This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File:                     t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier:          AoDlqhvzIskixAjPWWOkn7Qz3g0coJPxRi60uu2AaVk=
Subject key identifier:   EA:84:21:CD:3C:2E:E8:F6:2A:FE:5D:DF:9B:E5:4F:67:06:BA:CF:85
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer:       /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial:       019A970DB672EEEC55E8A541F6FA90AF669A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number:          0B84
Signing time:             Tue 18 Nov 2025 13:00:49 +0000
Manifest this update:     Tue 18 Nov 2025 13:00:49 +0000
Manifest next update:     Wed 19 Nov 2025 13:00:49 +0000
Files and hashes:         1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: j4vOR4s4PH4jpvs+P6UPJ39/5dC5ZRwUsjtyA4CLVDo=)
                          2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:97:0d:b6:72:ee:ec:55:e8:a5:41:f6:fa:90:af:66:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
        Validity
            Not Before: Nov 18 13:00:49 2025 GMT
            Not After : Nov 19 13:00:49 2025 GMT
        Subject: CN=ea8421cd3c2ee8f62afe5ddf9be54f6706bacf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:56:d2:62:eb:55:9e:c8:18:cb:09:fb:47:
                    75:23:bf:51:c9:c7:dc:27:2f:c6:0e:8d:cd:d5:1e:
                    1e:1c:2b:83:93:7a:80:0e:77:16:c3:99:66:9a:9b:
                    d1:81:89:cb:69:1e:1a:0d:ee:f5:cb:a3:cb:64:ab:
                    80:b2:ca:54:fe:38:62:49:56:f8:3d:e6:f7:4b:b1:
                    4f:4a:a4:a4:f8:b3:b5:e5:e5:86:61:15:9c:3f:fd:
                    ec:67:21:56:f9:bd:95:c2:11:5a:d6:e3:07:31:d9:
                    32:9a:6a:2f:05:5c:20:da:06:ab:33:b1:b0:7c:91:
                    a4:76:e3:00:8b:cf:ef:a8:13:51:f0:09:01:da:a3:
                    c9:22:61:0e:c1:b9:9e:10:35:50:36:ba:bd:d2:c8:
                    1d:58:e9:e3:8f:04:53:7a:93:31:e0:f8:44:58:f2:
                    06:96:16:7b:e8:cc:f0:d2:c0:45:e3:29:bd:56:f7:
                    47:4a:18:22:28:41:1d:6f:0d:bc:d4:32:23:2c:82:
                    c7:2f:6f:76:74:6c:5e:24:44:36:b0:ce:67:54:f9:
                    e2:94:6c:3c:91:62:5a:6d:4c:a0:b0:27:d6:a9:bc:
                    1d:e9:93:a2:77:d6:d5:82:e8:f7:9c:df:2f:83:9c:
                    a7:d4:eb:15:c0:33:0e:7c:b5:bf:fc:29:9f:61:60:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:84:21:CD:3C:2E:E8:F6:2A:FE:5D:DF:9B:E5:4F:67:06:BA:CF:85
            X509v3 Authority Key Identifier:
                keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:64:93:41:b5:4d:22:8f:d7:43:2a:02:2e:00:96:2d:98:
         b3:71:9f:eb:a3:ee:d6:3b:65:43:3a:f4:66:1b:b9:02:88:96:
         4b:3c:db:e4:aa:d0:a8:94:ae:c9:0d:87:6f:a4:a0:fe:21:b3:
         bb:0c:98:1a:7f:88:b8:04:a9:17:3f:8e:85:25:dc:5e:eb:f9:
         c0:4f:db:cb:33:84:71:59:a2:20:f9:8d:f6:30:c8:83:7c:b9:
         58:5c:2b:de:82:b9:1e:48:0a:8e:98:81:27:24:19:e3:33:14:
         9f:81:ae:ee:ba:18:e4:62:ab:c5:3e:b9:95:e1:ae:f3:ff:51:
         92:8f:7b:6d:35:33:81:80:f8:28:4c:d9:82:59:a8:37:bf:a1:
         5f:0c:8e:f6:fb:c9:37:8b:e0:11:3c:37:2c:14:52:ce:a8:41:
         39:34:02:7d:9b:31:be:9a:68:f2:02:69:bc:51:fe:75:00:7b:
         c3:3f:68:c5:31:e9:53:98:0d:e6:52:d9:aa:b4:44:72:87:c2:
         52:4c:71:93:56:7d:e4:68:49:24:cc:ec:3e:5e:04:3d:08:0d:
         7e:22:ed:76:c5:9b:5c:b5:93:ea:12:96:1a:ac:3b:34:8f:83:
         09:86:90:ce:a6:6b:db:db:b0:59:1a:6f:74:48:50:9d:56:b2:
         1a:d9:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----