This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File:                     GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier:          kyjoFAHmOyrXav19t30mgu5V9+N6+cqwJffq3WU+/wE=
Subject key identifier:   36:45:5C:3F:DD:E5:7D:3B:16:D5:6C:E2:49:C2:48:57:CA:89:28:82
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer:       /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial:       019B2A0A5B13A0C656A4B43059C51575D4F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number:          0A84
Signing time:             Wed 17 Dec 2025 02:01:20 +0000
Manifest this update:     Wed 17 Dec 2025 02:01:20 +0000
Manifest next update:     Thu 18 Dec 2025 02:01:20 +0000
Files and hashes:         1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: n1+OwTD7wfU3VJ5h36GlolGjc/jvCFublzstGM/4fYU=)
                          2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:0a:5b:13:a0:c6:56:a4:b4:30:59:c5:15:75:d4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
        Validity
            Not Before: Dec 17 02:01:20 2025 GMT
            Not After : Dec 18 02:01:20 2025 GMT
        Subject: CN=36455c3fdde57d3b16d56ce249c24857ca892882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:34:04:0e:a4:25:97:70:86:2c:50:b2:b7:
                    4b:73:38:18:05:1e:3a:94:66:37:78:3b:59:dd:a1:
                    4a:7d:2a:60:9d:f2:c0:05:af:91:98:0c:88:9d:5d:
                    0c:b2:da:cd:cb:f9:f5:31:3e:92:a7:8c:1f:78:46:
                    1e:b4:2f:7c:cd:3e:17:03:ff:f9:7e:90:47:e5:9b:
                    ad:f0:cf:c2:63:1e:bd:1c:ae:f2:14:17:59:c3:63:
                    18:52:2d:38:5b:33:b1:e7:e7:94:fd:35:6d:a9:69:
                    b0:a4:32:e6:cf:56:5f:97:c8:7f:ff:50:db:c6:e9:
                    26:31:08:c8:1e:db:c4:d5:bc:e7:ea:e1:74:16:9f:
                    c0:d6:22:bd:9f:c1:86:b8:8b:13:aa:a3:3b:d0:4a:
                    2d:09:72:c6:a6:d2:d8:a3:b7:0b:87:95:2e:26:44:
                    05:56:a3:c5:44:fb:14:16:aa:f4:d4:ca:4a:ed:15:
                    3a:cc:85:b9:d5:88:72:64:43:51:c0:fb:17:28:c6:
                    2e:3b:a3:29:b5:47:94:61:3f:19:a3:ac:ab:6b:fc:
                    fd:f9:ca:0e:2f:52:32:ee:8e:d6:d6:a4:3e:a4:9c:
                    be:f8:eb:34:0d:b8:ad:a7:88:66:13:32:ea:b1:18:
                    94:41:a6:7a:5d:1b:3c:75:92:49:e3:1e:9c:67:72:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:5C:3F:DD:E5:7D:3B:16:D5:6C:E2:49:C2:48:57:CA:89:28:82
            X509v3 Authority Key Identifier:
                keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:49:e7:20:11:38:ce:7b:51:69:d0:be:c4:ed:2c:54:b8:ea:
         57:88:13:9c:23:da:0f:35:36:f2:5c:dc:55:96:2b:0f:18:f2:
         84:0e:d3:7a:8e:ee:7a:48:0a:17:24:a6:74:c4:2a:5b:71:af:
         32:2f:68:dd:4e:01:80:2a:33:81:8f:d6:07:09:08:7c:21:bf:
         e3:e5:a9:14:a4:dd:27:21:8d:f5:c6:81:14:01:63:9f:ca:e7:
         42:4a:bc:4b:1f:0e:92:1e:d1:60:81:f7:b3:06:f7:52:d4:c4:
         81:3d:1b:8d:1c:6a:67:3b:e3:50:6c:07:43:c8:f1:e2:f4:11:
         b9:bb:dd:88:7b:6e:7b:60:52:fe:3c:8a:06:cb:1c:13:e3:28:
         5a:bb:72:97:93:a4:d1:c1:21:f3:bf:e1:d8:b2:43:35:e2:5e:
         c9:fe:0d:c0:d4:34:7a:1c:e6:e0:41:54:9f:e1:2a:59:75:07:
         5b:67:36:a1:83:75:d3:48:a4:db:f5:b2:1e:72:76:b8:c5:ca:
         1b:64:ae:7c:98:89:5d:02:a0:79:a2:c4:89:c6:0a:31:ca:12:
         c4:24:cc:41:08:45:8b:96:4e:c2:f9:d4:72:a1:9a:67:c0:05:
         35:c1:c9:5e:5f:e2:29:7c:f7:a8:a8:3a:8b:5e:f2:54:e2:e7:
         8e:45:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----