This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File:                     14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier:          htS54cxzAuSRy51UMeRscBh49Kgblb8w90CaSk8O0sI=
Subject key identifier:   F1:D5:18:07:2C:C8:64:62:C0:F4:B3:F2:B9:02:55:E0:BA:E7:3F:07
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer:       /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial:       019AF3526ADA76883AF2C84E9A0953A42FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 11:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:55 +0000
Files and hashes:         1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: O++LqvRu9BvcjkXFyz8c28+XJ/xMIrpezR6QJH6kJOg=)
                          2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
                          3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:6a:da:76:88:3a:f2:c8:4e:9a:09:53:a4:2f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
        Validity
            Not Before: Dec  6 11:00:55 2025 GMT
            Not After : Dec  7 11:00:55 2025 GMT
        Subject: CN=f1d518072cc86462c0f4b3f2b90255e0bae73f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:c0:35:f7:d7:81:c5:a1:ee:17:c8:c5:f0:
                    06:07:f3:96:50:26:8a:e4:00:62:28:1e:24:7e:f5:
                    5a:17:48:a0:e6:e9:60:7c:bc:94:db:03:cd:3e:1a:
                    44:8e:d3:4e:b9:7f:97:b3:32:9e:02:d8:10:9e:12:
                    19:4c:24:cf:41:0f:dc:55:f4:69:37:28:e2:77:6d:
                    3a:72:9c:b5:c6:0b:a3:62:8d:96:c7:f0:64:c2:6c:
                    8d:0e:20:60:21:b2:df:bc:eb:ff:3f:08:51:c3:e8:
                    c6:fc:c8:d6:62:ed:15:24:af:db:80:8a:1e:49:f4:
                    03:c4:f9:a0:e1:ae:88:9b:c9:00:38:cc:24:04:89:
                    07:dc:15:b9:80:6d:26:4c:ce:bd:c7:a6:cb:fd:d7:
                    55:a7:96:a2:d1:81:ca:83:78:ca:5b:e0:3a:af:68:
                    38:91:0e:61:48:7f:b9:cd:da:3e:4a:f6:be:27:31:
                    03:f7:1b:b1:53:29:3f:ad:5b:fd:8e:03:33:f6:07:
                    95:9d:45:9d:83:c4:22:68:43:fb:1d:80:cd:9b:09:
                    8f:e0:12:22:dd:5a:3a:dc:85:99:42:17:c9:f8:31:
                    1b:2e:88:1a:9b:be:b5:9d:56:36:6d:42:b5:18:1f:
                    da:0c:39:20:0f:0e:a4:a0:d8:23:93:f5:73:a7:16:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D5:18:07:2C:C8:64:62:C0:F4:B3:F2:B9:02:55:E0:BA:E7:3F:07
            X509v3 Authority Key Identifier:
                keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d1:6c:3f:ba:f7:df:ae:61:15:ca:1e:44:f7:72:21:69:10:
         3f:46:16:60:67:b1:21:17:1c:69:11:ee:f9:12:5f:8c:17:00:
         ad:63:06:e9:e1:7d:bf:28:21:74:04:24:d7:1d:45:4e:d5:e9:
         d9:16:39:7b:09:d1:a4:d8:a4:83:af:eb:71:75:68:cc:d5:1b:
         21:00:8d:c3:7a:7b:c0:d3:94:21:fa:84:4a:84:31:e3:e1:97:
         f9:c9:b0:53:f9:13:d4:49:50:6c:2b:97:a0:2c:8c:74:e8:14:
         4a:b0:85:72:cf:a3:26:56:19:aa:b5:d8:6c:4a:45:ae:49:a6:
         16:63:be:c6:3d:a5:16:39:f2:e2:5d:e3:76:e9:50:87:62:33:
         20:be:66:97:6b:d1:52:8e:02:80:cf:a0:1d:9c:9e:33:96:49:
         47:f5:d9:35:58:75:be:98:c5:56:d7:d5:c4:a6:02:01:d8:aa:
         70:27:78:4c:99:e6:14:ef:c7:0a:ef:93:bf:a8:17:13:12:c5:
         54:1f:77:dd:61:38:ff:7a:79:c4:ff:92:28:36:01:a3:6b:34:
         fe:1f:7a:8e:2c:61:1a:59:93:13:bd:2e:63:bc:42:bb:fb:e5:
         14:0c:18:b9:56:82:b3:c0:04:f3:fb:17:4c:9c:5c:c9:d3:57:
         13:c0:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:32:01 2025 by rpki-client