This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File:                     CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier:          ++KgZRM7XooboZJv5oGtT7LUyXUIeYH6vNxLtBEeVfs=
Subject key identifier:   03:02:98:50:FA:89:CA:96:FE:6A:C3:49:AB:3F:40:48:EF:08:F3:A6
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer:       /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial:       019B6DD7EDE78D7429E18BF36791737E8A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number:          1763
Signing time:             Tue 30 Dec 2025 06:00:26 +0000
Manifest this update:     Tue 30 Dec 2025 06:00:26 +0000
Manifest next update:     Wed 31 Dec 2025 06:00:26 +0000
Files and hashes:         1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: MpGntpOsasCP4iFqRHiGGg9+2DLiQXd7Y5xDNDDRwlE=)
                          2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:d7:ed:e7:8d:74:29:e1:8b:f3:67:91:73:7e:8a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
        Validity
            Not Before: Dec 30 06:00:26 2025 GMT
            Not After : Dec 31 06:00:26 2025 GMT
        Subject: CN=03029850fa89ca96fe6ac349ab3f4048ef08f3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:0a:74:ae:a3:14:65:5e:1c:25:62:dd:21:
                    b2:d7:12:27:6b:c4:79:18:34:76:00:17:1a:25:2c:
                    51:45:15:8e:57:ab:38:03:1d:29:63:5b:c6:f4:96:
                    89:1f:8f:3c:96:ac:9e:48:66:b5:10:c9:55:6b:38:
                    f0:43:56:da:77:fb:d3:f0:ae:31:22:c3:50:ff:8f:
                    87:7f:18:d0:f3:9b:bf:7f:8a:ce:ac:5a:5a:7a:b3:
                    ae:58:0e:41:11:53:bf:e2:72:d1:31:54:4d:45:df:
                    eb:9c:c5:d2:52:71:de:c0:c6:68:96:c2:81:e1:bf:
                    c9:3a:b3:61:c2:d7:87:b8:13:3f:79:00:48:37:92:
                    f9:40:03:bf:cf:20:99:ca:c3:b5:9a:8e:89:50:84:
                    22:bc:b3:f3:af:59:33:20:36:2e:37:63:3f:d0:91:
                    60:f8:dc:46:85:92:83:db:57:99:47:33:60:72:73:
                    c2:b2:38:f8:7b:da:fc:c6:9a:a3:ac:f0:2e:91:e1:
                    c1:c4:34:ff:01:79:be:b4:5b:a6:06:d5:3e:7e:66:
                    11:05:b2:7f:e0:15:ec:36:d9:14:33:3f:94:61:e4:
                    c2:6f:d6:b2:05:fe:51:3e:79:5e:02:74:ce:51:90:
                    05:4b:77:68:d7:54:24:f5:1c:19:df:ec:b4:35:86:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:02:98:50:FA:89:CA:96:FE:6A:C3:49:AB:3F:40:48:EF:08:F3:A6
            X509v3 Authority Key Identifier:
                keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e8:72:1c:39:3b:57:73:6b:f9:e9:34:9d:d3:1a:cb:ab:2a:
         4b:48:d7:8a:19:b0:11:66:7b:2e:4d:ee:21:d6:9f:8e:34:35:
         e9:78:2f:ec:a2:61:52:67:fa:ca:58:aa:4a:ef:dc:a1:5f:70:
         ad:b4:cd:5c:d3:ab:d5:f8:81:45:aa:c3:48:3f:30:5b:18:53:
         62:7a:cd:4d:c7:84:b0:b2:70:1b:39:0b:28:bc:b6:57:4e:0c:
         3b:b6:71:3e:d3:53:9e:b0:d2:d1:70:79:60:20:01:67:2c:ec:
         62:6b:28:ab:0c:31:3f:c7:8b:90:27:4f:39:f2:22:26:af:4c:
         d3:0c:43:d7:c4:45:8e:d2:85:75:e5:d7:aa:b1:db:58:a1:44:
         9c:3c:57:ce:bf:af:2b:f2:75:2f:8d:1e:ac:29:be:49:a0:e4:
         6f:58:f2:4f:d3:0b:40:28:61:e5:ec:77:f2:a8:03:95:e3:e2:
         6c:36:56:fd:e8:b7:7e:d3:b6:0c:12:de:26:6e:e9:ce:69:84:
         7d:74:0c:47:7d:75:ff:36:16:d5:73:78:c2:44:d9:13:84:3b:
         61:84:bb:30:d9:36:e5:41:49:af:60:83:2a:29:3c:7d:cb:a6:
         eb:0c:c8:21:5f:b2:6f:3f:98:66:81:4b:83:c1:d3:a9:bf:64:
         59:cb:7c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtt1+3njXQp4YvzZ5FzfooMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjZhZjQyNWFiM2QzOWQ3MzM3YzJiMTI1ZDM5NTkzYWQ5
MWMxZDEwHhcNMjUxMjMwMDYwMDI2WhcNMjUxMjMxMDYwMDI2WjAzMTEwLwYDVQQD
EygwMzAyOTg1MGZhODljYTk2ZmU2YWMzNDlhYjNmNDA0OGVmMDhmM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7QKdK6jFGVeHCVi3SGy1xIna8R5
GDR2ABcaJSxRRRWOV6s4Ax0pY1vG9JaJH488lqyeSGa1EMlVazjwQ1bad/vT8K4x
IsNQ/4+HfxjQ85u/f4rOrFpaerOuWA5BEVO/4nLRMVRNRd/rnMXSUnHewMZolsKB
4b/JOrNhwteHuBM/eQBIN5L5QAO/zyCZysO1mo6JUIQivLPzr1kzIDYuN2M/0JFg
+NxGhZKD21eZRzNgcnPCsjj4e9r8xpqjrPAukeHBxDT/AXm+tFumBtU+fmYRBbJ/
4BXsNtkUMz+UYeTCb9ayBf5RPnleAnTOUZAFS3do11Qk9RwZ3+y0NYb6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMCmFD6icqW/mrDSas/QEjvCPOmMB8GA1UdIwQY
MBaAFAhmr0Jas9OdczfCsSXTlZOtkcHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMt
YjdlYjEyOTk4YjM1LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMtYjdlYjEyOTk4YjM1
LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqehyHDk7
V3Nr+ek0ndMay6sqS0jXihmwEWZ7Lk3uIdafjjQ16Xgv7KJhUmf6yliqSu/coV9w
rbTNXNOr1fiBRarDSD8wWxhTYnrNTceEsLJwGzkLKLy2V04MO7ZxPtNTnrDS0XB5
YCABZyzsYmsoqwwxP8eLkCdPOfIiJq9M0wxD18RFjtKFdeXXqrHbWKFEnDxXzr+v
K/J1L40erCm+SaDkb1jyT9MLQChh5ex38qgDlePibDZW/ei3ftO2DBLeJm7pzmmE
fXQMR311/zYW1XN4wkTZE4Q7YYS7MNk25UFJr2CDKik8fcum6wzIIV+ybz+YZoFL
g8HTqb9kWct8xw==
-----END CERTIFICATE-----