This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File:                     NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier:          UJBSnXrLwD8YZ258gTS9xp2nT9AVv/uSUXFatNI7Dk4=
Subject key identifier:   60:77:BD:B0:18:53:B9:AE:61:3C:9B:57:9F:70:18:E7:04:E9:92:38
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       019B3155D417699092DBCAF10129B0C7A6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number:          1786
Signing time:             Thu 18 Dec 2025 12:01:06 +0000
Manifest this update:     Thu 18 Dec 2025 12:01:06 +0000
Manifest next update:     Fri 19 Dec 2025 12:01:06 +0000
Files and hashes:         1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
                          2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
                          3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: bTiOuKAfDQ0jEdo1G9MTSlseoBita8h30l9uSCnmDl0=)
                          4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:55:d4:17:69:90:92:db:ca:f1:01:29:b0:c7:a6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Dec 18 12:01:06 2025 GMT
            Not After : Dec 19 12:01:06 2025 GMT
        Subject: CN=6077bdb01853b9ae613c9b579f7018e704e99238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:d4:e2:b8:fb:20:7d:2f:af:81:29:d0:55:
                    3a:6c:2e:ad:19:f9:a6:06:24:a9:85:5c:80:0e:86:
                    4e:19:56:44:dd:2a:74:a8:cd:35:5b:fe:6c:fe:44:
                    6b:1e:fb:3e:68:09:2d:31:d3:0a:5b:14:6d:d5:85:
                    aa:b2:14:dd:a3:39:e8:e6:ae:c6:c2:65:fd:f1:bc:
                    1c:a4:02:49:7f:e3:28:ab:bd:95:51:ae:09:38:41:
                    9a:10:5a:24:91:40:2b:71:2d:0f:ef:2a:10:4a:31:
                    7f:75:cd:3a:3e:69:6e:d4:cf:74:96:7a:9e:4a:7d:
                    d5:0d:06:f3:62:e1:f7:11:fd:a6:bb:1f:80:75:7e:
                    c4:9e:60:6a:4b:d2:a8:b9:d7:03:0d:9e:aa:27:09:
                    ac:e7:93:f6:5a:ba:65:f0:4b:f9:9d:71:86:05:de:
                    8a:03:d8:4d:2e:c9:04:65:05:51:d1:87:86:d9:b7:
                    89:c0:1d:b3:9c:14:3c:67:7e:20:42:cb:11:dd:de:
                    f7:8c:31:b9:64:39:a5:84:b5:37:7d:05:56:50:bc:
                    f4:2a:e7:13:7b:6a:70:e7:3e:05:74:7a:26:d8:e2:
                    e7:b5:c5:e3:03:6e:f3:36:00:35:3c:f2:3d:1a:24:
                    75:97:f2:cf:e8:b2:d8:6a:7f:b5:86:41:44:a2:0a:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:77:BD:B0:18:53:B9:AE:61:3C:9B:57:9F:70:18:E7:04:E9:92:38
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:c6:48:43:27:e8:e8:c1:03:78:c3:e3:85:bb:8e:6f:46:
         6e:8c:27:52:a1:82:39:de:0f:4e:15:5a:32:a6:f2:7c:76:f3:
         23:d1:71:09:5e:c0:43:93:7c:3d:96:3f:a5:5e:bd:4d:4e:1b:
         ea:fd:8a:eb:b1:90:43:b1:21:c4:68:cc:c3:d3:19:5b:e8:e7:
         7d:0e:8d:54:2e:1e:50:6d:14:2b:c7:72:c5:36:20:4f:6c:af:
         aa:1b:39:60:2b:17:0a:ac:7b:16:b1:c0:44:26:2d:84:fb:e1:
         0e:9b:c1:d0:18:30:28:9f:0d:30:a4:0d:c2:2a:81:d9:14:39:
         c1:e9:dd:90:ec:84:4a:13:f2:f9:c8:4e:de:9d:ea:8f:78:1a:
         8f:8b:92:e4:d2:65:14:b0:a0:30:26:78:24:f5:32:5f:39:b3:
         ae:7f:18:bc:9a:05:47:59:e0:56:d3:4b:83:3d:40:cd:df:e7:
         fd:5d:f8:82:c0:ee:91:7e:d1:d3:83:5c:28:34:dd:14:a6:54:
         bc:ec:39:a4:34:dd:45:74:9a:ff:12:3f:d1:96:ba:3f:f3:73:
         83:4e:67:27:bc:c3:50:d5:f7:ac:ba:48:33:58:37:a2:bf:44:
         f8:0f:46:c3:c9:08:b6:4d:45:8e:1d:1c:1a:b1:13:ae:1c:f4:
         ab:b6:5b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----