This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json) Hash identifier: xjnw25oCeX/trIqRZBDkCEEPXo7CWUbuhbjWvc9cDgo= Subject key identifier: C7:6B:57:68:8F:C7:FE:2B:5B:E4:57:20:F8:23:2C:D6:8E:7C:C9:63 Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Certificate serial: 019B3456D2AE0F44D366CED2A7003E981B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft Manifest number: 12AD Signing time: Fri 19 Dec 2025 02:01:03 +0000 Manifest this update: Fri 19 Dec 2025 02:01:03 +0000 Manifest next update: Sat 20 Dec 2025 02:01:03 +0000 Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: yERP3ce+AQEoSPDg0BsOHE2ph342q5gKcQvbwpjEstI=) 2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:d2:ae:0f:44:d3:66:ce:d2:a7:00:3e:98:1b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Validity Not Before: Dec 19 02:01:03 2025 GMT Not After : Dec 20 02:01:03 2025 GMT Subject: CN=c76b57688fc7fe2b5be45720f8232cd68e7cc963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:7d:f8:af:3b:bd:f1:cd:9e:be:54:c0:a9: 5e:d5:80:dd:68:e3:ba:2d:da:eb:b1:20:6d:f7:60: c4:be:e5:e3:ef:27:5c:f3:b5:12:7d:d0:07:16:61: aa:f5:c2:ec:cb:0e:69:49:33:4e:0a:7d:9d:63:c1: 89:8f:10:ee:3c:49:e8:ad:6d:5a:c2:87:45:2e:66: a9:89:a3:ca:bf:b5:99:93:bb:cc:0c:5f:dc:1b:e4: 04:bc:3b:80:c5:e2:20:0b:d6:81:90:e3:65:24:2b: 1a:74:1e:60:dc:ff:86:98:23:78:f7:91:f8:f0:8d: b4:4b:13:76:b6:49:c5:dd:77:d8:1f:b0:df:5b:af: 54:07:d7:46:d9:c3:16:fc:23:22:34:8b:86:9a:ce: d2:57:c8:6f:10:c9:1a:a9:f0:ed:1a:45:b7:f0:c2: 74:3e:ba:a2:54:01:6b:00:ad:51:8d:93:fa:2c:62: 78:30:9a:9e:ac:f6:a5:70:8a:f0:e9:34:d1:e9:dc: 5b:26:dc:e8:6a:db:a3:1a:71:9f:e8:21:0a:78:54: 89:e4:2a:6d:f1:07:a1:0d:d8:4f:3f:b5:eb:9e:ee: fc:c0:cb:59:45:3f:a4:c2:f8:4a:18:57:00:d5:37: 0a:d7:f6:6f:43:55:2a:1a:c8:fc:45:db:a8:92:dd: f4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:57:68:8F:C7:FE:2B:5B:E4:57:20:F8:23:2C:D6:8E:7C:C9:63 X509v3 Authority Key Identifier: keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d3:76:71:1e:6d:c3:a5:5a:54:c5:5f:39:53:32:2e:44:7e: ae:cf:a1:ad:c5:c0:4c:4e:35:94:31:71:2b:df:61:b5:a1:e4: 53:83:9a:66:fd:ef:1b:19:4a:73:85:d7:e1:38:b8:c3:cb:94: 3f:4e:cc:e2:b3:5f:8b:cc:c4:4b:05:24:64:1a:a8:71:4b:fd: 94:e5:ec:22:c8:63:89:c5:d7:77:e8:d0:66:d4:66:96:b9:e1: c8:c9:61:2c:bc:59:a6:7c:64:e7:95:11:35:70:72:5c:ad:4f: df:1b:4f:5e:36:eb:35:22:93:f9:48:c8:23:8f:1e:30:52:7d: 1d:ad:aa:91:33:08:e0:de:99:f8:ba:13:84:af:42:88:02:38: da:9e:13:1b:ba:54:e7:5f:6f:47:09:96:2e:b8:a3:77:38:30: 51:3b:2d:bd:49:f8:f5:a9:ee:3e:01:af:8c:05:ea:59:c7:7e: e1:39:d0:b3:85:b3:d0:18:09:7f:49:c5:93:2c:20:7f:d5:f9: 12:75:f1:92:db:8c:0c:b5:6a:c0:65:f7:af:09:62:2d:79:68: da:cf:da:57:da:9e:6b:74:73:7b:ac:fb:ff:c1:35:c8:61:db: 5f:94:10:fc:eb:b1:01:a9:47:1c:15:2c:39:50:23:89:47:ad: 34:b4:5e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VtKuD0TTZs7SpwA+mBsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3 MTQ0NTkwHhcNMjUxMjE5MDIwMTAzWhcNMjUxMjIwMDIwMTAzWjAzMTEwLwYDVQQD EyhjNzZiNTc2ODhmYzdmZTJiNWJlNDU3MjBmODIzMmNkNjhlN2NjOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOd9+K87vfHNnr5UwKle1YDdaOO6 LdrrsSBt92DEvuXj7ydc87USfdAHFmGq9cLsyw5pSTNOCn2dY8GJjxDuPEnorW1a wodFLmapiaPKv7WZk7vMDF/cG+QEvDuAxeIgC9aBkONlJCsadB5g3P+GmCN495H4 8I20SxN2tknF3XfYH7DfW69UB9dG2cMW/CMiNIuGms7SV8hvEMkaqfDtGkW38MJ0 PrqiVAFrAK1RjZP6LGJ4MJqerPalcIrw6TTR6dxbJtzoatujGnGf6CEKeFSJ5Cpt 8QehDdhPP7Xrnu78wMtZRT+kwvhKGFcA1TcK1/ZvQ1UqGsj8Rduokt30RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdrV2iPx/4rW+RXIPgjLNaOfMljMB8GA1UdIwQY MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0 LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNN2cR5t w6VaVMVfOVMyLkR+rs+hrcXATE41lDFxK99htaHkU4OaZv3vGxlKc4XX4Ti4w8uU P07M4rNfi8zESwUkZBqocUv9lOXsIshjicXXd+jQZtRmlrnhyMlhLLxZpnxk55UR NXByXK1P3xtPXjbrNSKT+UjII48eMFJ9Ha2qkTMI4N6Z+LoThK9CiAI42p4TG7pU 519vRwmWLrijdzgwUTstvUn49anuPgGvjAXqWcd+4TnQs4Wz0BgJf0nFkywgf9X5 EnXxktuMDLVqwGX3rwliLXlo2s/aV9qea3Rze6z7/8E1yGHbX5QQ/OuxAalHHBUs OVAjiUetNLResw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:25 2025 by rpki-client