This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File:                     ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier:          hgd8rOsYHNbdV1/eDHtzIz3Vyfc+6dqigbAyLNhWRbs=
Subject key identifier:   D7:C7:04:2D:CE:B0:9B:D6:9E:62:93:87:8A:6C:66:05:B2:C0:B6:CE
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer:       /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial:       019B49273B6F646A82BC7E914643855040FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number:          178F
Signing time:             Tue 23 Dec 2025 03:01:06 +0000
Manifest this update:     Tue 23 Dec 2025 03:01:06 +0000
Manifest next update:     Wed 24 Dec 2025 03:01:06 +0000
Files and hashes:         1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
                          2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
                          3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
                          4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: KOdMhmwilkSLbRrbKTFQe3f1L4DiWZSKpYKyFMTkn2o=)
                          5: tqmucHZ-pG1XVssJsj5NHaCO3QA.roa (hash: AsOtQxy2X2EvyvLCvGZtq2rARAmeWCtTobK54XK2EB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:49:27:3b:6f:64:6a:82:bc:7e:91:46:43:85:50:40:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
        Validity
            Not Before: Dec 23 03:01:06 2025 GMT
            Not After : Dec 24 03:01:06 2025 GMT
        Subject: CN=d7c7042dceb09bd69e6293878a6c6605b2c0b6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:28:a0:a6:0f:ea:90:6a:96:5b:f5:df:8b:
                    ac:e5:46:eb:52:e3:45:f7:22:3f:36:03:76:44:01:
                    ed:b7:f2:b4:d6:32:3a:1e:9b:bf:e7:8e:75:33:c8:
                    4d:ec:a3:b5:55:d6:72:bb:9a:8a:dc:08:24:bf:8c:
                    b1:fb:8d:f2:81:b9:70:01:17:cd:5a:29:72:51:90:
                    1b:c7:64:f5:ef:77:a0:ea:50:ae:87:a7:4e:77:92:
                    57:5d:e4:e8:d3:a0:fc:a7:9e:ef:bf:2b:92:24:bb:
                    19:0b:c9:ce:bc:e0:23:e0:09:d8:5d:e1:e3:81:b8:
                    79:d2:b9:12:2a:d9:0c:77:1b:f6:80:97:be:33:21:
                    83:42:e0:0c:b4:5f:ae:25:2d:a6:2d:2e:1d:bc:f0:
                    f6:64:8c:53:9d:5a:9b:e3:c2:eb:54:a7:75:30:05:
                    84:d9:9c:3e:10:22:fd:59:3d:bb:47:45:b9:27:0e:
                    84:2f:32:b4:68:43:ea:58:81:f4:28:18:24:77:14:
                    35:6b:85:9c:9c:76:6b:bf:d6:ca:12:be:d0:d5:34:
                    00:26:a7:a6:8b:43:26:98:3d:0a:a3:a0:ad:06:5d:
                    70:b0:23:8f:36:0a:70:b0:00:27:a3:e3:f2:7f:67:
                    15:0e:e9:18:f3:5d:6f:54:f6:6d:e1:dc:6e:f8:1d:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C7:04:2D:CE:B0:9B:D6:9E:62:93:87:8A:6C:66:05:B2:C0:B6:CE
            X509v3 Authority Key Identifier:
                keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:ae:c8:7d:5a:3c:50:61:0e:c1:cb:ec:ea:f6:88:4c:d9:
         93:32:d9:d8:e8:6f:75:c3:d3:3c:91:8e:23:b6:4f:c1:17:43:
         44:2a:1e:59:41:8c:18:0f:25:69:60:bb:5f:c2:c6:59:b3:41:
         6c:24:ac:a4:b9:88:69:8d:2e:b1:c3:86:70:85:33:24:47:4f:
         bc:cf:bd:44:8d:87:0a:30:99:b5:17:ad:e4:79:22:1c:4e:53:
         1c:71:09:dd:a4:18:93:38:b2:d2:03:b7:84:c0:46:8c:69:44:
         ef:05:6f:e5:26:03:c2:1f:4a:a6:2e:d8:a0:83:35:a5:4d:28:
         45:b5:89:51:58:b6:e6:60:d0:3d:bf:54:2a:c7:b9:b4:8d:65:
         89:a4:32:e4:d5:a4:97:1c:e6:2d:2c:95:a5:ad:69:b0:4b:5e:
         0a:4b:28:b0:af:e0:f0:dc:46:ef:cb:04:88:9b:a0:23:08:b3:
         d1:23:62:c9:af:b4:49:9e:b4:9a:ab:8d:eb:8c:30:fc:5b:bb:
         4d:d0:81:af:50:07:3c:ae:63:72:c3:2a:5b:5e:4c:11:92:66:
         3e:4a:df:09:9f:35:31:8d:56:29:11:6f:2e:90:b8:b4:4d:35:
         be:4c:fe:92:f6:d9:7e:87:d0:ad:83:f8:2d:64:ee:2a:7b:97:
         0a:f9:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----