This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json) Hash identifier: YUXHUqyhdJy33BPOagSocWM0AT8aQDpHVZUYmkiMZx8= Subject key identifier: A1:38:34:1A:A1:12:7D:39:F3:61:98:D3:B2:3D:92:6A:83:92:D1:C8 Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Certificate serial: 019B9A0C5CB029651CC5D4210C39E12127D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft Manifest number: 14F1 Signing time: Wed 07 Jan 2026 20:00:59 +0000 Manifest this update: Wed 07 Jan 2026 20:00:59 +0000 Manifest next update: Thu 08 Jan 2026 20:00:59 +0000 Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: zf34RNWnluGT5MP/Q7aFdzW71T7hqbZqRjtdTHC4Xmw=) 2: UdRtC8oWULapblUxKPZMiKoK7Fg.roa (hash: NCRhs0KrgrczrslxIEqi2lQhD/o2DKDw/5BIUZhQTS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:0c:5c:b0:29:65:1c:c5:d4:21:0c:39:e1:21:27:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Validity Not Before: Jan 7 20:00:59 2026 GMT Not After : Jan 8 20:00:59 2026 GMT Subject: CN=a138341aa1127d39f36198d3b23d926a8392d1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:7d:7d:1a:55:d2:b3:6f:33:f8:20:29:a7: 52:3c:87:a0:39:27:3c:95:53:2f:b1:90:5e:e5:b2: f9:d2:a3:84:26:ca:db:27:76:4c:9c:a3:49:d4:ea: 1e:3c:38:46:9e:6a:66:05:0f:01:94:5d:09:de:0f: aa:49:a6:b2:e6:69:28:7c:89:30:0c:6c:44:7f:83: d8:7d:33:78:cd:88:4e:ab:65:9e:d6:2b:9a:55:48: 14:1e:1e:ab:29:67:80:bd:91:8c:50:ff:e0:25:88: 75:20:9c:53:8f:01:10:28:7a:6c:c8:a9:77:f6:f3: 80:b9:f3:10:bc:04:fb:c4:d3:29:2e:6c:65:7b:bb: b2:e0:dc:0c:28:d9:79:54:74:db:a2:9c:53:cc:d8: 53:c2:d3:06:98:48:59:03:ab:4f:d7:b0:14:0f:5b: 56:12:47:4a:7c:1d:80:1b:45:80:18:5e:0c:f3:1b: 17:a8:b5:5b:f8:50:e9:e5:9f:d4:1d:03:53:25:83: 38:09:d5:75:31:9e:71:e5:58:07:07:8f:38:fb:a8: 3f:c8:35:01:be:e5:ca:ff:a2:d0:f6:a6:ca:30:5b: 66:ce:59:c8:06:43:54:af:c7:f3:23:78:6e:5e:a3: 12:6d:77:20:75:28:f0:25:ae:3e:1f:86:cd:bb:24: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:38:34:1A:A1:12:7D:39:F3:61:98:D3:B2:3D:92:6A:83:92:D1:C8 X509v3 Authority Key Identifier: keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:53:a0:d8:ca:8a:9c:6f:e8:4c:cb:ea:e1:32:c3:12:f6:69: db:69:57:45:fe:d7:fd:80:8e:a5:00:64:6d:76:dc:30:85:92: 83:36:99:6b:69:a7:28:bc:c1:84:9e:f8:a0:7d:e2:de:2b:c7: 49:ac:f8:c3:c6:47:7c:7a:f7:00:e1:a8:96:a6:28:1e:d5:f1: 77:61:51:b6:f3:07:e5:46:07:ba:cf:d6:10:16:71:c4:3e:51: 54:bd:10:a3:e2:f7:c6:78:76:cc:e8:e2:96:f6:c1:f7:87:8f: 12:49:ca:e2:a8:ee:96:7f:2f:26:a5:ba:b6:a1:2f:ad:25:4a: 29:32:29:06:3e:c3:ea:c0:17:26:5e:e3:47:35:70:1c:a0:c6: 9a:8f:16:ec:93:7c:48:c1:a2:da:d6:c7:94:5f:62:92:fe:c4: b6:17:89:08:81:2b:41:ff:5d:ba:cf:9a:ca:9a:9b:9a:47:14: de:ad:37:4c:8d:85:a1:ea:c8:ff:12:68:68:0d:37:5b:15:10: 42:25:47:c9:6f:5e:c9:0a:44:57:e9:d7:14:5d:26:04:dc:42: 11:2b:4a:6c:e7:fc:fe:20:ea:52:ac:c3:36:ae:5b:d2:60:66: 31:f9:a6:ca:e8:ce:62:35:29:52:7c:2e:a7:b1:6d:b2:36:7a: d5:0d:cd:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuaDFywKWUcxdQhDDnhISfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODA1ZTFjZmZjMTM5MmU3ZDE3NjhmOGYwNTU0YTFjN2Y2 MzQ0YWQwHhcNMjYwMTA3MjAwMDU5WhcNMjYwMTA4MjAwMDU5WjAzMTEwLwYDVQQD EyhhMTM4MzQxYWExMTI3ZDM5ZjM2MTk4ZDNiMjNkOTI2YTgzOTJkMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07h9fRpV0rNvM/ggKadSPIegOSc8 lVMvsZBe5bL50qOEJsrbJ3ZMnKNJ1OoePDhGnmpmBQ8BlF0J3g+qSaay5mkofIkw DGxEf4PYfTN4zYhOq2We1iuaVUgUHh6rKWeAvZGMUP/gJYh1IJxTjwEQKHpsyKl3 9vOAufMQvAT7xNMpLmxle7uy4NwMKNl5VHTbopxTzNhTwtMGmEhZA6tP17AUD1tW EkdKfB2AG0WAGF4M8xsXqLVb+FDp5Z/UHQNTJYM4CdV1MZ5x5VgHB484+6g/yDUB vuXK/6LQ9qbKMFtmzlnIBkNUr8fzI3huXqMSbXcgdSjwJa4+H4bNuySR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE4NBqhEn0582GY07I9kmqDktHIMB8GA1UdIwQY MBaAFNeAXhz/wTkufRdo+PBVShx/Y0StMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUt MjI1NGJjMmNhNmMwLzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUtMjI1NGJjMmNhNmMw LzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFOg2MqK nG/oTMvq4TLDEvZp22lXRf7X/YCOpQBkbXbcMIWSgzaZa2mnKLzBhJ74oH3i3ivH Saz4w8ZHfHr3AOGolqYoHtXxd2FRtvMH5UYHus/WEBZxxD5RVL0Qo+L3xnh2zOji lvbB94ePEknK4qjuln8vJqW6tqEvrSVKKTIpBj7D6sAXJl7jRzVwHKDGmo8W7JN8 SMGi2tbHlF9ikv7EtheJCIErQf9dus+aypqbmkcU3q03TI2FoerI/xJoaA03WxUQ QiVHyW9eyQpEV+nXFF0mBNxCEStKbOf8/iDqUqzDNq5b0mBmMfmmyujOYjUpUnwu p7FtsjZ61Q3NjA== -----END CERTIFICATE-----Generated at Thu Jan 8 05:20:19 2026 by rpki-client