This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File:                     0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier:          0fOQUT7I4wMWE04ylQCo1NRvtilFaHzcObhmxIdx1VY=
Subject key identifier:   12:1A:D5:23:C1:EC:BF:1A:DA:82:EC:61:F7:B7:0E:52:00:07:9C:E9
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer:       /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial:       019B454A74F25BC1C289DE5FC46965E5973A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number:          0EF5
Signing time:             Mon 22 Dec 2025 09:01:06 +0000
Manifest this update:     Mon 22 Dec 2025 09:01:06 +0000
Manifest next update:     Tue 23 Dec 2025 09:01:06 +0000
Files and hashes:         1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: Av456cX4wgalRZZsueyygl0Z699qOzY8igIq3oIDNGY=)
                          2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:4a:74:f2:5b:c1:c2:89:de:5f:c4:69:65:e5:97:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
        Validity
            Not Before: Dec 22 09:01:06 2025 GMT
            Not After : Dec 23 09:01:06 2025 GMT
        Subject: CN=121ad523c1ecbf1ada82ec61f7b70e5200079ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:7b:a6:13:11:ae:8b:fe:77:e5:79:6a:92:
                    d9:1a:f5:b2:34:a9:13:95:b1:3f:9b:94:da:57:c5:
                    79:2b:10:0c:a6:fd:ee:41:ca:ef:82:50:4c:ab:e0:
                    f8:eb:ee:90:1a:e1:49:d5:df:d0:c1:18:f3:ce:a1:
                    dd:31:69:ae:26:78:da:b7:fb:03:99:08:49:17:c6:
                    7b:99:6f:98:18:f3:aa:83:1d:b2:fd:48:f1:6d:6d:
                    a9:36:ee:05:64:42:7f:50:ca:2f:77:5c:2a:5c:60:
                    00:de:6a:d3:e8:ce:54:84:87:e4:6d:e6:e6:f3:fc:
                    76:94:80:99:7f:1c:dc:e2:68:17:ab:fb:62:46:bc:
                    98:96:08:da:47:79:24:ab:8b:38:48:03:cb:8f:06:
                    a0:ef:f3:19:13:e3:06:1b:7b:f4:09:67:4a:da:8e:
                    e2:3a:39:62:d4:5b:fa:e7:e8:89:0d:0b:99:78:41:
                    26:56:68:de:89:f6:0c:c8:71:16:70:33:19:6c:b6:
                    f4:79:52:97:30:e3:18:1b:81:58:16:de:9f:3b:d5:
                    1f:79:01:59:78:8c:7c:6c:03:cc:ee:32:89:97:4c:
                    82:c9:8f:68:5a:83:24:a8:bb:e9:0b:25:95:55:e4:
                    2e:dc:b4:6d:b3:6a:41:d3:73:9d:2c:3f:b8:19:66:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1A:D5:23:C1:EC:BF:1A:DA:82:EC:61:F7:B7:0E:52:00:07:9C:E9
            X509v3 Authority Key Identifier:
                keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:06:87:2b:08:59:03:0b:e3:18:c7:04:3a:cc:0f:b7:85:84:
         35:56:42:1d:fb:a4:45:f6:f1:ab:c7:b5:40:eb:9e:8f:38:01:
         af:6e:20:93:69:03:cd:93:68:32:e8:bc:25:46:74:9a:16:1f:
         78:86:40:46:c7:57:03:3b:c8:ca:93:9e:45:8d:83:72:0b:4b:
         84:c1:24:a9:d6:67:f8:28:4b:10:b0:06:f7:8c:1d:87:42:c2:
         34:a1:29:65:ea:32:cf:cf:b9:18:4e:24:ab:5f:b0:78:32:e4:
         31:ac:e2:c5:52:b1:c9:27:d5:9f:68:e7:02:2e:88:e3:d5:60:
         b5:fd:ed:6f:4d:1e:90:60:2d:2f:7f:76:63:30:e3:6f:d6:09:
         a9:b4:ff:f0:83:17:a5:1b:72:05:f4:aa:f8:e7:d5:40:cc:86:
         3a:a8:42:7b:2a:8a:de:89:2d:cc:45:73:05:17:b9:9b:0c:dc:
         41:58:ca:e6:96:46:68:b9:04:68:89:e8:9b:ab:be:54:75:e8:
         0a:7a:7d:f5:61:34:6e:6e:c1:d3:83:b7:72:8c:e8:ac:ad:07:
         52:68:11:d2:90:a3:87:c6:9d:e0:f7:f6:66:42:38:47:be:0c:
         04:91:8b:a4:69:f9:5b:42:cb:ae:3a:45:58:1a:62:19:52:98:
         8b:6b:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----