This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json) Hash identifier: iCe9y7u09UbaTR69UqmiLabuD67C3qxiyHKm/Pu9GnE= Subject key identifier: A8:74:1D:F5:5F:5D:4D:4A:53:74:7F:11:8D:77:4F:9C:54:2A:7A:01 Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Certificate serial: 019B4F60345EF41F9C897D4F91324B71A8CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft Manifest number: 12BB Signing time: Wed 24 Dec 2025 08:01:03 +0000 Manifest this update: Wed 24 Dec 2025 08:01:03 +0000 Manifest next update: Thu 25 Dec 2025 08:01:03 +0000 Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: 2s1LNXUXCyzAN2vQYcD3G4RgwtgOlGdi5CRzMy15R6U=) 2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:34:5e:f4:1f:9c:89:7d:4f:91:32:4b:71:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459 Validity Not Before: Dec 24 08:01:03 2025 GMT Not After : Dec 25 08:01:03 2025 GMT Subject: CN=a8741df55f5d4d4a53747f118d774f9c542a7a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:fd:85:2f:b1:16:d4:50:8f:9f:b4:ff:f6: 05:eb:71:8b:4d:78:1d:b3:68:96:4b:f1:1f:6c:4c: e0:e8:51:ed:a4:6d:f5:aa:dd:63:22:fe:1c:2a:1f: 8e:db:60:dc:72:2b:3d:7c:3c:2c:1c:ec:b8:e3:6d: e1:0e:a3:d8:13:63:b6:db:b7:13:f2:43:73:08:ce: 74:14:f0:c9:63:26:d1:27:d7:ea:08:83:47:43:32: af:19:ed:d7:90:6a:66:4b:72:85:30:3d:f1:02:f9: 6d:6d:47:d5:02:c1:2b:16:52:5d:f3:5e:cf:44:b2: 08:ef:d3:b5:6a:72:4c:79:9c:32:5d:83:f6:92:15: be:83:1b:07:56:09:9e:a5:2c:06:82:56:5d:05:99: 7a:03:ca:ff:e6:f2:a5:f6:df:9c:05:84:d1:ba:94: 22:5f:40:da:5a:a3:68:2d:9e:a1:4a:a4:d2:d0:4b: 28:51:12:3d:4f:44:05:cd:04:72:cc:8b:a6:ce:90: 4b:da:94:b4:59:c8:36:45:5e:c6:f3:ca:b0:af:1f: 29:e3:b0:e9:2f:dc:7b:64:8d:03:9e:74:e3:34:2f: 88:cc:26:c1:d7:f6:95:eb:3e:b8:1e:f1:0f:4b:f8: 16:ea:6b:71:97:d6:cc:d7:d1:c2:83:38:5e:fa:6a: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:74:1D:F5:5F:5D:4D:4A:53:74:7F:11:8D:77:4F:9C:54:2A:7A:01 X509v3 Authority Key Identifier: keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9d:38:e1:a8:93:fc:da:6e:88:2e:fb:c8:79:20:bb:e7:d7: 7c:0c:7e:9a:c6:72:fa:2b:95:66:21:fb:8f:e6:a6:30:71:ee: d1:87:a1:77:0a:eb:1e:c0:bd:65:f4:16:37:7c:30:bb:80:56: 53:55:6a:e0:6b:4c:59:51:16:55:4e:a3:9d:0f:59:e4:2f:fd: c2:67:25:a5:04:e3:30:c8:df:e9:01:98:81:2a:89:d8:1c:4b: f0:5d:ff:15:b7:fa:78:a7:01:f5:a4:fc:41:a0:2c:e7:69:aa: 61:52:88:17:95:22:e9:2b:00:f0:66:f4:38:06:d3:4d:a2:6c: fa:3a:cf:c2:fd:4c:7f:fe:da:84:ed:f6:13:ed:5c:a1:3d:81: c8:6f:58:7a:e8:82:ae:36:28:a9:cf:14:a8:d2:2e:fb:79:f6: 43:df:89:b4:15:dc:57:52:16:6e:ce:34:a7:0c:46:e7:7f:7a: 6e:43:02:55:21:58:80:e8:58:ac:7f:ef:ac:ef:26:ee:0b:56: bd:6b:d6:60:b5:33:87:4a:c6:05:d6:cb:d5:67:4a:45:ad:48: c6:99:ba:09:9d:df:a6:2b:87:df:e5:e4:63:a3:0d:67:a0:77: 2f:d7:de:cd:80:81:1d:e4:48:db:50:48:fb:77:d8:e2:4e:fc: 85:6f:fe:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYDRe9B+ciX1PkTJLcajKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3 MTQ0NTkwHhcNMjUxMjI0MDgwMTAzWhcNMjUxMjI1MDgwMTAzWjAzMTEwLwYDVQQD EyhhODc0MWRmNTVmNWQ0ZDRhNTM3NDdmMTE4ZDc3NGY5YzU0MmE3YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmD9hS+xFtRQj5+0//YF63GLTXgd s2iWS/EfbEzg6FHtpG31qt1jIv4cKh+O22Dccis9fDwsHOy4423hDqPYE2O227cT 8kNzCM50FPDJYybRJ9fqCINHQzKvGe3XkGpmS3KFMD3xAvltbUfVAsErFlJd817P RLII79O1anJMeZwyXYP2khW+gxsHVgmepSwGglZdBZl6A8r/5vKl9t+cBYTRupQi X0DaWqNoLZ6hSqTS0EsoURI9T0QFzQRyzIumzpBL2pS0Wcg2RV7G88qwrx8p47Dp L9x7ZI0DnnTjNC+IzCbB1/aV6z64HvEPS/gW6mtxl9bM19HCgzhe+moRIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh0HfVfXU1KU3R/EY13T5xUKnoBMB8GA1UdIwQY MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0 LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZ044aiT /NpuiC77yHkgu+fXfAx+msZy+iuVZiH7j+amMHHu0YehdwrrHsC9ZfQWN3wwu4BW U1Vq4GtMWVEWVU6jnQ9Z5C/9wmclpQTjMMjf6QGYgSqJ2BxL8F3/Fbf6eKcB9aT8 QaAs52mqYVKIF5Ui6SsA8Gb0OAbTTaJs+jrPwv1Mf/7ahO32E+1coT2ByG9YeuiC rjYoqc8UqNIu+3n2Q9+JtBXcV1IWbs40pwxG5396bkMCVSFYgOhYrH/vrO8m7gtW vWvWYLUzh0rGBdbL1WdKRa1Ixpm6CZ3fpiuH3+XkY6MNZ6B3L9fezYCBHeRI21BI +3fY4k78hW/+fA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:12 2025 by rpki-client