This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File:                     XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier:          uOWVlAdKlrPwbFKhpwIEtOnz3Kwb98y0N4wKKCoQupo=
Subject key identifier:   43:61:17:98:99:90:45:87:74:7E:A4:84:4D:F9:37:E3:58:7F:CE:78
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       019B35A023BF4DA790B21F2CA6ABD80329DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number:          0F01
Signing time:             Fri 19 Dec 2025 08:00:45 +0000
Manifest this update:     Fri 19 Dec 2025 08:00:45 +0000
Manifest next update:     Sat 20 Dec 2025 08:00:45 +0000
Files and hashes:         1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
                          2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
                          3: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (hash: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=)
                          4: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
                          5: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: P+321OzS0m4Ik3KS+roOMOgaWTPcGZ/o9+B+oEHor8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:23:bf:4d:a7:90:b2:1f:2c:a6:ab:d8:03:29:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Dec 19 08:00:45 2025 GMT
            Not After : Dec 20 08:00:45 2025 GMT
        Subject: CN=4361179899904587747ea4844df937e3587fce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:6f:66:40:67:03:63:45:3e:1a:64:aa:d0:
                    31:29:09:74:8b:3f:ba:5f:e9:ae:8d:70:13:87:33:
                    21:e6:cd:40:8f:fe:3c:3b:a8:3b:d5:0c:c0:cb:6c:
                    9c:d6:9a:71:40:f5:40:e8:9c:f5:e0:21:cd:a0:3a:
                    6d:29:31:9e:9a:68:b4:21:ff:47:d0:84:00:1c:4e:
                    86:92:a8:cb:f4:ac:a0:48:7e:45:5c:fe:ed:83:f3:
                    b0:26:ba:8c:da:00:cc:a7:7e:75:1b:4a:d3:ac:99:
                    b7:01:75:c0:1b:e2:a5:86:31:4c:70:df:f0:c7:06:
                    ee:9e:9f:57:2d:c7:b6:19:39:ef:60:7b:79:7e:c3:
                    a0:47:34:36:29:0e:87:2a:ae:d8:17:6e:34:f1:a1:
                    cc:84:73:be:4b:40:d2:26:95:8c:25:a8:68:70:31:
                    60:21:69:e0:5e:e6:21:a7:8f:1e:ee:fa:e4:18:e3:
                    0e:c1:be:00:41:ff:f3:48:a2:ba:97:d7:5b:b5:43:
                    1c:44:20:71:39:0f:e4:a0:cf:8e:33:30:61:7d:79:
                    03:2b:33:a6:ad:8e:9c:80:6e:09:f6:dd:cd:86:09:
                    25:e0:07:ac:7e:63:f0:ac:c1:f7:92:94:86:be:3c:
                    f5:3f:a8:39:14:41:d3:cd:43:07:ee:48:3c:12:a8:
                    91:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:17:98:99:90:45:87:74:7E:A4:84:4D:F9:37:E3:58:7F:CE:78
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:82:61:85:2c:fa:3e:47:b8:b2:cb:22:53:2f:94:22:4f:d3:
         f8:68:a2:54:80:75:0c:08:64:3c:c8:34:ec:ad:22:6b:98:12:
         b2:ea:74:1a:f7:d0:3d:6b:dc:65:ec:8f:f1:28:39:74:93:8a:
         51:5e:76:b7:79:65:5c:f8:a3:87:d8:83:81:9b:ca:ba:24:33:
         e9:8d:8a:17:00:6b:93:6d:1b:e3:d8:20:4c:d7:f5:b6:1e:3e:
         8b:83:71:20:4c:2d:0e:06:f8:a2:7a:b9:dc:1f:25:d3:83:48:
         33:55:02:84:45:23:b2:43:41:ec:d6:57:a7:ce:52:d1:3c:76:
         8b:be:42:46:66:d4:d7:74:cd:41:31:af:4e:8e:f3:5e:65:0f:
         a7:58:31:18:ee:a1:5f:11:f6:70:21:ac:6c:cf:67:d4:45:18:
         81:7c:7a:05:da:45:fb:e3:e3:8d:5b:3d:c3:88:fc:cc:bc:e3:
         79:01:68:15:e9:1f:c0:ae:0a:45:3d:88:26:bb:76:92:08:23:
         9e:85:68:b1:29:0e:63:ba:91:7b:4e:b0:be:c5:ce:a8:ec:d6:
         8f:97:31:58:c4:0c:25:51:52:81:3a:43:ed:94:9e:ee:84:79:
         85:01:7c:55:52:a7:94:04:ad:14:af:b9:84:53:ed:9f:da:03:
         25:24:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----