This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File:                     FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier:          xx94Twzh7kWQjk5pd/6dLKteThkYQSE7084rptju1gk=
Subject key identifier:   FF:10:FB:75:62:B2:15:8A:3E:2F:61:5E:82:27:29:40:A0:5C:01:47
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer:       /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial:       019B1F872E57CD38C9ECE80156757E0292BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number:          0ED9
Signing time:             Mon 15 Dec 2025 01:01:51 +0000
Manifest this update:     Mon 15 Dec 2025 01:01:51 +0000
Manifest next update:     Tue 16 Dec 2025 01:01:51 +0000
Files and hashes:         1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: 5iOKu7dSTKGymbCQq7CVvJTCB5P2mwbSSY3dGK+Rj6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:87:2e:57:cd:38:c9:ec:e8:01:56:75:7e:02:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
        Validity
            Not Before: Dec 15 01:01:51 2025 GMT
            Not After : Dec 16 01:01:51 2025 GMT
        Subject: CN=ff10fb7562b2158a3e2f615e82272940a05c0147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:be:98:1d:b2:43:ad:55:e4:07:9d:8f:21:
                    e2:87:8b:51:a2:c2:a3:e0:02:c7:55:4e:be:da:77:
                    2b:e4:f8:e1:0f:5d:68:8a:e1:28:87:1f:a9:d2:28:
                    50:23:22:65:c7:2e:86:0a:c6:5a:40:d7:dd:3c:ce:
                    1a:b2:2c:da:f9:9d:13:6a:d6:36:06:4d:27:6d:14:
                    05:69:5b:ad:15:79:93:8d:1b:f6:90:b2:eb:20:5a:
                    b7:6f:63:36:e7:b4:23:9a:88:59:7a:28:8b:85:74:
                    30:21:63:3f:bf:b3:3f:33:b4:30:d1:37:65:f6:a2:
                    ac:1e:34:ce:6c:99:1e:76:6a:01:8b:d1:c2:5a:f5:
                    98:2b:3e:f1:62:dd:b8:c0:95:59:7c:8f:5f:c9:6f:
                    2a:08:04:56:52:43:61:71:b1:30:db:dc:f4:ec:eb:
                    b0:d1:51:f1:0b:05:83:22:34:8e:d7:f0:e7:f9:0f:
                    e3:83:ca:54:4c:0a:1e:34:ca:5f:9b:76:de:ee:36:
                    a9:8a:5e:aa:6e:b1:4a:1b:05:af:a7:5b:22:88:9e:
                    35:1d:e3:02:98:29:84:b5:9d:96:6d:0b:b4:11:66:
                    07:8c:7a:8a:7e:dc:d2:cc:46:45:73:2c:ea:9e:41:
                    02:f0:06:70:db:bf:a5:52:f8:b1:93:33:c3:c9:f2:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:FB:75:62:B2:15:8A:3E:2F:61:5E:82:27:29:40:A0:5C:01:47
            X509v3 Authority Key Identifier:
                keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:0e:10:ce:36:79:25:20:fc:e7:51:2a:0c:09:f2:ff:32:
         53:86:76:81:d6:f2:60:25:60:d6:c8:1f:b4:c7:54:a1:9a:2f:
         b7:fc:c0:32:3f:1a:f1:f7:49:70:a8:41:3f:a2:86:ff:a7:56:
         9e:a3:69:e1:8a:4a:c0:a0:06:90:d9:dd:12:ff:db:19:31:cd:
         06:26:47:c0:61:16:37:ae:e9:2d:45:16:be:3a:4b:05:a2:47:
         85:14:77:37:3b:a0:79:ed:30:a3:3a:8e:29:96:8d:d6:fa:5e:
         01:bd:1b:04:4a:5b:90:f5:5d:a8:3e:cd:41:72:2e:e4:29:48:
         44:92:55:e3:2b:46:f7:74:b6:d8:7f:c1:4d:72:79:b2:81:3d:
         2c:df:1d:f6:2b:63:6d:74:34:b5:c0:4f:3b:22:e6:75:4b:34:
         0e:0b:c1:1b:90:2a:29:79:19:e4:fa:26:77:a7:96:0b:86:b9:
         93:25:04:69:1b:0e:1d:2b:a6:ea:92:fd:53:83:ff:ba:be:6d:
         27:a4:c9:d8:84:1a:8f:59:6b:6e:a9:28:53:2c:62:b5:f4:c2:
         3f:23:13:d6:8f:55:da:50:da:43:e0:07:c7:cb:4a:ea:e0:7c:
         20:01:31:92:e0:67:d6:0a:f6:df:75:a1:47:b9:7c:92:66:31:
         9b:e4:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 02:50:32 2026 by rpki-client