This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json) Hash identifier: tAUEg8DCI74M4nOhP8DWAU/ogYy82mRk5y/MFTNnn/k= Subject key identifier: C2:A9:48:49:C0:D3:48:52:E3:AE:D6:B1:75:B5:71:75:EE:02:DB:14 Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Certificate serial: 019B3EA33162B111AE0C4B53D35EC1D17F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 02:00:40 +0000 Manifest this update: Sun 21 Dec 2025 02:00:40 +0000 Manifest next update: Mon 22 Dec 2025 02:00:40 +0000 Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: hZimPPCAoVjV4XYUqOrD3u7MlVD22hfQ3j4ZS+IL6Nk=) 2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=) 3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=) 4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:31:62:b1:11:ae:0c:4b:53:d3:5e:c1:d1:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Validity Not Before: Dec 21 02:00:40 2025 GMT Not After : Dec 22 02:00:40 2025 GMT Subject: CN=c2a94849c0d34852e3aed6b175b57175ee02db14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:10:ff:2c:62:57:f1:c7:3f:45:25:d7:23: 68:1f:f5:70:a4:fc:60:d8:b5:e9:ff:96:21:04:9e: 54:ee:c2:25:21:81:b5:e8:a4:a9:c9:a4:da:20:06: ef:2a:5b:c1:67:74:cf:e3:0c:f9:29:39:ea:fa:2a: 88:85:8a:ed:f4:cf:e1:7b:0b:d6:93:55:d2:67:da: 8e:24:29:af:c1:26:38:2e:f3:b4:89:d3:11:e9:53: 86:b6:bb:bb:da:b8:ed:f4:9d:46:23:b2:d6:c7:b3: be:8a:6d:57:72:15:ac:75:51:52:c5:5c:0f:b5:2d: 82:2f:f5:d1:b4:97:2c:25:80:dc:be:55:42:d0:77: 46:ee:94:62:e5:30:5a:37:c7:77:81:b0:d7:92:96: 94:7a:aa:d9:77:4e:4d:20:54:0c:b5:60:a4:1a:c5: 87:a2:54:b6:e9:50:34:78:97:ad:67:08:2c:aa:67: 8d:93:1f:d4:79:b1:d2:9c:c8:02:7f:94:c6:79:a7: c0:a1:60:63:1f:d9:55:62:23:12:d1:69:e3:b4:ac: c8:03:a4:13:b0:85:ea:f9:42:23:a9:dd:48:b7:9e: 38:38:2e:ab:00:b5:f9:8e:a5:fe:4a:a8:12:96:dd: 62:b2:e7:a8:b9:6d:53:fd:a4:66:b1:09:af:5f:bd: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:48:49:C0:D3:48:52:E3:AE:D6:B1:75:B5:71:75:EE:02:DB:14 X509v3 Authority Key Identifier: keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f2:b1:63:4d:7e:0b:ee:dc:65:70:f2:48:06:71:22:ca:79: ec:b0:82:10:8c:59:d4:f3:a0:6d:ce:f6:34:38:ed:9f:85:26: de:bb:b3:2d:86:9d:b4:e1:ce:66:7f:25:ae:18:c0:40:02:59: b6:af:5f:9f:e1:52:a7:5f:6b:68:34:25:b4:6c:2d:91:11:a5: 9f:64:58:cf:5f:5d:85:ec:82:9e:73:93:ec:6f:66:63:a0:80: a5:1c:12:e5:d6:cb:9a:fe:ea:67:e6:8b:49:79:c4:c4:2b:1f: 6b:5c:b8:45:12:13:c1:cb:15:28:37:c9:bc:7c:9d:c2:ba:57: f3:4e:75:21:6d:72:77:b5:35:2c:c1:ba:dc:67:4c:70:a9:81: 9a:9f:15:3b:6f:ef:e2:bd:07:cf:ec:03:a7:2b:0b:ed:6b:fa: 9e:be:1a:fc:d7:62:32:ab:df:a1:75:1e:45:2d:da:13:66:e0: 8b:3c:6f:3d:b1:7c:81:28:42:9e:cc:eb:c5:b5:8c:97:96:dd: 36:bc:82:cd:3e:99:b7:0e:63:f9:52:1c:1f:f5:88:a7:68:83: 09:f6:5e:a4:87:8f:07:22:2a:e9:55:d4:80:65:95:a3:f9:5c: 91:81:ac:f1:01:bb:e7:8f:ae:1e:03:c1:93:47:e9:98:ef:09: e6:89:d3:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozFisRGuDEtT017B0X8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz YTQxZjgwHhcNMjUxMjIxMDIwMDQwWhcNMjUxMjIyMDIwMDQwWjAzMTEwLwYDVQQD EyhjMmE5NDg0OWMwZDM0ODUyZTNhZWQ2YjE3NWI1NzE3NWVlMDJkYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNUQ/yxiV/HHP0Ul1yNoH/VwpPxg 2LXp/5YhBJ5U7sIlIYG16KSpyaTaIAbvKlvBZ3TP4wz5KTnq+iqIhYrt9M/hewvW k1XSZ9qOJCmvwSY4LvO0idMR6VOGtru72rjt9J1GI7LWx7O+im1XchWsdVFSxVwP tS2CL/XRtJcsJYDcvlVC0HdG7pRi5TBaN8d3gbDXkpaUeqrZd05NIFQMtWCkGsWH olS26VA0eJetZwgsqmeNkx/UebHSnMgCf5TGeafAoWBjH9lVYiMS0WnjtKzIA6QT sIXq+UIjqd1It544OC6rALX5jqX+SqgSlt1isueouW1T/aRmsQmvX73yywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKpSEnA00hS467WsXW1cXXuAtsUMB8GA1UdIwQY MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPKxY01+ C+7cZXDySAZxIsp57LCCEIxZ1POgbc72NDjtn4Um3ruzLYadtOHOZn8lrhjAQAJZ tq9fn+FSp19raDQltGwtkRGln2RYz19dheyCnnOT7G9mY6CApRwS5dbLmv7qZ+aL SXnExCsfa1y4RRITwcsVKDfJvHydwrpX8051IW1yd7U1LMG63GdMcKmBmp8VO2/v 4r0Hz+wDpysL7Wv6nr4a/NdiMqvfoXUeRS3aE2bgizxvPbF8gShCnszrxbWMl5bd NryCzT6Ztw5j+VIcH/WIp2iDCfZepIePByIq6VXUgGWVo/lckYGs8QG754+uHgPB k0fpmO8J5onTPA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:07:30 2025 by rpki-client