This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
File:                     6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft (raw, json)
Hash identifier:          CuMp8QJ9FwzAhJkrE8ACt+Et0RRnDDYdnkB0gPv+4DE=
Subject key identifier:   14:76:99:B7:3E:85:9A:14:62:A2:A5:DB:C9:E8:33:EC:B8:D8:04:8E
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Certificate issuer:       /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial:       019AE8294DE48B3CE302C97A9C816FCB8C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
Manifest number:          175C
Signing time:             Thu 04 Dec 2025 07:00:12 +0000
Manifest this update:     Thu 04 Dec 2025 07:00:12 +0000
Manifest next update:     Fri 05 Dec 2025 07:00:12 +0000
Files and hashes:         1: 1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (hash: jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=)
                          2: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl (hash: o6fdu2ClIGeR3Bjnd15PD9mBWCN5v/oVSA+SFIrsRiY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e8:29:4d:e4:8b:3c:e3:02:c9:7a:9c:81:6f:cb:8c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
        Validity
            Not Before: Dec  4 07:00:12 2025 GMT
            Not After : Dec  5 07:00:12 2025 GMT
        Subject: CN=147699b73e859a1462a2a5dbc9e833ecb8d8048e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:38:0e:de:75:4c:6e:b5:d6:23:1f:b1:84:
                    e9:3b:b0:7b:7c:6a:39:0b:29:f1:77:77:30:c0:24:
                    2d:fb:3e:1b:ab:51:2b:71:d0:1e:51:81:c2:79:01:
                    11:b2:be:ee:55:09:8e:7a:39:57:d9:38:d9:e4:ad:
                    d7:d9:c8:86:ce:5a:d7:a9:3b:f7:dc:ef:43:64:8d:
                    1e:46:0a:be:34:0d:2c:1a:63:74:2a:65:73:35:57:
                    4b:85:42:0a:31:55:a7:de:03:8d:e2:04:db:3f:00:
                    1f:9c:0a:27:55:ad:7c:4b:e9:5f:b7:fb:40:55:fb:
                    2c:2f:53:94:76:e3:16:c1:bd:45:36:e2:10:90:9b:
                    58:58:85:bb:80:dc:8b:12:7d:6d:a2:44:62:55:2f:
                    85:25:90:62:b1:33:b2:0a:1d:70:14:52:45:e2:89:
                    69:cc:e8:e0:5a:6c:e6:a8:6a:0d:4e:c7:c3:54:d2:
                    af:22:13:27:f8:9b:31:58:79:56:78:63:f2:89:7f:
                    3c:eb:48:fa:26:3e:f9:11:d0:87:b2:d0:97:9a:bb:
                    2d:9a:74:44:86:ac:f2:42:40:d2:83:63:cf:db:5a:
                    0f:27:03:bd:f2:29:6a:fe:b5:b4:71:5f:d9:6d:7a:
                    dd:53:09:15:4e:d6:e8:e7:4d:af:15:e2:60:17:8d:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:76:99:B7:3E:85:9A:14:62:A2:A5:DB:C9:E8:33:EC:B8:D8:04:8E
            X509v3 Authority Key Identifier:
                keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:4e:58:5c:7b:d5:a8:45:1b:05:29:ca:aa:15:f6:12:3d:
         60:b0:bc:e4:95:1e:aa:49:97:2e:e6:2d:e1:11:c8:52:23:20:
         38:86:df:77:c1:fa:49:f7:59:7e:80:82:77:77:90:89:6a:d5:
         f7:6d:af:ec:08:b3:60:f2:41:5d:05:10:70:0f:78:ad:35:e2:
         4b:64:d9:60:c8:68:8e:51:96:5c:68:62:75:78:2e:a8:dd:a3:
         53:8b:10:15:f5:12:3a:e4:ba:83:15:f4:b6:d1:b9:72:e1:55:
         12:6e:8e:13:3f:60:7f:8b:f7:1b:75:ac:f8:88:fe:19:13:c2:
         3c:eb:ea:79:2e:77:9c:c9:b7:fc:c3:8e:bf:12:66:3d:4f:6d:
         7b:eb:fe:3c:14:be:16:fd:71:92:25:9c:c9:2c:df:d0:bf:44:
         f3:9e:9f:41:33:b6:aa:36:8e:fc:66:7d:f0:4d:13:b3:e6:df:
         01:91:18:22:54:12:2b:bc:1c:a4:87:91:83:e0:e2:4b:94:5c:
         c5:89:e2:c4:3f:b1:21:13:8a:41:92:c6:40:dc:cc:f2:99:53:
         fb:9a:02:85:ff:3c:ce:b9:82:65:40:85:6b:52:17:68:f8:df:
         e3:a5:bc:82:11:95:4f:6e:ed:e4:cf:0d:69:05:1e:5a:54:a6:
         1e:68:02:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZroKU3kizzjAsl6nIFvy4wKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjY1ZjFkNWU5NzBlNjA4MmQyY2ZkNmY5OWVmOWM4MTc0
YTE0NDAwHhcNMjUxMjA0MDcwMDEyWhcNMjUxMjA1MDcwMDEyWjAzMTEwLwYDVQQD
EygxNDc2OTliNzNlODU5YTE0NjJhMmE1ZGJjOWU4MzNlY2I4ZDgwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNM4Dt51TG611iMfsYTpO7B7fGo5
Cynxd3cwwCQt+z4bq1ErcdAeUYHCeQERsr7uVQmOejlX2TjZ5K3X2ciGzlrXqTv3
3O9DZI0eRgq+NA0sGmN0KmVzNVdLhUIKMVWn3gON4gTbPwAfnAonVa18S+lft/tA
VfssL1OUduMWwb1FNuIQkJtYWIW7gNyLEn1tokRiVS+FJZBisTOyCh1wFFJF4olp
zOjgWmzmqGoNTsfDVNKvIhMn+JsxWHlWeGPyiX8860j6Jj75EdCHstCXmrstmnRE
hqzyQkDSg2PP21oPJwO98ilq/rW0cV/ZbXrdUwkVTtbo502vFeJgF41xaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR2mbc+hZoUYqKl28noM+y42ASOMB8GA1UdIwQY
MBaAFOi2Xx1elw5ggtLP1vme+cgXShRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxaZkhWNlhEbUNDMHNfVy1aNzV5QmRLRkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNWY0M2ItMDg3Yy00OTBiLTljMDMt
MTg1N2U0MjY4ZmJmLzEvNkxaZkhWNlhEbUNDMHNfVy1aNzV5QmRLRkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNWY0M2ItMDg3Yy00OTBiLTljMDMtMTg1N2U0MjY4ZmJm
LzEvNkxaZkhWNlhEbUNDMHNfVy1aNzV5QmRLRkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjROWFx7
1ahFGwUpyqoV9hI9YLC85JUeqkmXLuYt4RHIUiMgOIbfd8H6SfdZfoCCd3eQiWrV
922v7AizYPJBXQUQcA94rTXiS2TZYMhojlGWXGhidXguqN2jU4sQFfUSOuS6gxX0
ttG5cuFVEm6OEz9gf4v3G3Ws+Ij+GRPCPOvqeS53nMm3/MOOvxJmPU9te+v+PBS+
Fv1xkiWcySzf0L9E856fQTO2qjaO/GZ98E0Ts+bfAZEYIlQSK7wcpIeRg+DiS5Rc
xYnixD+xIROKQZLGQNzM8plT+5oChf88zrmCZUCFa1IXaPjf46W8ghGVT27t5M8N
aQUeWlSmHmgCAQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:36 2025 by rpki-client