This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File:                     nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier:          KTR1BuwVxXikWqAPjZSb1GRr0NavtBNSrecvB8fz2xA=
Subject key identifier:   7C:72:6C:DB:27:3E:DF:FA:68:8A:C3:0E:0A:80:41:91:29:CF:D9:14
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer:       /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial:       019B6E0F85049C83633B0F5DB58E19AA062C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number:          075D
Signing time:             Tue 30 Dec 2025 07:01:09 +0000
Manifest this update:     Tue 30 Dec 2025 07:01:09 +0000
Manifest next update:     Wed 31 Dec 2025 07:01:09 +0000
Files and hashes:         1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: Qb24I6EWRKOgDvKZjCgRPULFkBl60Qyh43W0guq91PQ=)
                          2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6e:0f:85:04:9c:83:63:3b:0f:5d:b5:8e:19:aa:06:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
        Validity
            Not Before: Dec 30 07:01:09 2025 GMT
            Not After : Dec 31 07:01:09 2025 GMT
        Subject: CN=7c726cdb273edffa688ac30e0a80419129cfd914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:83:1c:be:2a:f3:af:10:a9:b0:70:dd:aa:
                    b8:e6:42:e4:33:b7:4f:d3:49:7d:09:bb:69:3c:fc:
                    45:e2:a7:9f:17:6d:5a:8f:f1:11:bb:82:13:a6:0d:
                    d4:2c:c6:93:01:42:54:1c:07:fc:1c:08:43:60:02:
                    91:ae:b3:5e:0c:ec:4c:71:91:62:1d:f8:ba:3c:4b:
                    33:9c:67:6d:ad:68:e8:1e:af:ff:88:1d:62:ec:38:
                    98:8e:fb:a2:4a:1f:cb:cb:97:e9:33:09:d5:17:af:
                    8f:7b:31:01:ff:49:33:f3:3f:35:7f:0a:8a:79:78:
                    b1:d2:04:20:0b:0f:e3:fc:e5:cb:cc:4a:d0:7b:b5:
                    23:14:5f:66:50:f1:55:c7:e5:4a:c8:6f:d4:64:0a:
                    78:05:10:e4:75:7e:fe:38:c8:c0:d3:30:1e:d4:0b:
                    05:bb:e5:c4:13:33:9a:ec:5b:ba:89:6e:99:2f:59:
                    6d:bf:54:e3:84:da:cf:2a:30:4e:e7:fb:e5:8f:dd:
                    2e:8a:08:7e:30:7b:21:3b:a2:d1:42:91:23:d4:82:
                    ce:c8:4b:90:af:60:59:cb:84:23:18:91:ed:f8:3d:
                    94:ec:51:fb:cf:1a:df:1b:98:11:bf:78:0a:ae:84:
                    9f:84:7e:b5:81:34:17:51:49:fb:03:5a:2c:e8:80:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:6C:DB:27:3E:DF:FA:68:8A:C3:0E:0A:80:41:91:29:CF:D9:14
            X509v3 Authority Key Identifier:
                keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:63:eb:d6:c3:94:d9:32:ce:79:a0:98:4e:d5:86:12:cf:
         46:44:17:4f:cb:f1:3b:6e:cd:d1:7a:e0:e3:98:df:7c:3c:28:
         89:56:13:bc:1b:49:8c:2b:22:12:66:3e:c2:75:33:21:d3:bf:
         18:87:72:3d:59:a3:ce:57:66:38:97:9e:61:d8:0e:d2:01:01:
         66:da:79:62:09:56:04:84:c2:3b:95:ca:90:b2:a7:d0:68:49:
         d4:81:19:47:cb:9a:09:4b:c6:f2:f7:1e:0d:62:b5:f9:b4:75:
         72:ee:ca:e6:52:84:6d:8f:54:93:1c:e7:07:45:05:9f:9c:14:
         d8:a0:bf:91:df:09:87:08:30:e2:f6:2b:f3:b4:25:69:27:f3:
         ea:1f:f2:87:33:35:ca:9b:03:1b:80:0a:85:af:a0:18:3f:82:
         6e:41:db:e9:45:db:c9:1f:96:ee:83:92:5c:7d:9e:b5:f0:a4:
         19:99:2f:57:2b:4e:c9:70:a3:f2:a8:83:58:06:9d:0c:79:c7:
         9a:a7:51:1d:00:d7:ca:37:d3:56:f3:64:29:69:5b:2d:0d:cd:
         9c:4c:d6:a1:0a:c7:89:50:fa:98:13:ca:2b:eb:d7:b7:31:28:
         4d:a8:aa:f0:e6:70:ad:00:bc:fc:70:92:21:1a:cc:d0:66:63:
         89:b0:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:22:32 2025 by rpki-client