This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json) Hash identifier: qj1CkurvY5WkRoiEDpAfoo+j6f2/4NQKnixRhVimqgo= Subject key identifier: 7D:B0:3D:8E:1B:BF:E3:A8:43:65:B9:24:D5:26:AC:79:E8:19:DB:3C Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79 Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79 Certificate serial: 019B3EA33B24F74902D5150F0066B946AF27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:00:43 +0000 Manifest this update: Sun 21 Dec 2025 02:00:43 +0000 Manifest next update: Mon 22 Dec 2025 02:00:43 +0000 Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: PdRiaCtJGVHLM/0dLrA0I6BZEtdQhoAFDIuvuzfRjvI=) 2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=) 3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3b:24:f7:49:02:d5:15:0f:00:66:b9:46:af:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79 Validity Not Before: Dec 21 02:00:43 2025 GMT Not After : Dec 22 02:00:43 2025 GMT Subject: CN=7db03d8e1bbfe3a84365b924d526ac79e819db3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:a5:4a:7b:fe:b0:34:e3:ff:1d:de:3d:81: 8d:cb:78:3f:14:85:d8:66:e5:07:33:51:40:25:55: 7f:97:61:e5:e1:26:a9:23:32:6e:9a:82:57:a0:a3: a1:77:d1:da:7c:68:e4:1c:2b:d0:5c:2b:ab:bf:03: aa:ef:88:dd:f2:3c:70:e0:58:2f:b0:26:d3:8a:39: a8:17:ac:66:f2:cf:f5:45:3b:4a:d6:a5:e3:ca:9d: 3d:b3:3c:35:1f:31:03:fa:92:7d:44:c4:9e:34:f5: 0d:b9:1e:57:44:5f:39:fb:32:98:09:ff:92:0e:8d: 83:b7:ab:5b:fa:8a:72:aa:95:bb:15:18:75:2a:0f: 03:fe:20:55:73:9f:83:a3:ab:e9:57:dc:1e:cc:3a: c5:e5:68:56:c1:de:db:73:9f:a5:79:01:03:42:b2: 39:ac:49:6c:c6:6e:c7:01:65:c8:55:74:bb:83:79: 84:dd:1e:72:92:e4:53:2a:68:95:75:db:62:a7:6e: c5:19:a4:83:57:f8:1b:85:9b:80:9d:2f:15:f2:89: 34:6c:cd:7e:8b:59:30:95:69:a5:54:ea:b8:52:a5: f6:d5:c7:a1:a8:3f:63:5f:71:17:44:1f:32:85:0b: 8e:2a:ce:ae:c5:a3:19:a1:88:a7:23:00:ec:95:c6: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:3D:8E:1B:BF:E3:A8:43:65:B9:24:D5:26:AC:79:E8:19:DB:3C X509v3 Authority Key Identifier: keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7b:75:28:7c:0c:8c:c8:5f:a5:0e:9d:71:c6:99:09:fa:43: ec:8c:cf:60:af:f1:24:b1:05:08:50:52:a7:48:9f:08:6b:78: 70:ce:15:6a:1e:ef:6d:5b:f8:7a:11:db:3c:4a:aa:e9:f6:89: 17:37:56:d9:bd:3f:03:dd:27:4f:ed:d5:31:2a:a5:f4:44:4a: 7a:57:34:65:b4:47:71:6c:47:29:47:dd:70:99:df:78:28:27: c4:98:14:fa:90:25:9f:fe:c1:08:b1:59:39:3c:38:ce:66:8d: 5b:06:40:12:f2:cc:b0:30:aa:38:bd:bc:2e:ea:91:4e:4a:e4: 36:5e:ec:a5:aa:d8:f7:69:8b:02:ee:57:c4:ef:1c:75:d4:3b: ca:62:a0:1c:8b:47:56:f9:56:bb:92:68:18:66:a8:8f:70:e5: f1:17:3a:54:0b:4f:75:67:e9:75:c9:01:fe:0d:06:01:e9:50: cc:33:af:2a:ca:cc:20:44:00:0e:d9:77:85:08:16:af:db:9f: 9d:f0:1c:f9:d3:4d:85:aa:23:ce:0b:52:4a:48:cb:00:a3:46: fa:9b:22:aa:48:2d:8f:7c:a5:0b:97:e7:f0:20:49:e0:4b:ea: a0:cb:03:da:ba:c5:22:9e:16:01:39:c5:dd:de:e5:89:17:7e: cd:bc:53:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozsk90kC1RUPAGa5Rq8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGFjMTc0ZTg1MmI3MWMzMTE2M2VjMWQ4NjQ5ZmZmNmIw N2JhNzkwHhcNMjUxMjIxMDIwMDQzWhcNMjUxMjIyMDIwMDQzWjAzMTEwLwYDVQQD Eyg3ZGIwM2Q4ZTFiYmZlM2E4NDM2NWI5MjRkNTI2YWM3OWU4MTlkYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBClSnv+sDTj/x3ePYGNy3g/FIXY ZuUHM1FAJVV/l2Hl4SapIzJumoJXoKOhd9HafGjkHCvQXCurvwOq74jd8jxw4Fgv sCbTijmoF6xm8s/1RTtK1qXjyp09szw1HzED+pJ9RMSeNPUNuR5XRF85+zKYCf+S Do2Dt6tb+opyqpW7FRh1Kg8D/iBVc5+Do6vpV9wezDrF5WhWwd7bc5+leQEDQrI5 rElsxm7HAWXIVXS7g3mE3R5ykuRTKmiVddtip27FGaSDV/gbhZuAnS8V8ok0bM1+ i1kwlWmlVOq4UqX21cehqD9jX3EXRB8yhQuOKs6uxaMZoYinIwDslcbijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2wPY4bv+OoQ2W5JNUmrHnoGds8MB8GA1UdIwQY MBaAFNeKwXToUrccMRY+wdhkn/9rB7p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMt OTQ3ZGUzODY4Y2Q1LzEvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMtOTQ3ZGUzODY4Y2Q1 LzEvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnt1KHwM jMhfpQ6dccaZCfpD7IzPYK/xJLEFCFBSp0ifCGt4cM4Vah7vbVv4ehHbPEqq6faJ FzdW2b0/A90nT+3VMSql9ERKelc0ZbRHcWxHKUfdcJnfeCgnxJgU+pAln/7BCLFZ OTw4zmaNWwZAEvLMsDCqOL28LuqRTkrkNl7sparY92mLAu5XxO8cddQ7ymKgHItH VvlWu5JoGGaoj3Dl8Rc6VAtPdWfpdckB/g0GAelQzDOvKsrMIEQADtl3hQgWr9uf nfAc+dNNhaojzgtSSkjLAKNG+psiqkgtj3ylC5fn8CBJ4EvqoMsD2rrFIp4WATnF 3d7liRd+zbxTHg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:57 2025 by rpki-client