This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json) Hash identifier: RJ4FruqG+fIPO/xiJ+IVQ0WqcA8KH0LMDusA7lLN+No= Subject key identifier: 0B:CE:5E:DD:5C:4F:C5:33:C6:DA:00:E8:0A:92:C7:31:4B:70:D3:26 Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa Certificate serial: 019B405ADB1243648423AB422FE9DB1458A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft Manifest number: 1287 Signing time: Sun 21 Dec 2025 10:00:54 +0000 Manifest this update: Sun 21 Dec 2025 10:00:54 +0000 Manifest next update: Mon 22 Dec 2025 10:00:54 +0000 Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: wIQuXi7tk6/3OlifY6JSNtngXtQuOr/T9CG3GwDdfF0=) 2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:db:12:43:64:84:23:ab:42:2f:e9:db:14:58:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa Validity Not Before: Dec 21 10:00:54 2025 GMT Not After : Dec 22 10:00:54 2025 GMT Subject: CN=0bce5edd5c4fc533c6da00e80a92c7314b70d326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:cc:1b:2e:d7:12:18:76:80:54:12:9d:63: 0e:ca:16:a6:77:c8:1a:0d:51:44:14:06:c2:13:11: c5:fc:c7:05:fa:28:05:4c:51:46:e6:69:0f:4a:0f: 4f:9a:a3:3c:a9:26:13:4d:b7:77:59:2f:e3:65:4e: 79:7d:e5:fe:d7:00:fe:91:bc:66:79:a4:22:62:8b: a2:8b:be:da:83:d1:d7:2b:31:65:58:fd:21:02:03: 8e:cc:63:84:ec:87:25:d5:e7:d1:50:1b:c7:d1:0b: 97:fb:4c:09:14:71:49:44:0f:4c:1c:52:8b:8c:be: 1b:5e:6e:97:49:87:66:22:25:21:3a:87:49:a1:ba: 72:2c:50:09:84:dd:52:b1:a2:eb:6a:9b:cb:36:04: 82:ae:91:9a:6f:61:18:57:49:30:08:fb:c4:54:f8: c3:31:db:a1:93:5d:aa:8a:e7:de:d0:83:4a:75:86: 96:16:c9:7a:e0:a6:35:be:6f:15:9f:84:1c:d5:41: b2:c5:4e:cb:77:f8:55:60:b5:b1:d9:50:3b:d0:a8: 7c:d3:7b:c4:1c:dd:84:c2:90:58:71:be:7b:5d:dc: 37:d0:6a:70:c7:1f:82:a8:3f:36:4d:01:1e:70:6e: 63:28:39:47:76:0c:39:64:7b:89:78:0b:9c:5c:f6: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CE:5E:DD:5C:4F:C5:33:C6:DA:00:E8:0A:92:C7:31:4B:70:D3:26 X509v3 Authority Key Identifier: keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:27:ea:a4:6f:ba:3b:83:54:3e:7d:56:a5:fa:87:08:3a:3e: 81:71:39:3d:bb:0a:16:ea:85:64:05:fd:d7:d3:96:93:6d:1e: ce:12:59:b8:f3:61:5b:fc:f1:fa:d4:74:a4:a9:76:06:17:9c: 20:a3:cf:18:eb:8f:bc:19:fa:58:c1:a4:b4:4b:63:b4:71:30: 8e:1d:7a:27:44:9c:31:33:d3:b2:03:50:db:78:d7:aa:1d:53: 1b:8f:9b:3b:93:2c:fd:8b:8f:0c:24:81:82:81:71:45:c7:31: d8:67:77:50:7d:e2:7e:0f:d5:3c:7c:86:98:e3:fb:03:53:c1: 9f:c6:99:2b:8a:88:8f:76:8b:b9:c8:60:6d:4c:c0:24:ca:f6: 7e:fe:3e:1f:00:ff:41:df:29:49:9e:78:b0:30:05:2f:ea:40: 38:54:1c:3a:60:65:8b:c1:45:23:86:20:04:6b:3a:c9:f2:4e: c7:1e:bb:87:be:e8:16:28:8b:03:d8:64:2b:50:50:b9:ad:48: d8:a6:46:91:f4:7b:a6:90:f2:39:4f:60:41:76:9b:cb:3b:79: 97:08:ea:ec:ce:40:24:cb:13:47:a0:cf:08:89:f2:98:0e:32: 86:db:47:3e:a7:41:53:31:a1:9e:ef:2a:6f:9c:3f:37:12:3b: 65:63:d2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWtsSQ2SEI6tCL+nbFFipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh MjQ0ZmEwHhcNMjUxMjIxMTAwMDU0WhcNMjUxMjIyMTAwMDU0WjAzMTEwLwYDVQQD EygwYmNlNWVkZDVjNGZjNTMzYzZkYTAwZTgwYTkyYzczMTRiNzBkMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2krMGy7XEhh2gFQSnWMOyhamd8ga DVFEFAbCExHF/McF+igFTFFG5mkPSg9PmqM8qSYTTbd3WS/jZU55feX+1wD+kbxm eaQiYouii77ag9HXKzFlWP0hAgOOzGOE7Icl1efRUBvH0QuX+0wJFHFJRA9MHFKL jL4bXm6XSYdmIiUhOodJobpyLFAJhN1SsaLrapvLNgSCrpGab2EYV0kwCPvEVPjD Mduhk12qiufe0INKdYaWFsl64KY1vm8Vn4Qc1UGyxU7Ld/hVYLWx2VA70Kh803vE HN2EwpBYcb57Xdw30Gpwxx+CqD82TQEecG5jKDlHdgw5ZHuJeAucXPaBdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvOXt1cT8UzxtoA6AqSxzFLcNMmMB8GA1UdIwQY MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3 LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSfqpG+6 O4NUPn1WpfqHCDo+gXE5PbsKFuqFZAX919OWk20ezhJZuPNhW/zx+tR0pKl2Bhec IKPPGOuPvBn6WMGktEtjtHEwjh16J0ScMTPTsgNQ23jXqh1TG4+bO5Ms/YuPDCSB goFxRccx2Gd3UH3ifg/VPHyGmOP7A1PBn8aZK4qIj3aLuchgbUzAJMr2fv4+HwD/ Qd8pSZ54sDAFL+pAOFQcOmBli8FFI4YgBGs6yfJOxx67h77oFiiLA9hkK1BQua1I 2KZGkfR7ppDyOU9gQXabyzt5lwjq7M5AJMsTR6DPCInymA4yhttHPqdBUzGhnu8q b5w/NxI7ZWPS0A== -----END CERTIFICATE-----Generated at Sun Dec 21 17:12:04 2025 by rpki-client