This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json) Hash identifier: UXYKGReQF0ZLr2R8jlVqRbYNJAiDOs3shdTPpHev+ws= Subject key identifier: 6E:DC:10:B6:52:D5:29:3D:D3:06:81:DE:C3:A6:6D:FE:5B:F6:69:F7 Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Certificate serial: 019AF0BF53FDBBF7EFC0362B382075DBB97B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft Manifest number: 128A Signing time: Fri 05 Dec 2025 23:01:01 +0000 Manifest this update: Fri 05 Dec 2025 23:01:01 +0000 Manifest next update: Sat 06 Dec 2025 23:01:01 +0000 Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: j+5r9A/2bxOCjCRmeIRN6PqE4f6TKk1islM+Fksm9i8=) 2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:53:fd:bb:f7:ef:c0:36:2b:38:20:75:db:b9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Validity Not Before: Dec 5 23:01:01 2025 GMT Not After : Dec 6 23:01:01 2025 GMT Subject: CN=6edc10b652d5293dd30681dec3a66dfe5bf669f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:bc:5a:34:05:d0:61:6f:ec:bb:09:52:a6: 21:2a:98:c8:78:8d:61:0a:da:f6:eb:c6:4a:fc:c9: 19:b1:a6:ce:5f:10:3a:1d:ae:c1:7e:95:37:f2:4e: 39:a1:c7:0a:75:71:9e:ac:9d:99:3c:d6:cb:53:7f: 2d:ce:c7:3c:15:c9:93:cc:b3:c8:9f:69:f5:8e:20: 1c:23:1c:b2:27:a5:f4:19:8a:57:c5:82:ec:2f:b2: dc:01:88:5c:8f:63:af:be:f6:73:38:e3:0f:0a:93: 33:82:6f:86:32:3f:8d:bd:d7:5b:bc:df:09:9d:e2: ce:37:36:00:5c:db:62:b7:43:c8:95:49:9d:f8:dd: 69:3d:79:c8:f8:4c:82:8b:86:60:49:ab:ac:d5:7a: 14:00:4b:a4:7a:9a:1a:a9:3e:23:88:ff:8d:89:0d: de:fd:7f:56:39:b5:d0:7a:af:6d:44:a4:58:e9:95: bb:56:21:b0:d0:37:76:8d:4f:f1:33:b5:36:64:c8: 89:2a:c0:a1:43:96:a2:83:24:9c:14:c8:d1:db:e7: b7:bb:53:48:7f:e0:3d:44:17:2b:41:74:82:b2:22: d6:10:38:b0:78:ee:4e:29:14:8e:f2:eb:c3:3f:73: 31:27:51:1b:11:e6:b0:d8:33:8a:39:a8:b3:40:e2: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:10:B6:52:D5:29:3D:D3:06:81:DE:C3:A6:6D:FE:5B:F6:69:F7 X509v3 Authority Key Identifier: keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0f:00:69:6f:b3:27:69:6c:aa:65:3a:6e:75:32:b7:cd:70: 97:5d:ab:6f:88:3a:b7:d8:c0:88:b3:f1:62:a1:68:9d:3f:0b: e7:00:20:cc:03:0c:31:5f:0d:80:21:2e:55:d8:ca:aa:1f:14: 90:a6:1f:57:1a:db:e1:28:c0:8c:a1:65:d0:f2:4e:03:bc:2f: 2f:80:67:f2:75:32:48:3c:5f:f5:77:05:93:19:f0:1f:ce:85: ec:7b:99:70:d3:49:65:c9:52:46:8c:d0:10:c0:0c:87:2b:05: d6:a5:2b:87:b7:7b:5f:a1:b6:fd:ca:92:9d:6c:32:96:5c:8f: 14:bf:4c:6f:09:0e:9a:40:a6:12:f9:11:80:1c:7b:bd:3e:0e: db:08:e1:c9:12:a6:ce:95:10:9c:01:0c:23:17:05:4b:c8:2a: 6d:19:9c:24:4d:40:f1:b8:0c:60:45:cf:b0:61:b8:76:d5:1c: 23:5a:56:46:cd:4b:c0:0b:ae:86:62:b7:0d:dd:6a:32:a4:57: 50:bf:bf:b0:6c:6f:22:a6:41:d8:a1:fc:41:a1:7b:d6:d7:39: d6:11:5d:e9:37:66:b6:c4:2a:04:ea:41:04:be:8c:a7:21:78: 36:99:10:fe:0e:98:5b:7a:c3:3a:ee:57:f0:ba:58:a1:a9:98: 44:7c:7f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1P9u/fvwDYrOCB127l7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3 MTQ0NTkwHhcNMjUxMjA1MjMwMTAxWhcNMjUxMjA2MjMwMTAxWjAzMTEwLwYDVQQD Eyg2ZWRjMTBiNjUyZDUyOTNkZDMwNjgxZGVjM2E2NmRmZTViZjY2OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvG8WjQF0GFv7LsJUqYhKpjIeI1h Ctr268ZK/MkZsabOXxA6Ha7BfpU38k45occKdXGerJ2ZPNbLU38tzsc8FcmTzLPI n2n1jiAcIxyyJ6X0GYpXxYLsL7LcAYhcj2OvvvZzOOMPCpMzgm+GMj+NvddbvN8J neLONzYAXNtit0PIlUmd+N1pPXnI+EyCi4ZgSaus1XoUAEukepoaqT4jiP+NiQ3e /X9WObXQeq9tRKRY6ZW7ViGw0Dd2jU/xM7U2ZMiJKsChQ5aigyScFMjR2+e3u1NI f+A9RBcrQXSCsiLWEDiweO5OKRSO8uvDP3MxJ1EbEeaw2DOKOaizQOJ+YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7cELZS1Sk90waB3sOmbf5b9mn3MB8GA1UdIwQY MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0 LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQ8AaW+z J2lsqmU6bnUyt81wl12rb4g6t9jAiLPxYqFonT8L5wAgzAMMMV8NgCEuVdjKqh8U kKYfVxrb4SjAjKFl0PJOA7wvL4Bn8nUySDxf9XcFkxnwH86F7HuZcNNJZclSRozQ EMAMhysF1qUrh7d7X6G2/cqSnWwyllyPFL9MbwkOmkCmEvkRgBx7vT4O2wjhyRKm zpUQnAEMIxcFS8gqbRmcJE1A8bgMYEXPsGG4dtUcI1pWRs1LwAuuhmK3Dd1qMqRX UL+/sGxvIqZB2KH8QaF71tc51hFd6TdmtsQqBOpBBL6MpyF4NpkQ/g6YW3rDOu5X 8LpYoamYRHx/GA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:20 2025 by rpki-client