This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json) Hash identifier: x+dgB61T4HN0PEKbVjpAq8M8iRPNiPG/y0v3pIzrHyU= Subject key identifier: 81:81:2B:20:9B:13:DD:88:29:4A:0F:9D:3C:B5:96:01:6C:48:04:CF Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69 Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969 Certificate serial: 019AF12CC04DD80C16FBEF07934D3152A99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft Manifest number: 0637 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: lTT/8zrwQzsFqfzFp4TglJvfiSkWZ8QvEJEHf4dw9zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c0:4d:d8:0c:16:fb:ef:07:93:4d:31:52:a9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=81812b209b13dd88294a0f9d3cb596016c4804cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:ad:6e:11:06:cb:70:7f:16:36:9b:65:7a: e8:d3:9a:f3:0f:84:43:53:86:db:11:c9:cb:34:f8: 81:fa:2a:7b:33:5b:73:9a:42:43:15:53:9a:fb:85: 21:aa:87:64:eb:7e:aa:8f:00:0c:f0:5f:67:b2:90: f8:2d:e0:b8:b5:c4:e3:89:9a:c5:50:a3:80:0d:aa: 7a:40:75:a9:4d:d7:1f:dd:86:1e:f8:e6:c6:b3:ba: 6e:16:d9:b1:88:2c:b7:1b:a4:f7:89:f6:ba:b7:a8: 29:02:44:df:f8:18:d2:80:e5:e6:29:e4:0e:ae:7f: 52:d0:56:ef:65:09:79:99:8a:8f:ed:be:bc:0a:25: 67:93:7d:ee:00:69:fd:e8:2a:bd:f4:d2:ee:70:04: 74:d7:a8:45:8d:ff:4a:8a:af:fa:70:88:0f:37:81: c8:d7:fe:d5:2f:f8:b1:2d:a3:d2:f5:76:0b:36:4e: dd:02:d0:0f:30:12:be:d3:72:fc:fd:7c:81:60:0a: af:ea:d0:6e:a9:90:a2:a9:70:0b:a4:d0:8b:ec:b6: 66:1f:34:6b:13:4c:cd:04:6f:d2:3c:3b:26:a4:59: 14:c4:31:9a:b6:39:35:d2:e6:77:8c:e3:93:90:01: de:87:2a:6b:20:3d:ef:a2:59:ba:ed:b4:7d:13:6c: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:2B:20:9B:13:DD:88:29:4A:0F:9D:3C:B5:96:01:6C:48:04:CF X509v3 Authority Key Identifier: keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c8:60:13:cf:32:8c:d2:76:7d:d0:dc:31:c8:e6:31:73:cb: ec:a7:07:59:6c:4f:7a:1d:94:97:99:37:4a:7e:83:35:a7:ea: 91:f2:be:38:8e:11:bc:ed:34:41:a7:62:87:5f:82:69:80:db: 54:bf:0c:36:e2:a5:d5:42:77:40:7f:d7:42:61:41:17:9e:51: 19:3d:18:ef:6a:4a:0e:9e:a6:82:d2:26:22:a1:02:d3:4d:21: bd:37:8a:ec:d4:87:d7:e3:c8:3a:f5:3c:40:2f:61:21:ef:ff: a4:13:5d:95:ec:b0:69:43:8b:c0:47:e4:31:21:1d:60:d7:72: 19:36:1c:c9:6f:87:53:30:81:2e:c7:c8:e2:1e:1b:0e:5d:29: 20:85:99:e6:54:a5:4b:ef:f5:a5:24:06:5e:cc:85:57:3a:f8: 15:91:48:da:e4:77:86:11:54:22:9a:a7:91:37:ee:99:f7:ed: 47:69:03:8d:c7:29:43:d0:fa:79:9e:35:14:0a:ac:c3:82:ec: a7:bd:95:64:ac:bc:0d:47:20:b1:4f:c2:a8:2a:2e:15:28:e5: dd:24:02:af:75:96:26:ce:73:f6:8d:ed:87:a6:f5:b1:42:ef: 78:49:41:5f:25:b4:e6:60:95:92:8c:76:ce:b9:d7:2e:31:45: 57:b8:0e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMBN2AwW++8Hk00xUqmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk NmQ5NjkwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD Eyg4MTgxMmIyMDliMTNkZDg4Mjk0YTBmOWQzY2I1OTYwMTZjNDgwNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDKtbhEGy3B/FjabZXro05rzD4RD U4bbEcnLNPiB+ip7M1tzmkJDFVOa+4Uhqodk636qjwAM8F9nspD4LeC4tcTjiZrF UKOADap6QHWpTdcf3YYe+ObGs7puFtmxiCy3G6T3ifa6t6gpAkTf+BjSgOXmKeQO rn9S0FbvZQl5mYqP7b68CiVnk33uAGn96Cq99NLucAR016hFjf9Kiq/6cIgPN4HI 1/7VL/ixLaPS9XYLNk7dAtAPMBK+03L8/XyBYAqv6tBuqZCiqXALpNCL7LZmHzRr E0zNBG/SPDsmpFkUxDGatjk10uZ3jOOTkAHehyprID3volm67bR9E2zrjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGBKyCbE92IKUoPnTy1lgFsSATPMB8GA1UdIwQY MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0 LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAashgE88y jNJ2fdDcMcjmMXPL7KcHWWxPeh2Ul5k3Sn6DNafqkfK+OI4RvO00Qadih1+CaYDb VL8MNuKl1UJ3QH/XQmFBF55RGT0Y72pKDp6mgtImIqEC000hvTeK7NSH1+PIOvU8 QC9hIe//pBNdleywaUOLwEfkMSEdYNdyGTYcyW+HUzCBLsfI4h4bDl0pIIWZ5lSl S+/1pSQGXsyFVzr4FZFI2uR3hhFUIpqnkTfumfftR2kDjccpQ9D6eZ41FAqsw4Ls p72VZKy8DUcgsU/CqCouFSjl3SQCr3WWJs5z9o3th6b1sULveElBXyW05mCVkox2 zrnXLjFFV7gOIw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:06 2025 by rpki-client