This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
File:                     jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json)
Hash identifier:          Ytwvz+AoMk6Fu0k9hxXhrxqiCq066tQoSUFWJ006XTw=
Subject key identifier:   2D:E8:1B:70:3B:8E:02:5D:1E:30:CC:97:0F:10:58:A8:43:32:F1:70
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Certificate issuer:       /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial:       019B2A77CDA3428470D101B5D63974E9C1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
Manifest number:          11A7
Signing time:             Wed 17 Dec 2025 04:00:53 +0000
Manifest this update:     Wed 17 Dec 2025 04:00:53 +0000
Manifest next update:     Thu 18 Dec 2025 04:00:53 +0000
Files and hashes:         1: 04p8KrQzLE3_55k5WI6hT9mZY7I.roa (hash: fLB1vC6DtYgNR3pd4HHiFVc8DTvk2K0a96GUua+8IXM=)
                          2: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=)
                          3: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: d2T4efjMMfQCXFsb1eqo0CvAGAt7wFmhyHgkmyZwf7E=)
                          4: tfjD1TzFroCRpYCznfdPEgCSvX8.roa (hash: u220kJVCWbv+NR8D6urQHZ0h8UgyTPW+PkohUPZwTYQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:77:cd:a3:42:84:70:d1:01:b5:d6:39:74:e9:c1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
        Validity
            Not Before: Dec 17 04:00:53 2025 GMT
            Not After : Dec 18 04:00:53 2025 GMT
        Subject: CN=2de81b703b8e025d1e30cc970f1058a84332f170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:a9:7f:3e:27:40:cf:04:72:8f:29:2c:eb:
                    2b:a5:31:83:3f:b8:15:96:ba:ed:78:c6:14:7a:41:
                    ab:c4:76:23:46:9a:59:26:d1:6d:a2:53:d6:20:e3:
                    01:4e:b0:27:47:93:9d:d3:19:de:06:77:53:f8:7c:
                    46:7c:f8:7e:d7:84:1a:61:42:51:fb:70:6f:06:03:
                    a2:3c:10:c2:cc:ae:70:20:30:82:f5:f9:a1:cb:ca:
                    de:08:4b:cf:ba:24:a6:65:ab:76:80:99:15:62:47:
                    46:93:67:59:6b:5b:b7:20:be:44:9a:9e:bb:45:3d:
                    10:bc:c9:c4:0e:a6:84:03:8f:b3:25:f2:77:46:f6:
                    f1:67:50:8c:f6:f1:40:d1:28:03:07:ca:bf:f2:42:
                    18:88:ed:3a:87:2c:eb:58:b9:1e:5c:b1:a7:a4:ce:
                    8c:4e:53:40:a5:fc:7b:6e:e4:71:95:ee:95:7c:6d:
                    cf:b5:da:25:59:25:c3:9c:1b:54:a6:94:68:76:4f:
                    51:98:48:1f:89:93:21:89:76:1b:5f:10:35:c0:20:
                    a2:93:4e:c3:09:c7:3b:19:50:1b:8f:f8:ad:22:bb:
                    ad:50:5c:d0:ab:8a:30:3b:75:59:b5:42:9e:7b:5a:
                    73:1e:88:20:e8:81:1e:13:33:40:5c:5b:7c:fa:f3:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E8:1B:70:3B:8E:02:5D:1E:30:CC:97:0F:10:58:A8:43:32:F1:70
            X509v3 Authority Key Identifier:
                keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:78:0d:ff:8e:73:fd:17:12:c1:78:3d:5a:1e:59:89:00:2d:
         a6:b5:fd:05:5e:44:d4:34:39:f5:9f:b0:b2:de:79:00:30:f3:
         07:87:dc:d5:b1:80:c7:22:83:af:ee:36:c6:01:72:c3:dc:2d:
         f4:c5:cd:eb:6c:68:a0:80:78:62:97:bf:b0:a5:41:0d:5a:c7:
         dd:57:bf:7d:8e:ee:80:88:af:69:43:c4:e9:bf:6a:57:d8:37:
         ee:29:63:6f:6b:14:03:48:91:39:c3:53:11:1b:f1:47:15:3e:
         cd:4c:85:4e:79:2c:6a:dc:57:c1:73:d9:1d:bf:01:c2:8a:9d:
         2a:88:0c:56:c9:11:bf:72:12:96:af:e1:65:2e:6b:fd:23:24:
         52:77:a3:06:53:49:73:fe:74:bc:ef:3f:32:7f:cd:f5:b3:29:
         14:62:4f:7f:32:68:6b:de:4d:53:cd:b6:07:f9:ec:94:75:5d:
         80:85:af:54:de:18:71:55:6f:d9:33:0e:2a:e0:e1:5e:1b:85:
         90:19:50:79:5d:96:0e:95:ed:23:a1:85:60:72:c9:00:08:e4:
         01:bf:50:4d:a5:76:36:f3:6e:32:a3:43:88:18:f1:34:01:ef:
         91:5d:39:9c:0e:ab:01:fd:1e:db:a1:1d:fe:4d:9b:bb:e5:2c:
         39:b9:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----