This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File:                     0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier:          H9Hj4T+0dII9sIDnyEgf6bvYSsXB+eoqxIf8IGQ56Fc=
Subject key identifier:   77:AE:24:B4:56:FC:D9:9C:A9:C3:71:79:1D:D2:84:DC:9D:7B:9B:C7
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer:       /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial:       019B01EA0F2B7EDD23D70257F7B99251B9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number:          13B1
Signing time:             Tue 09 Dec 2025 07:01:15 +0000
Manifest this update:     Tue 09 Dec 2025 07:01:15 +0000
Manifest next update:     Wed 10 Dec 2025 07:01:15 +0000
Files and hashes:         1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: +mbRvlyCWLwHmaGxJ1GcHszFQzfBDpsv7klUDh+5tVA=)
                          2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:01:ea:0f:2b:7e:dd:23:d7:02:57:f7:b9:92:51:b9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
        Validity
            Not Before: Dec  9 07:01:15 2025 GMT
            Not After : Dec 10 07:01:15 2025 GMT
        Subject: CN=77ae24b456fcd99ca9c371791dd284dc9d7b9bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:be:c3:b2:97:92:78:40:51:d8:1f:6d:2b:
                    14:d3:6d:2c:86:ff:74:0e:55:78:1f:b1:cb:71:2d:
                    5c:ca:ed:ba:72:d7:80:3a:df:66:77:e7:f4:b6:28:
                    c4:15:3b:aa:1f:87:6b:f8:9f:94:ae:f1:b6:98:35:
                    45:12:06:34:c2:c7:bb:45:13:35:e3:ff:82:12:d8:
                    73:18:ce:b6:9c:29:49:d4:e2:b8:83:d0:d7:b1:33:
                    12:df:07:5d:fd:22:d4:39:5b:f4:c1:3f:f1:7e:d5:
                    a7:43:5b:b8:e6:0e:87:a6:42:6c:94:2c:e5:3f:a2:
                    a9:f2:65:49:f0:21:78:4b:32:80:e6:99:2f:39:51:
                    39:20:41:b8:2b:6c:a0:91:a8:4a:92:ea:db:49:de:
                    54:78:8b:2a:ce:fb:18:b1:b1:a0:4f:59:7f:4f:28:
                    ec:de:59:46:bf:af:70:0b:cd:38:73:44:f3:39:53:
                    e1:70:10:97:17:d6:07:4f:e3:87:89:27:07:be:b9:
                    fd:76:4d:55:bc:d1:d2:c3:bf:5d:b8:e1:09:a0:4c:
                    df:1b:1a:67:8f:c3:c6:5f:f0:5f:4c:ba:b3:5e:34:
                    70:21:86:ef:95:df:e0:50:0c:39:ce:95:4b:50:4a:
                    0a:fe:fc:1d:eb:00:d2:77:a8:6f:41:42:f4:a2:78:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:24:B4:56:FC:D9:9C:A9:C3:71:79:1D:D2:84:DC:9D:7B:9B:C7
            X509v3 Authority Key Identifier:
                keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:07:5c:20:29:1f:44:98:5d:0d:b1:67:58:af:78:d7:48:3f:
         10:68:e0:36:12:45:85:89:80:3e:eb:e1:61:e0:1b:4d:61:ae:
         0c:01:0d:9a:96:bd:de:b2:bd:a5:93:6c:0b:f2:67:45:0f:1a:
         6c:f5:d6:a0:2c:af:68:8e:a6:cf:0b:f9:43:7e:eb:b4:1e:f3:
         57:9f:b5:32:c4:29:88:54:bc:1a:e3:a1:88:30:93:04:b8:6d:
         15:2c:ad:20:2c:a0:68:a5:f7:ba:0d:7d:53:86:85:fc:17:b6:
         ab:10:d5:c0:88:65:0a:c7:ff:6d:86:4b:40:10:20:e5:9a:4e:
         24:63:24:50:48:42:bd:96:de:27:95:f1:b5:a9:58:b7:31:5e:
         83:6d:8f:8c:f5:7b:fc:05:2d:35:6b:b0:84:5d:52:60:9e:a1:
         06:95:a7:16:0b:49:25:c5:fe:a9:30:e3:d5:36:dc:da:9a:66:
         66:f7:fc:e9:22:e2:ac:cf:b7:0e:7c:72:58:25:d2:b7:c0:26:
         ad:9d:36:34:65:0b:fc:74:b5:97:f4:ac:b2:5f:e6:28:bd:02:
         99:db:f5:3e:70:3c:15:9a:fa:5b:9a:15:06:a7:b1:f8:63:4f:
         1a:38:5d:d7:b9:4d:e1:4e:a4:dd:89:f1:70:24:14:1d:6f:13:
         2f:05:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:10:51 2026 by rpki-client