This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json) Hash identifier: jXIaaMJKeLj1n48aJbISz6pilJXGWuANniQJuPPf6EM= Subject key identifier: 12:FE:A9:E5:20:39:9E:92:EB:D8:AD:26:6B:52:D2:42:2A:F2:4B:F9 Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69 Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969 Certificate serial: 019B4438E99FF29D110545188826579C5E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft Manifest number: 0662 Signing time: Mon 22 Dec 2025 04:02:18 +0000 Manifest this update: Mon 22 Dec 2025 04:02:18 +0000 Manifest next update: Tue 23 Dec 2025 04:02:18 +0000 Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: mTDFMAqvu4OEop9CLZt33/ql8lUwVUiifmXbKJk+H6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:e9:9f:f2:9d:11:05:45:18:88:26:57:9c:5e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969 Validity Not Before: Dec 22 04:02:18 2025 GMT Not After : Dec 23 04:02:18 2025 GMT Subject: CN=12fea9e520399e92ebd8ad266b52d2422af24bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:d8:b3:da:7a:c1:ee:5c:f7:9e:3d:01:72: f7:8f:b7:7b:7a:4d:a8:dc:5d:89:e8:6c:94:c2:c0: 95:b7:01:1e:3b:69:59:6a:1c:b1:ee:14:88:c7:ef: 63:41:04:60:42:bd:65:12:3e:96:b9:de:61:f2:3b: e7:a7:be:cd:b7:bc:18:7a:1c:74:69:cb:14:c2:cf: 62:34:6a:0a:b7:ad:d0:c6:17:5b:e2:dc:7d:2c:95: b5:9c:5d:71:2a:1a:8d:1a:0d:6d:99:be:3a:a7:0d: a4:0e:30:e0:3e:1f:25:42:15:ea:24:a4:50:7b:06: a3:54:ed:ab:5e:24:a4:e7:66:f4:1e:85:69:40:02: 89:98:b8:49:6f:53:c9:46:c7:fc:41:0f:57:31:ca: 4a:e0:60:16:b6:3c:4c:4d:d8:38:d1:e3:88:85:c9: 41:ac:34:5d:5d:81:18:fd:5c:0e:71:51:e7:f8:ec: c6:01:b4:4e:75:89:ea:60:a1:6a:24:3d:ff:dc:1f: e4:e9:52:b8:6d:20:a1:a7:3a:99:92:52:65:c3:35: e5:e7:db:5e:e0:77:86:ec:91:35:b8:0f:74:87:d0: b9:2d:78:66:42:36:d1:ca:92:51:e9:81:c8:a9:7e: d9:2f:69:3f:13:75:fe:92:c0:2d:3a:c7:8c:02:c0: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:A9:E5:20:39:9E:92:EB:D8:AD:26:6B:52:D2:42:2A:F2:4B:F9 X509v3 Authority Key Identifier: keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:14:e8:3d:24:63:44:d3:91:93:c1:7e:ba:07:5e:ee:26:88: 70:ac:8f:40:a4:8c:96:2c:d6:03:f6:d1:dd:50:cf:13:df:c4: 93:45:0b:dd:f2:68:91:c6:39:5f:46:dc:12:a3:3a:e1:53:6f: 54:a3:15:60:b0:80:da:84:ad:f5:47:ff:7b:12:12:d5:10:0b: a2:f8:28:d9:47:df:c5:da:1f:ab:15:5e:d2:69:da:fb:4b:2f: d6:46:f8:c8:59:dd:b1:c3:a5:a2:33:0a:b4:4e:78:6a:ae:fb: 09:24:b3:d5:de:31:56:d7:7b:f7:9a:39:e6:97:1b:24:06:07: 9d:ca:7a:f0:57:fc:40:d9:eb:6a:eb:93:f9:80:fc:f7:85:57: cf:f4:0e:f9:10:d0:c6:a3:70:06:11:ce:2a:5d:e5:c9:05:46: cb:16:f3:89:54:9f:b4:fa:fc:05:a1:50:2a:8d:62:63:3f:c6: ac:0c:41:e7:6c:c6:69:65:05:86:0c:61:53:9a:dc:c5:62:f4: 45:de:ce:5a:16:61:50:28:e5:a1:00:50:c0:e6:fd:53:0c:dc: b3:b4:50:df:a3:7b:c0:a8:45:f8:7b:95:07:22:de:74:80:53: 03:12:d3:08:70:7a:f1:c4:cb:46:c7:ac:a4:76:99:28:00:25: 17:5c:7e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOOmf8p0RBUUYiCZXnF6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk NmQ5NjkwHhcNMjUxMjIyMDQwMjE4WhcNMjUxMjIzMDQwMjE4WjAzMTEwLwYDVQQD EygxMmZlYTllNTIwMzk5ZTkyZWJkOGFkMjY2YjUyZDI0MjJhZjI0YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lfYs9p6we5c9549AXL3j7d7ek2o 3F2J6GyUwsCVtwEeO2lZahyx7hSIx+9jQQRgQr1lEj6Wud5h8jvnp77Nt7wYehx0 acsUws9iNGoKt63Qxhdb4tx9LJW1nF1xKhqNGg1tmb46pw2kDjDgPh8lQhXqJKRQ ewajVO2rXiSk52b0HoVpQAKJmLhJb1PJRsf8QQ9XMcpK4GAWtjxMTdg40eOIhclB rDRdXYEY/VwOcVHn+OzGAbROdYnqYKFqJD3/3B/k6VK4bSChpzqZklJlwzXl59te 4HeG7JE1uA90h9C5LXhmQjbRypJR6YHIqX7ZL2k/E3X+ksAtOseMAsDcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL+qeUgOZ6S69itJmtS0kIq8kv5MB8GA1UdIwQY MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0 LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhToPSRj RNORk8F+ugde7iaIcKyPQKSMlizWA/bR3VDPE9/Ek0UL3fJokcY5X0bcEqM64VNv VKMVYLCA2oSt9Uf/exIS1RALovgo2UffxdofqxVe0mna+0sv1kb4yFndscOlojMK tE54aq77CSSz1d4xVtd795o55pcbJAYHncp68Ff8QNnrauuT+YD894VXz/QO+RDQ xqNwBhHOKl3lyQVGyxbziVSftPr8BaFQKo1iYz/GrAxB52zGaWUFhgxhU5rcxWL0 Rd7OWhZhUCjloQBQwOb9Uwzcs7RQ36N7wKhF+HuVByLedIBTAxLTCHB68cTLRses pHaZKAAlF1x+3g== -----END CERTIFICATE-----Generated at Mon Dec 22 10:34:04 2025 by rpki-client