This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
File:                     55b_u99E78Ho4QIA1J2o7tCjtx4.mft (raw, json)
Hash identifier:          lH0PmRJwhHrrAQdYMkxj1x5u6k8qbuNfizjeHamsmIQ=
Subject key identifier:   8E:14:59:D2:ED:15:C1:61:76:F8:A3:84:6B:CC:D1:1D:6E:06:15:82
Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E
Certificate issuer:       /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
Certificate serial:       019B3C7E37643C756519D2A793407B02A981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 16:01:03 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:03 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:03 +0000
Files and hashes:         1: 55b_u99E78Ho4QIA1J2o7tCjtx4.crl (hash: 9beMvpoPXzsDNfc8w2wwRaZ0qOiXIcES5vz/HIcSRK4=)
                          2: vUK0PWq2rYFX03NpI4glIwcP-yw.roa (hash: 7OmubHi4XYVC0tzd37LBLN6Yy8bTQM8VhrxlC/dBHqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:37:64:3c:75:65:19:d2:a7:93:40:7b:02:a9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
        Validity
            Not Before: Dec 20 16:01:03 2025 GMT
            Not After : Dec 21 16:01:03 2025 GMT
        Subject: CN=8e1459d2ed15c16176f8a3846bccd11d6e061582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:da:7d:bc:7a:ab:86:73:41:8c:c9:db:62:
                    e4:cd:b3:ee:36:75:17:d8:d0:71:16:e4:bc:84:6d:
                    26:d2:96:a0:51:8c:3c:39:cf:80:15:b3:95:f9:fc:
                    31:05:f9:e3:36:ad:bc:af:97:16:34:20:d9:3c:85:
                    3b:3a:29:81:da:ae:12:50:a8:d8:25:43:ea:10:ff:
                    f4:b1:a8:fa:67:62:b1:9a:19:b9:fa:25:79:b4:98:
                    e5:87:54:bc:e3:35:e1:8c:f4:2d:c3:15:67:c4:20:
                    c8:35:08:ae:fc:0f:42:cc:75:b2:42:23:3c:19:a0:
                    56:8b:5e:7e:c9:f1:35:ca:89:68:71:03:63:e5:df:
                    10:b6:31:84:f6:f4:4b:20:0b:bf:15:f7:9a:f7:4b:
                    06:49:b3:f4:8c:62:d9:49:79:f0:60:8c:4c:1f:92:
                    40:88:3f:17:7a:03:80:19:ed:17:83:9f:1e:a5:d6:
                    d2:62:64:67:35:ba:73:1b:5d:07:ca:63:56:26:e4:
                    d2:43:7f:29:d4:ce:78:85:8f:e5:4f:8e:1b:7c:50:
                    3a:2d:7d:82:47:4a:41:cc:6a:61:d7:79:79:52:8a:
                    72:68:6d:cf:ea:cf:8b:fe:2f:eb:2e:6a:8a:09:cd:
                    05:71:07:98:f9:ca:09:66:9b:f7:d9:94:f4:12:b0:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:59:D2:ED:15:C1:61:76:F8:A3:84:6B:CC:D1:1D:6E:06:15:82
            X509v3 Authority Key Identifier:
                keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:9c:84:c4:e5:0b:a7:26:3a:d8:e2:4b:c0:4b:f0:6e:16:
         06:08:ba:13:b3:3e:92:56:df:01:45:f7:c8:a8:57:d4:a6:28:
         c9:d4:36:c5:63:81:7f:09:70:dd:51:69:e4:5e:8d:39:5b:d7:
         7b:36:55:d9:d4:8f:eb:10:5f:b2:ec:a6:e1:49:d0:15:c6:b7:
         88:9c:4e:7a:5e:91:c4:8c:ff:8f:63:75:3e:17:e5:bc:48:fd:
         36:69:be:1e:30:1e:6c:40:8e:43:61:88:bd:89:ee:34:5b:fb:
         98:10:89:6e:f7:60:fd:ed:24:95:bf:86:46:67:2e:3c:a9:06:
         1a:9e:29:92:c0:36:4f:15:c3:8a:dd:97:df:b6:ce:9d:64:82:
         2d:8f:96:ff:2d:f4:97:b2:31:a3:f4:8a:34:38:c8:8e:94:df:
         77:13:95:00:34:a7:dd:31:9d:7b:51:e8:36:75:55:5c:c1:c3:
         b8:db:dd:06:7c:24:7a:d3:a8:36:6f:be:a3:03:5e:bb:b2:14:
         1d:6c:79:d7:9e:15:3a:41:45:f4:56:08:56:20:1d:5f:61:21:
         97:b9:47:6c:21:d2:08:e9:c8:70:a0:c5:70:1c:1e:53:d2:0b:
         b7:8e:e0:d9:47:2c:de:3b:19:4b:84:5c:d6:3f:d3:a4:ab:ec:
         ad:91:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:08:47 2025 by rpki-client