This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File:                     55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier:          cBuRf1RXV0EQDs/4jRl0EJxINWM623RBe5/mvz+KswI=
Subject key identifier:   AD:A3:F7:09:36:EF:04:80:67:0A:B3:21:2F:13:8C:23:44:34:53:AC
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer:       /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial:       019AF12E90A02529CEA3305810B42A27EDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number:          125E
Signing time:             Sat 06 Dec 2025 01:02:31 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:31 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:31 +0000
Files and hashes:         1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: ogl4Ai9DVleiErO+i3mhxrVbEDNuIECjTj4n+Pp6m1Q=)
                          2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:90:a0:25:29:ce:a3:30:58:10:b4:2a:27:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
        Validity
            Not Before: Dec  6 01:02:31 2025 GMT
            Not After : Dec  7 01:02:31 2025 GMT
        Subject: CN=ada3f70936ef0480670ab3212f138c23443453ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:04:a6:e8:10:35:9b:c2:8b:ff:c6:c7:a0:
                    7f:c9:3a:8f:34:57:e3:51:28:37:69:ce:9a:2d:03:
                    53:7c:6f:c1:4d:de:67:a5:77:d3:6f:4f:bb:b1:30:
                    dc:f4:c6:af:d5:01:a5:01:be:83:a3:d5:7c:40:d0:
                    87:6b:6b:a7:b1:ac:44:3a:84:f8:05:a9:22:d8:d8:
                    b4:ba:49:67:9f:ad:9e:82:d6:1f:97:d8:aa:ef:85:
                    80:b4:d1:d1:26:04:be:5a:bb:64:38:22:0c:cc:d2:
                    fb:ed:c8:c9:c1:a6:ed:08:d5:b7:f0:4f:65:06:d8:
                    19:07:8c:55:5a:14:8c:f3:2a:ec:b0:af:7b:79:e0:
                    2f:26:d4:e7:f5:b2:92:ac:f3:78:01:99:0d:8e:16:
                    bf:f6:90:26:9a:7f:e2:fe:1d:65:33:0c:a2:90:2d:
                    e9:28:8b:07:6c:b6:39:43:74:56:a6:b4:82:18:9c:
                    41:e7:d2:b9:e9:10:26:7f:29:ed:d2:ac:ed:7a:f3:
                    01:63:7e:04:19:4b:f1:31:1e:5d:a2:6b:14:9c:a9:
                    15:42:cf:ec:cc:5e:c2:9b:ab:61:a1:17:92:3c:31:
                    9b:29:e9:65:82:8c:01:f6:97:13:9b:a3:87:7e:6d:
                    7a:fd:33:7d:a0:63:d6:99:86:fc:03:5c:bd:c1:a8:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A3:F7:09:36:EF:04:80:67:0A:B3:21:2F:13:8C:23:44:34:53:AC
            X509v3 Authority Key Identifier:
                keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:d0:50:5d:63:b2:c7:dd:b7:75:4f:bb:b1:fc:c9:55:55:
         08:5e:c9:f1:fa:d6:2d:ab:7c:a0:b6:56:29:bf:da:88:b2:f3:
         38:c4:75:d4:92:bd:fd:02:9b:a3:fa:62:27:37:ed:68:d5:42:
         64:8d:0a:fc:a3:0b:6e:40:1f:56:d7:ba:a2:3f:3f:f5:38:18:
         c8:8d:d7:1c:12:a9:42:ed:f8:20:3a:57:14:d7:81:8b:41:eb:
         5f:b8:d8:e1:b9:b1:79:fd:04:3e:ed:a1:9b:d3:15:e5:b1:31:
         1b:03:44:0d:f2:2a:80:bc:50:d6:c3:37:ea:0e:4f:2d:40:a1:
         cb:47:ed:00:5a:ed:55:70:f9:a5:8d:97:d0:4a:d2:4c:5d:4f:
         f7:83:04:97:bf:36:4d:8f:4c:64:66:bc:fa:36:e8:0c:3d:f4:
         e8:5a:6e:24:99:a0:8b:7c:bf:01:07:e9:3c:84:96:2d:bd:9b:
         1d:d7:ad:3d:ab:9f:cb:4c:2f:5d:8e:b8:4f:99:32:9f:a8:10:
         ff:c7:1d:0f:75:01:3e:54:1d:ea:5a:2b:60:19:86:9d:14:69:
         aa:c1:f4:24:67:af:f6:df:47:17:4f:6c:39:2c:75:81:96:5f:
         62:28:9f:35:46:7f:e8:1d:ec:15:f7:8f:5a:ef:99:65:8c:ae:
         5e:11:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:10:45 2025 by rpki-client