This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
File:                     B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft (raw, json)
Hash identifier:          JVEQrJduI5XHW0U2Y8QlNng4q0F6UjZn2jxfYmQ5shQ=
Subject key identifier:   30:25:6F:75:A0:7E:89:ED:BA:1F:B5:C9:BB:D8:7B:D8:BF:02:C4:BD
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Certificate issuer:       /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial:       5F0AB0C1515C54AF1B22F134B03246B6A525BC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
Manifest number:          07DA
Signing time:             Sun 14 Dec 2025 18:27:54 +0000
Manifest this update:     Sun 14 Dec 2025 18:22:54 +0000
Manifest next update:     Mon 15 Dec 2025 19:47:54 +0000
Files and hashes:         1: 326130373a643838353a3a2f34302d3438203d3e20323132353132.roa (hash: AnlA5jJXFQEbB8H4mErWRKr+B6tKsKdKFfBD74I1P4Q=)
                          2: 326130373a643838303a3a2f32392d3438203d3e203233393539.roa (hash: 2gETIIK+C6qO05qR4MSkhnzTGPy/UlOUUTiAigJqQq4=)
                          3: 3139342e3132372e3136352e302f32342d3234203d3e203437353533.roa (hash: Eae43f59caCwqW+lcnRjzfctWI+k7gn8GUNfzgzqb7Q=)
                          4: 3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa (hash: yx+rdcTyHATmFHbhhHzjMWS9TliCEMXJio04m6PB7m0=)
                          5: 326130373a643838303a323a3a2f34382d3438203d3e203433333537.roa (hash: zvuU2VlpftyRhBsg5MpGEj/tKn7h4bz/S26OLRRrdMA=)
                          6: 3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa (hash: iU7HIJKSGSG7RCf/L4v3mR3ceAQJd5+2YdBfykiTLms=)
                          7: B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl (hash: zl4q16ofUCmQng99R0zREUiR1eoTY5KRepSjoTqeGMA=)
                          8: 3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa (hash: uvd9+7igLtP8cByZnvfvsOswui6hZT+ptZpwB4k1F9Q=)
                          9: 326130373a643838303a3a2f33322d3438203d3e2033323134.roa (hash: 0ni4IUpgPklU3n7hRicspHNkpwy/rP3z3cNu4pC+XOg=)
                          10: 326130373a643838303a3a2f32392d3438203d3e203433333537.roa (hash: h9jlMyru/mF5bgKpwYywfw+wBKjDKt/TDMysH3JiXHI=)
                          11: 326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa (hash: yeff1biVXFnDfLVq6U0VkDmadS8A+3gHSrquiSqGCKc=)
                          12: 3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa (hash: 13xjvbrzH+G3f8lcCQOy9tb/s0He4bt4vXzCEWokFzo=)
                          13: 3139342e3132372e3136342e302f32342d3234203d3e2033323134.roa (hash: Fh38d3CklScDz1It0t4kKvfLwxwbMmBkX3lMWl14ZkI=)
                          14: 3139342e3132372e3136362e302f32342d3234203d3e203437353533.roa (hash: v6wdPQanikcCRRY4HKXNlqtmFkkL9Ey5qGzG4nOTCRw=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
                          rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 19:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0a:b0:c1:51:5c:54:af:1b:22:f1:34:b0:32:46:b6:a5:25:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
        Validity
            Not Before: Dec 14 18:22:54 2025 GMT
            Not After : Dec 15 19:47:54 2025 GMT
        Subject: CN=30256F75A07E89EDBA1FB5C9BBD87BD8BF02C4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:97:74:01:e9:a6:bd:5e:ae:b7:83:bb:55:
                    9e:0d:54:5e:c6:8e:8c:30:d4:13:d4:4c:61:90:92:
                    2d:92:1a:5d:69:f2:65:30:5b:c7:50:0f:ef:52:d4:
                    fd:3c:e1:87:b3:0b:5c:3e:bc:74:ba:02:82:10:bb:
                    74:d9:94:3a:22:52:bd:0e:be:2b:a8:84:57:7d:11:
                    7e:61:7b:99:0e:c9:96:9e:46:83:3e:e3:6a:89:06:
                    b7:72:33:df:f1:5a:bd:45:c7:32:88:8c:61:99:b6:
                    77:9c:91:c5:15:42:fd:fa:0b:13:4c:81:de:41:31:
                    5d:1d:61:58:6d:81:05:81:ef:b4:2f:d8:96:e3:62:
                    76:bd:ca:c1:af:e7:91:88:c6:a0:17:1f:cc:21:e2:
                    06:9c:24:c8:04:18:c4:a0:6b:fd:05:12:b3:92:84:
                    9c:e4:4f:46:66:a5:e9:f7:c3:d3:5e:1e:4f:31:4c:
                    28:8c:0f:0e:64:49:5d:d6:35:b1:d6:d1:f0:e8:9d:
                    6b:98:62:db:1f:93:5c:98:7f:55:64:19:2d:57:b0:
                    9e:3d:6b:eb:ab:39:0b:b9:bd:6b:43:d1:3e:f9:b6:
                    51:7d:5b:c9:7b:d4:98:18:d5:c0:8c:80:c9:c7:16:
                    73:4f:12:ec:9b:ea:2e:e7:51:e9:42:11:08:f0:4e:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:25:6F:75:A0:7E:89:ED:BA:1F:B5:C9:BB:D8:7B:D8:BF:02:C4:BD
            X509v3 Authority Key Identifier:
                keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:0a:a7:85:d6:e5:8a:54:5c:d9:93:33:74:9e:05:b2:ec:fd:
         a1:e8:23:68:c9:69:77:0f:48:5f:5a:85:96:9f:1a:36:d1:39:
         80:99:00:16:b6:c0:79:fe:28:1e:0e:b0:36:0c:05:34:e9:01:
         ba:e3:70:c7:58:b1:77:50:66:ed:59:54:e2:6e:f5:8b:6a:3e:
         67:0b:e2:f1:40:65:95:2b:4d:42:b9:c3:43:4d:3e:e9:62:f1:
         f7:87:fe:d6:d6:37:7e:97:3f:50:7d:05:3c:82:75:cd:ef:f8:
         3c:09:90:88:42:d2:76:38:15:c4:fd:7f:93:cf:38:6c:71:a2:
         d8:ff:7b:7c:59:de:42:93:2e:6a:3e:68:8a:f5:9e:fe:87:da:
         a7:63:bc:46:8f:06:36:d9:32:64:ee:3b:67:c7:4d:05:28:e8:
         0e:80:72:e9:53:54:3d:73:43:6f:9c:bb:4d:44:bc:20:ef:d8:
         60:fb:df:66:07:7e:a3:ac:31:27:f0:4d:69:08:c0:6d:62:a4:
         3a:b7:f4:5b:0e:26:89:77:af:01:b1:ab:3b:ae:f9:38:71:a0:
         b5:26:92:b0:e1:f1:dc:d0:14:39:c0:46:47:36:42:73:99:09:
         61:aa:9f:45:3b:86:43:9f:71:5a:9b:ef:a8:0c:36:af:9e:c7:
         e9:41:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:13:35 2025 by rpki-client