This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          bia/0CYNuo+nj+VurAUTdGaGM6SZCEx+l52GgzeisYg=
Subject key identifier:   9C:C0:88:33:50:F1:07:31:F6:D7:70:B8:98:C7:34:E6:89:63:88:B9
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019B1DCF0B6CE434A3299C007B4A594581B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          177B
Signing time:             Sun 14 Dec 2025 17:01:06 +0000
Manifest this update:     Sun 14 Dec 2025 17:01:06 +0000
Manifest next update:     Mon 15 Dec 2025 17:01:06 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: CWVxwd6xtlkQJnQS4BxnPkAnfD5j3YgZYGDF+BWjP+g=)
                          2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
                          3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
                          4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:cf:0b:6c:e4:34:a3:29:9c:00:7b:4a:59:45:81:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Dec 14 17:01:06 2025 GMT
            Not After : Dec 15 17:01:06 2025 GMT
        Subject: CN=9cc0883350f10731f6d770b898c734e6896388b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:f4:ee:8f:f1:15:56:ac:d6:f2:33:f5:bf:
                    9f:9b:75:cc:93:f9:aa:95:e1:b1:fa:ce:dc:97:81:
                    10:66:73:7c:26:d8:01:60:84:63:01:30:94:11:7d:
                    43:94:2e:e5:e0:fe:99:6f:e4:c4:5b:6e:f4:44:78:
                    6b:f1:61:6e:86:8c:0c:cb:97:90:2d:a2:12:f8:b5:
                    7d:7c:d0:e5:37:86:3d:5b:69:c9:ea:39:c9:77:29:
                    a5:18:c2:db:0f:b0:68:3c:5f:60:d0:54:6b:37:e9:
                    61:35:89:8e:af:86:dd:35:7e:ed:da:52:6d:ce:b7:
                    c5:50:45:e4:c8:c3:fb:35:1e:37:85:40:3f:9e:b9:
                    39:56:e4:1f:2d:63:ee:4a:fb:5b:7b:74:ce:d1:70:
                    5f:39:4e:ee:50:87:0d:f8:e9:33:64:7c:80:0f:f9:
                    3a:94:52:0c:43:a3:0e:be:2b:5d:c8:a9:10:4e:4a:
                    8f:3d:bc:6d:98:bd:b3:5c:56:7c:7d:d3:78:1b:ff:
                    ac:a2:2a:dd:db:20:09:14:bc:37:25:d9:3c:98:be:
                    ba:2b:55:2f:b1:bd:50:53:e5:e8:21:2f:e2:db:b6:
                    7f:19:78:b9:45:f6:0e:b8:21:37:71:0c:37:c9:57:
                    c2:45:e6:d8:1c:b8:42:dd:73:00:b3:99:12:29:3d:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:88:33:50:F1:07:31:F6:D7:70:B8:98:C7:34:E6:89:63:88:B9
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:73:90:93:54:06:72:15:fe:99:60:be:da:62:41:0f:df:
         93:50:5b:47:a3:26:41:be:b5:2f:a3:84:8f:09:9a:95:80:a1:
         f0:e9:29:15:86:c9:a1:2c:b7:4f:ff:13:44:8c:79:45:4d:4f:
         7f:37:10:4c:fb:42:e6:a1:8f:24:9a:f3:98:15:35:cc:11:e2:
         b9:45:c7:13:19:35:b2:f8:45:78:48:51:ec:09:08:14:ca:77:
         d0:f2:5f:7c:72:64:cd:cd:d4:c2:23:01:ce:6f:b3:15:83:15:
         e8:23:45:99:0f:8e:eb:86:15:ee:6d:3d:53:ca:5a:27:bd:82:
         41:f3:b1:f1:8e:f6:c9:bf:a6:c4:b0:37:11:cb:b1:a9:26:cb:
         63:79:2f:d3:57:0c:10:42:ff:1b:0d:7d:e1:83:1f:33:44:8c:
         37:41:67:da:48:40:81:bc:ac:77:28:55:71:f1:61:2b:f8:ea:
         07:e3:e0:a3:9f:28:73:31:88:57:37:d1:e8:26:ef:16:8c:ad:
         e0:5b:e4:05:16:6d:1f:c6:e1:2b:3c:1c:a7:16:7f:ef:a2:c0:
         39:d6:8a:47:95:98:24:ba:24:cf:0a:73:5c:c1:13:dc:c5:0e:
         62:0c:b3:46:3b:e9:be:a2:cb:b5:98:a2:f3:f5:75:42:cc:83:
         ef:2c:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:30:22 2025 by rpki-client