This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          +jHj9LM387C2NnvRmw78TMdYE3j5z/L5gxIvCW62IU4=
Subject key identifier:   23:4F:BF:4D:CB:A3:38:38:A6:13:7F:E6:B2:08:73:77:EE:61:43:02
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019B427FEF52C4F8D097BC2BF34672AD0293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          178E
Signing time:             Sun 21 Dec 2025 20:00:39 +0000
Manifest this update:     Sun 21 Dec 2025 20:00:39 +0000
Manifest next update:     Mon 22 Dec 2025 20:00:39 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: VmYW1jj+mblBCfnzN94MFgPo2wlLlVj/aNMJaQc0t6g=)
                          2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
                          3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
                          4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:7f:ef:52:c4:f8:d0:97:bc:2b:f3:46:72:ad:02:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Dec 21 20:00:39 2025 GMT
            Not After : Dec 22 20:00:39 2025 GMT
        Subject: CN=234fbf4dcba33838a6137fe6b2087377ee614302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:e5:f3:34:14:fc:cb:ee:fb:a8:a6:9f:df:
                    dd:97:61:05:95:bf:91:1a:8f:dc:08:e6:a2:31:c3:
                    37:76:18:d3:07:c7:26:eb:53:d6:d3:1a:09:8b:44:
                    fd:d3:ea:0a:31:9a:2a:8f:8e:08:6e:dd:91:4c:e6:
                    19:b2:b5:e4:cf:92:73:54:71:d7:38:d5:42:54:5c:
                    a9:05:00:c4:6c:f0:b2:c1:71:4b:9e:1d:cf:62:7b:
                    db:d7:a6:03:77:2c:11:0d:44:ee:4f:41:2e:1f:58:
                    43:1c:a5:c7:bf:7f:17:9e:df:44:96:59:36:cf:90:
                    db:3e:0c:c8:5a:63:78:8e:a8:2f:0c:e0:08:48:b7:
                    5e:ee:a1:d2:3e:e0:7b:b4:40:28:60:db:3f:d0:da:
                    a8:5e:10:3b:ed:2e:97:94:28:b9:57:32:e0:06:6f:
                    b0:12:5d:3f:d3:09:ca:90:44:2a:0f:09:9b:09:0e:
                    fd:28:6d:5b:13:69:5b:77:e3:ef:67:8f:2b:13:a3:
                    23:e9:a8:a3:af:b7:5e:69:ba:4e:c9:91:01:1b:8f:
                    78:e3:6a:45:60:d5:1f:c0:fe:98:40:15:b7:c8:7e:
                    8d:39:3f:af:7d:89:fd:a6:ea:c6:37:5f:5e:1a:60:
                    f0:9d:57:66:b4:2c:f0:ab:1e:0b:6a:76:bb:e9:20:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4F:BF:4D:CB:A3:38:38:A6:13:7F:E6:B2:08:73:77:EE:61:43:02
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:06:a3:a7:cc:a1:2f:b3:80:96:5f:5d:13:d4:04:5a:bb:9f:
         f4:ed:e0:37:4d:29:6e:56:31:ea:d2:6c:10:ae:a6:b2:2c:a6:
         02:a1:9b:b0:43:ff:cc:76:f7:f4:cc:10:c1:5d:be:86:bf:7d:
         3c:dc:36:d9:f2:e9:9a:bf:03:92:6a:55:6c:eb:0f:5d:6b:79:
         45:88:01:84:da:71:6a:bc:26:b3:45:5a:f9:89:fd:1c:45:1b:
         b6:94:f2:e8:16:5a:1c:4d:ce:08:62:ea:e1:91:f1:52:c9:f7:
         ab:60:5b:7a:d6:2c:0f:0c:6a:ef:32:56:98:b7:71:06:87:fc:
         4e:01:4b:e5:52:02:32:a6:0b:ea:bb:32:f8:57:c5:33:d6:8c:
         7e:d0:4e:95:e4:e2:73:01:37:6f:06:b9:b6:09:b3:c4:fa:b2:
         a3:b9:07:be:34:3a:d8:51:14:51:cf:0d:05:ac:0d:01:5c:cf:
         bc:7e:ac:45:5c:fa:76:4c:9d:67:30:c6:e1:70:2c:ea:2a:37:
         23:45:db:09:3e:8a:d5:4c:0d:a5:96:84:63:d4:35:8c:39:91:
         b8:9e:3b:a9:e2:b4:54:d4:94:73:71:f4:59:64:a9:77:70:f3:
         2a:84:44:8b:36:0c:cc:88:40:95:dc:ba:eb:db:4d:4f:19:bc:
         b2:e3:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:22:12 2025 by rpki-client