This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File:                     z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier:          AduAFGpUx7ANT3TZdfETX+Ca0WwAGO+Xur+tegzB9lg=
Subject key identifier:   97:70:24:30:2D:32:82:3C:C4:FF:59:D3:A9:6A:A7:79:9C:DF:37:88
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer:       /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial:       019B25886D80D541DFC9643DA7F242F744F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number:          1310
Signing time:             Tue 16 Dec 2025 05:00:56 +0000
Manifest this update:     Tue 16 Dec 2025 05:00:56 +0000
Manifest next update:     Wed 17 Dec 2025 05:00:56 +0000
Files and hashes:         1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
                          2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: xBgQqf0kXxHHDYyOTywbptGmcIx2WYn0aM34fEVp7Iw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:88:6d:80:d5:41:df:c9:64:3d:a7:f2:42:f7:44:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
        Validity
            Not Before: Dec 16 05:00:56 2025 GMT
            Not After : Dec 17 05:00:56 2025 GMT
        Subject: CN=977024302d32823cc4ff59d3a96aa7799cdf3788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:8c:3a:c0:f0:ed:45:72:13:6a:75:b5:97:
                    c9:e5:65:ba:72:2e:e5:0e:2f:de:54:ce:f8:79:f3:
                    30:ca:53:56:77:be:2d:e2:12:69:42:75:45:99:48:
                    e8:e7:8e:d8:e7:92:b7:c8:63:09:7b:5c:c4:af:9d:
                    2a:d3:8d:9b:1d:b0:68:ad:1b:8d:32:33:c5:b7:99:
                    d4:fd:b2:ee:73:88:67:7e:df:0f:91:07:88:22:9a:
                    ad:55:c0:aa:e1:69:2f:2f:2e:b3:54:2e:85:2d:41:
                    7b:6f:82:c4:15:d4:e7:f0:0e:f5:73:ef:9b:e8:5c:
                    d9:04:a0:54:a5:34:d7:38:75:13:6f:30:63:a2:a5:
                    4b:f9:f5:48:6d:03:b5:c7:07:3b:aa:ea:b8:7a:14:
                    7c:6f:47:52:66:07:bf:d7:89:82:20:f7:f1:4c:b7:
                    5d:30:e6:63:0c:a7:82:79:d3:ce:00:e9:c2:fc:03:
                    0e:93:dd:de:09:2f:48:1d:5f:c6:cf:bb:df:d2:5a:
                    b6:c8:2a:83:33:01:f5:84:d6:d5:37:15:c4:ef:4c:
                    99:51:d2:1f:e7:20:17:16:85:57:fe:c0:e7:25:4e:
                    53:77:59:6c:2d:1b:a3:15:0a:b5:6a:a6:49:79:65:
                    72:00:9f:65:a7:66:29:98:95:ef:82:e8:f8:4d:52:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:70:24:30:2D:32:82:3C:C4:FF:59:D3:A9:6A:A7:79:9C:DF:37:88
            X509v3 Authority Key Identifier:
                keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:6d:34:2f:35:15:fd:c0:48:f4:0c:30:66:59:0e:d3:83:
         13:86:ae:e1:4c:1b:13:55:2e:ed:0b:5b:39:42:5a:f6:58:d3:
         ec:e6:f8:5d:5d:b5:3d:5a:38:95:79:f3:f8:64:23:83:ef:8f:
         d9:f5:6f:80:2b:ca:95:76:94:8d:1a:c5:58:15:1d:1e:32:f9:
         b3:82:84:85:9e:fa:ea:ed:0c:cc:ca:51:06:e3:8f:73:be:3d:
         f5:46:6a:c7:83:5e:b7:7f:07:a0:df:1a:11:a0:72:e4:9b:95:
         6b:ad:37:8d:4d:3d:70:53:43:52:83:dc:2c:c9:9a:17:0d:49:
         07:6f:ac:5e:51:58:69:84:9d:33:30:dd:4d:70:a4:c9:ac:bf:
         04:f5:d2:08:6a:3a:8b:b7:1c:17:89:9a:df:99:cf:29:15:f1:
         83:f6:75:53:62:8c:91:b2:87:cb:98:2f:d0:19:af:cb:0d:ea:
         a4:40:c4:52:a2:11:76:d2:0c:82:a2:df:68:99:fe:e9:05:21:
         de:8c:d1:da:ac:eb:b2:4a:70:6c:4a:e1:ab:86:4f:d1:cb:62:
         49:a8:64:c1:bd:62:80:5b:8e:50:03:46:6c:8c:f6:70:b4:dc:
         ce:05:96:78:f6:fe:87:cc:9b:c6:00:cb:81:b4:56:8e:02:cd:
         a4:20:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----