This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File:                     14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier:          i7awdQ4+Ee2QLrC5jsrFiffUJ+G+HCTsdfut6oAE4SU=
Subject key identifier:   DB:DD:2E:E9:D7:4B:50:FB:F4:05:BF:54:D3:2F:4D:79:D5:36:A0:4C
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer:       /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial:       019B3DFE99519368AC0DB2C79C5D1DAFFE1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number:          178E
Signing time:             Sat 20 Dec 2025 23:00:54 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:54 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:54 +0000
Files and hashes:         1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
                          2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: yS0EpGxSGVOpPo5LaMCp1d3ID7WjSa7ULUHPth7mm5Q=)
                          3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:99:51:93:68:ac:0d:b2:c7:9c:5d:1d:af:fe:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
        Validity
            Not Before: Dec 20 23:00:54 2025 GMT
            Not After : Dec 21 23:00:54 2025 GMT
        Subject: CN=dbdd2ee9d74b50fbf405bf54d32f4d79d536a04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:94:93:47:b5:5e:23:09:8e:f1:bc:cd:5d:
                    0b:db:37:49:47:ea:7d:fb:d1:4a:8f:5b:2f:dc:93:
                    27:a6:ec:2d:15:04:1d:39:e5:1f:9a:60:6c:6d:b2:
                    92:b4:6e:c8:6e:b9:b7:c9:22:98:7a:50:d8:84:8d:
                    9e:90:fe:42:4e:53:50:73:e8:66:ad:79:50:38:83:
                    15:ae:aa:53:27:c3:e2:29:df:c2:a1:46:b5:46:c7:
                    42:46:6a:96:9b:c3:27:2d:50:b7:15:47:93:ac:b1:
                    df:06:75:10:38:21:bc:92:71:45:75:35:a7:73:f5:
                    08:21:e1:e7:83:e5:7a:e2:90:4e:ad:19:7c:3c:29:
                    f8:1a:65:20:d0:c2:2b:b1:58:96:c9:ce:4f:f0:23:
                    00:d8:8b:56:ca:a9:d2:92:10:85:b9:eb:3c:f9:38:
                    ea:a4:48:7e:5a:33:93:7b:8b:f9:f9:b9:8c:a1:af:
                    30:03:13:ac:3d:03:e6:f1:8d:0d:84:1b:9d:fb:99:
                    6d:ba:e8:88:27:06:74:82:94:33:d0:59:b4:2c:25:
                    66:83:9c:e0:d4:ba:c3:07:d5:a6:f3:03:0e:d7:ea:
                    c5:71:f1:1f:5a:5e:51:a6:fc:e3:eb:2f:31:7a:0c:
                    36:9b:68:aa:c0:0a:9c:12:07:6a:37:24:4e:e8:c2:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DD:2E:E9:D7:4B:50:FB:F4:05:BF:54:D3:2F:4D:79:D5:36:A0:4C
            X509v3 Authority Key Identifier:
                keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:fb:c9:a6:a0:4b:e4:f7:84:cc:e8:4a:1c:ff:da:2b:c3:
         00:50:9a:7e:ec:ee:c2:01:c5:d1:8d:0b:32:fe:da:52:dc:d0:
         7d:72:fd:35:b3:2e:37:6e:01:bf:d4:df:29:7b:a0:32:4a:a8:
         ff:4f:e0:35:77:29:f6:28:65:a8:18:2a:12:b7:ae:5d:39:5e:
         8a:e8:f2:f4:4b:70:3b:c9:61:7c:ab:47:e7:13:7a:07:52:7b:
         7c:c3:79:73:95:76:0c:60:a7:20:9d:b0:3c:0a:fd:cd:74:0d:
         6c:45:88:e1:a6:bd:8c:81:47:f0:1e:b3:21:39:9a:09:6d:c1:
         57:6e:6f:0f:35:59:b8:a4:d9:80:0a:13:dd:f3:3f:96:b7:fb:
         ae:d2:11:22:82:54:98:0e:5f:9c:13:d6:8e:bc:3e:7a:04:c3:
         39:94:e9:fd:b1:e8:14:e3:4f:03:4d:de:e0:22:e5:f6:1b:59:
         c4:c1:23:d2:f0:b8:f6:1f:c5:0f:5d:1a:07:69:1e:41:4f:57:
         29:19:cc:82:72:04:e1:74:4a:c9:1e:86:f4:80:0b:6f:ce:eb:
         ee:ed:09:c4:d7:4a:62:fb:2b:c7:5b:92:e0:1c:a4:71:c6:98:
         2b:16:1a:87:b9:78:02:ec:81:de:90:9d:f8:d0:42:9e:51:15:
         f7:e6:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:12:28 2025 by rpki-client