This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File:                     K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier:          MlFTnx5x3dsMVgg6aQOW3xsIFK16iXTFuPgkoroK0hU=
Subject key identifier:   55:AB:4D:1C:DD:59:6A:12:8B:7B:CA:1C:32:63:D0:7D:8A:75:D6:92
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer:       /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial:       019B3A90A1AB3C561B83225A237FD1414547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number:          055C
Signing time:             Sat 20 Dec 2025 07:01:55 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:55 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:55 +0000
Files and hashes:         1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
                          2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: kbitPudjn6zQAz2Atj16hv721UO4oTY+mXPuj/Hd3Rw=)
                          3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:a1:ab:3c:56:1b:83:22:5a:23:7f:d1:41:45:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
        Validity
            Not Before: Dec 20 07:01:55 2025 GMT
            Not After : Dec 21 07:01:55 2025 GMT
        Subject: CN=55ab4d1cdd596a128b7bca1c3263d07d8a75d692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:d1:51:c9:49:81:a7:99:b6:59:09:53:e7:
                    7d:41:e1:fb:28:29:8a:6e:32:ae:77:af:7d:9e:17:
                    97:d4:5a:d7:04:46:bd:9c:4e:7e:3a:45:6b:8c:b6:
                    ed:55:f3:8e:cb:0e:22:e9:f1:85:64:bd:29:01:2a:
                    a6:3f:51:26:fc:f2:e6:ec:c0:96:5f:ab:a4:bd:0d:
                    8a:2c:ab:0c:5b:1c:23:c0:ca:d6:5b:dc:11:5b:1d:
                    58:6f:eb:c0:1a:ab:04:75:f1:3f:85:87:d5:80:b9:
                    95:ab:ba:e0:7e:75:7d:36:a8:f1:3a:dc:74:2e:a2:
                    57:68:3a:1d:3e:af:e5:01:b7:53:6a:c1:88:5d:78:
                    63:4f:a2:0b:8c:89:e4:f1:49:1f:62:9b:e8:41:a1:
                    b6:6a:e3:a5:0f:b9:2a:18:dc:9d:bb:57:51:7e:31:
                    36:c4:cc:8b:c3:7f:a1:22:95:9d:dd:b3:f3:19:71:
                    4f:da:dd:6a:91:12:68:6d:02:79:cf:a5:6f:44:ce:
                    42:9e:fa:80:4b:ae:5c:ec:b4:c2:cd:ee:e4:06:53:
                    1e:ab:f7:ad:fe:e5:bc:0a:aa:e0:08:8a:a9:f4:4b:
                    a2:25:85:a5:55:88:1f:c3:ad:3a:ec:a4:8f:67:fa:
                    e2:cc:07:04:34:e8:a5:a0:97:9e:64:d0:e9:1b:d7:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:4D:1C:DD:59:6A:12:8B:7B:CA:1C:32:63:D0:7D:8A:75:D6:92
            X509v3 Authority Key Identifier:
                keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:32:6c:18:46:d3:d0:40:50:39:fc:43:26:9e:51:00:36:44:
         c2:8c:fc:32:14:ad:c7:28:1e:96:0f:17:12:f1:6f:0d:9d:46:
         03:3f:cd:4b:ce:29:6b:bc:d1:ed:73:b2:b8:e3:c1:b4:b1:91:
         b9:a7:b4:c1:f4:28:10:44:39:42:c2:0f:84:51:0e:42:e2:a7:
         a8:41:f4:c2:4d:e4:cc:84:b0:50:33:2d:96:17:7f:f2:c5:1c:
         52:15:e7:2e:e9:d5:6c:aa:56:19:2d:e7:10:56:e5:45:31:49:
         e2:62:0d:a5:3e:0e:93:51:98:0b:6b:dc:d2:25:79:43:94:3b:
         63:4b:7f:8c:c0:ff:71:d5:c2:00:77:17:c0:c0:36:ad:c7:bf:
         9b:ed:1e:85:06:7e:f5:23:64:9f:33:7b:af:d0:c1:d2:3b:c9:
         6a:2f:3f:3a:d0:6b:33:6f:6a:1b:54:22:a9:96:f8:3c:50:48:
         99:38:39:10:c1:e6:48:f3:49:bf:e2:55:75:3d:74:9a:fb:37:
         23:a4:24:55:bb:e2:44:0b:27:e9:3c:b9:86:b4:a3:ea:be:5a:
         ab:92:11:2d:28:8e:88:73:9b:fe:6b:1f:a6:c5:1e:c8:0f:be:
         89:0c:4d:7c:34:89:ba:7e:d9:8d:21:fb:08:76:20:9f:4c:8f:
         30:74:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:01:13 2025 by rpki-client