf5299fc4e908001cb0fb5aef2c18490b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:f9:62:bd:d4:76:06:f4:98:29:95:9a:4b: f1:95:63:f9:34:85:12:23:fb:d6:8d:30:2a:4a:99: 3f:b4:9d:83:9c:fa:9c:50:85:76:66:8b:23:0a:5e: c4:f2:e8:ca:96:ae:d6:31:49:6a:73:f5:b5:35:34: 1b:46:ac:35:2f:f3:78:c8:74:64:2a:36:0b:bd:a4: 63:2a:20:a7:dc:f3:67:75:f7:c0:db:03:e5:09:5a: 7c:f6:7d:21:d6:00:e6:54:c4:ac:41:c8:b7:e4:4a: 96:f8:df:ad:26:7a:38:fc:6c:e2:c5:1b:2b:65:78: 99:34:a2:34:b8:cf:cd:2b:db:d3:98:64:e7:da:75: b4:05:9a:60:3b:0b:2e:09:7e:d4:66:1a:04:bf:08: 4c:50:57:70:c4:d5:3f:f4:46:a2:86:a3:d2:3a:8d: 3c:a8:78:bd:1a:86:f4:da:7c:e3:73:35:90:f5:d1: a8:3b:5d:b9:85:8b:ee:1f:f4:1c:0d:ed:97:fc:cb: 2f:78:0a:48:50:d6:a4:d3:2b:1a:15:07:56:c6:c1: 78:3c:9d:c2:3b:78:e7:8d:86:82:5e:98:69:ac:33: 33:18:3c:53:29:03:b6:64:c5:b4:0f:44:13:90:3f: 1e:4e:5e:02:8a:28:da:bb:1e:c0:ca:46:1b:c8:72: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5A:FC:F5:29:9F:C4:E9:08:00:1C:B0:FB:5A:EF:2C:18:49:0B:3F X509v3 Authority Key Identifier: keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:93:87:dd:e2:b4:be:78:fd:21:c4:cc:7a:72:28:87:53: 34:a0:53:bc:4b:11:50:75:85:a9:ff:60:4f:39:34:c0:28:11: f7:ed:4e:76:4a:24:3f:84:00:a3:25:9f:44:02:e2:aa:9f:df: 3f:4a:c4:a6:48:0e:45:4d:43:05:cb:52:a8:d9:6a:88:6c:e8: f2:fc:ae:a2:20:75:10:94:b4:47:81:4a:14:fe:3b:0c:91:d0: 6f:cf:ab:2b:64:cb:c3:a0:2a:a4:bd:b5:69:74:b0:95:6e:ef: 0a:92:4a:4d:64:12:7d:c4:30:32:9e:1e:48:67:20:74:e1:41: 98:16:5a:24:60:7b:7d:98:29:33:a9:6f:23:d0:dc:67:ee:bc: f2:23:95:a4:9c:04:9a:1a:97:38:8f:02:94:2d:1f:2b:fa:6f: 65:c2:4a:d1:68:1e:8d:2e:25:63:fc:6f:db:c1:fa:9d:d9:80: 88:9d:69:d7:a8:b5:bc:e8:dc:4b:2d:f5:bb:40:92:92:2f:5c: db:15:92:3d:3f:3d:38:4c:3e:71:80:a1:83:d2:52:ca:22:ca: c1:9d:f5:37:a7:b0:f2:ad:7d:80:13:34:ec:55:d3:2e:10:64: ac:12:09:3c:dc:45:e5:7c:b5:b1:cd:c3:cc:fc:42:1d:63:63: 76:9b:26:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteUYFxwEVPXoO5qBiDtRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODA1ZTFjZmZjMTM5MmU3ZDE3NjhmOGYwNTU0YTFjN2Y2 MzQ0YWQwHhcNMjUxMjE3MTgwMTIwWhcNMjUxMjE4MTgwMTIwWjAzMTEwLwYDVQQD EygxZTVhZmNmNTI5OWZjNGU5MDgwMDFjYjBmYjVhZWYyYzE4NDkwYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDv5Yr3Udgb0mCmVmkvxlWP5NIUS I/vWjTAqSpk/tJ2DnPqcUIV2ZosjCl7E8ujKlq7WMUlqc/W1NTQbRqw1L/N4yHRk KjYLvaRjKiCn3PNndffA2wPlCVp89n0h1gDmVMSsQci35EqW+N+tJno4/GzixRsr ZXiZNKI0uM/NK9vTmGTn2nW0BZpgOwsuCX7UZhoEvwhMUFdwxNU/9EaihqPSOo08 qHi9Gob02nzjczWQ9dGoO125hYvuH/QcDe2X/MsveApIUNak0ysaFQdWxsF4PJ3C O3jnjYaCXphprDMzGDxTKQO2ZMW0D0QTkD8eTl4Ciijaux7AykYbyHI8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5a/PUpn8TpCAAcsPta7ywYSQs/MB8GA1UdIwQY MBaAFNeAXhz/wTkufRdo+PBVShx/Y0StMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUt MjI1NGJjMmNhNmMwLzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUtMjI1NGJjMmNhNmMw LzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIiTh93i tL54/SHEzHpyKIdTNKBTvEsRUHWFqf9gTzk0wCgR9+1OdkokP4QAoyWfRALiqp/f P0rEpkgORU1DBctSqNlqiGzo8vyuoiB1EJS0R4FKFP47DJHQb8+rK2TLw6AqpL21 aXSwlW7vCpJKTWQSfcQwMp4eSGcgdOFBmBZaJGB7fZgpM6lvI9DcZ+688iOVpJwE mhqXOI8ClC0fK/pvZcJK0WgejS4lY/xv28H6ndmAiJ1p16i1vOjcSy31u0CSki9c 2xWSPT89OEw+cYChg9JSyiLKwZ31N6ew8q19gBM07FXTLhBkrBIJPNxF5Xy1sc3D zPxCHWNjdpsmoQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:57:47 2025 by rpki-client