This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File:                     3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier:          b9VFPwCIOEu/EXysoqKr3UvkTBFM+8KkdGj+cZC/qzQ=
Subject key identifier:   BC:DD:10:EF:98:41:CF:B6:EB:02:3F:C1:E1:04:32:28:05:1D:D1:BB
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer:       /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial:       019B2B1D32BFCB0AF837045086ABF415EC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number:          0E66
Signing time:             Wed 17 Dec 2025 07:01:32 +0000
Manifest this update:     Wed 17 Dec 2025 07:01:32 +0000
Manifest next update:     Thu 18 Dec 2025 07:01:32 +0000
Files and hashes:         1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: W5ICkk/l0IapNUOq6O34SeHchdxDRco3kbEI2o7ZEOU=)
                          2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
                          3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:1d:32:bf:cb:0a:f8:37:04:50:86:ab:f4:15:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
        Validity
            Not Before: Dec 17 07:01:32 2025 GMT
            Not After : Dec 18 07:01:32 2025 GMT
        Subject: CN=bcdd10ef9841cfb6eb023fc1e1043228051dd1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:dd:1f:95:03:73:3c:14:26:ef:6f:02:2f:
                    87:f2:3b:d8:2d:34:08:54:f6:d5:c0:75:bc:bb:4a:
                    b4:1d:ba:80:1a:65:ec:13:65:b9:35:e0:7e:63:59:
                    aa:7e:35:c3:dd:13:20:67:e1:00:1c:b8:2a:3b:4f:
                    44:8c:59:51:91:1f:ac:3d:b7:55:f2:c8:df:e7:1c:
                    24:2a:5d:60:65:24:a2:e7:5c:88:bb:51:19:82:35:
                    8e:71:03:6c:0a:d3:69:48:b2:7d:b7:cd:ea:ee:c9:
                    da:9d:a3:19:bc:b4:05:ba:cf:dc:83:5c:95:31:76:
                    fe:af:71:93:b6:82:5c:fc:51:00:4f:18:38:61:27:
                    d4:ba:3a:59:fa:e0:b7:81:61:42:b9:47:ee:2f:99:
                    6c:bf:27:ed:ce:ff:2a:36:50:e3:b2:a8:f8:e6:1a:
                    7e:3e:e0:ef:17:9b:95:e0:1d:f6:ec:c1:45:44:b1:
                    0b:4a:35:8f:e8:e6:10:7e:1f:38:62:2c:50:90:ee:
                    81:95:97:79:65:a8:b5:e0:26:44:66:f9:91:65:79:
                    ab:25:a5:62:39:7c:06:61:66:ac:8a:bb:29:cb:73:
                    46:e0:6f:2a:5b:9d:da:a7:11:97:31:e0:f9:a2:dd:
                    e5:fe:6b:28:cb:ed:1b:d6:27:95:35:3b:98:ca:5f:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:10:EF:98:41:CF:B6:EB:02:3F:C1:E1:04:32:28:05:1D:D1:BB
            X509v3 Authority Key Identifier:
                keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:72:07:9d:17:b0:7e:4e:ea:6a:01:d1:5b:0e:c6:f4:dc:d6:
         2a:87:9f:b1:a0:77:df:43:c8:bc:06:4d:c6:04:74:68:c7:2f:
         c3:7a:52:9a:af:00:dd:e6:3e:00:a5:f3:37:4b:de:cf:77:73:
         ef:6f:14:6e:4c:51:99:2a:d1:09:c0:11:c1:36:09:a0:36:11:
         34:0f:9b:7b:e1:93:27:df:e3:b0:9f:4a:cc:fb:e1:85:76:d7:
         81:38:14:81:c6:54:60:4a:2e:d9:9f:62:83:bc:b6:dd:4b:c3:
         71:97:8b:6c:fb:f8:cf:f1:c6:56:49:4c:23:84:76:4d:b1:9d:
         c1:77:55:8f:d7:22:14:ca:c1:0c:7e:6a:6d:c9:e3:2a:44:4b:
         06:e5:bf:56:c2:76:34:8a:d8:7f:f2:93:cb:80:16:b7:d3:41:
         a7:bc:fa:e9:75:b2:cd:a0:69:a8:b4:41:b9:94:72:4b:e0:c4:
         29:f4:11:f9:e3:c1:92:52:b9:3b:c5:8c:e1:7a:67:e9:80:ad:
         32:3d:ed:6b:01:e5:a3:60:f8:bc:7c:47:64:2f:f9:81:fb:13:
         62:e8:ca:23:c0:d3:72:c7:2a:1f:cf:93:6d:50:43:79:fd:13:
         a5:e4:9c:b9:e5:35:be:74:e3:ae:96:3b:84:c8:dd:f5:10:25:
         d1:e5:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----