This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft
File:                     f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft (raw, json)
Hash identifier:          FS5Lg833znIT8NuKjSKazAwJ3PhJ4UnVLmdl/T3b+ys=
Subject key identifier:   04:92:19:48:5E:47:63:82:BE:0A:F1:55:F5:90:F7:C0:94:0D:C4:C1
Authority key identifier: 7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
Certificate issuer:       /CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Certificate serial:       0195157F7CE3EBD0F30CF075423F634F5D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft
Manifest number:          0F
Signing time:             Mon 17 Feb 2025 20:00:31 +0000
Manifest this update:     Mon 17 Feb 2025 20:00:31 +0000
Manifest next update:     Tue 18 Feb 2025 20:00:31 +0000
Files and hashes:         1: 1-m_3RFpQCAw4jTTQyaAb-oV2N1E.roa (hash: kTAY786ulMAyPVbvgZlyetAoQ+YkeamwP2yDhB5mRkY=)
                          2: 5bzfih1KpfUYs_mBIo4Uqo2so7A.roa (hash: sKf8MeBydtsH+2/GrOGEj40FLyj41ErfCcWqRKTbzLA=)
                          3: f8iyhrnRvfvnFdbuUjN6MC8XcEI.crl (hash: TlHKgVBzNY0DgOiVwcm268io+Qd+zv9AENZJMTJ7shg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:15:7f:7c:e3:eb:d0:f3:0c:f0:75:42:3f:63:4f:5d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
        Validity
            Not Before: Feb 17 20:00:31 2025 GMT
            Not After : Feb 18 20:00:31 2025 GMT
        Subject: CN=049219485e476382be0af155f590f7c0940dc4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:69:3e:de:1a:02:af:d9:ed:cd:29:34:e6:
                    17:7d:3b:1f:27:22:28:b5:8a:4e:68:22:b3:7c:f1:
                    ca:43:2f:28:33:71:7f:10:bf:2f:f6:99:eb:1c:6d:
                    d0:fd:23:eb:8c:0f:56:b7:14:f3:db:0e:53:2b:bc:
                    0b:a7:a0:51:20:df:7e:0c:64:85:47:90:7d:82:74:
                    05:72:3f:60:9c:08:2a:81:13:ce:92:0e:5e:99:00:
                    19:c5:10:88:35:1d:dd:18:c8:31:4c:1b:75:7f:80:
                    5f:0a:11:17:fb:01:cd:52:2b:20:36:02:fe:62:2d:
                    5b:27:a9:0c:85:af:ec:4e:cc:a0:0d:02:52:26:53:
                    74:f6:94:bf:fd:7d:84:83:7a:78:63:5e:b2:d2:8b:
                    57:f1:92:cd:5b:23:2e:3b:fd:31:83:01:e2:b5:be:
                    b2:2b:4a:fa:44:79:99:03:22:15:be:66:eb:df:61:
                    c1:ef:41:af:c1:a7:9b:31:4b:d6:d2:a0:a3:5c:bd:
                    a0:15:fe:63:ff:bf:21:ab:3b:1a:fb:39:8a:ae:17:
                    5f:13:e0:9b:e1:1d:f1:0c:5c:a7:06:3b:52:54:8e:
                    01:a3:cf:e4:85:75:fa:e8:b1:b2:bd:9e:43:09:c1:
                    a4:18:eb:c0:a0:56:b5:2f:bd:c0:d9:52:d5:b5:b0:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:92:19:48:5E:47:63:82:BE:0A:F1:55:F5:90:F7:C0:94:0D:C4:C1
            X509v3 Authority Key Identifier:
                keyid:7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5d:55:0e:68:96:3d:07:56:ca:23:5e:22:fd:f2:e1:2e:cc:
         5f:a2:d1:f2:7c:da:02:9e:f3:62:8b:0c:13:a9:84:a2:00:d3:
         3c:d3:cb:50:21:16:d9:fa:1f:f6:0f:73:93:fd:e8:8b:74:c5:
         15:65:4f:02:55:9b:92:25:90:94:09:21:b1:23:0d:69:47:fb:
         97:e2:cc:b0:95:de:37:5f:a7:78:2d:d0:14:7e:e4:27:68:8e:
         fc:8c:4e:05:9b:04:a2:0f:3a:d8:10:c1:dd:84:14:2d:e4:fb:
         5b:41:71:9f:42:18:b0:dd:02:ee:48:28:cd:d0:bc:d8:53:10:
         2f:8e:96:85:2e:9a:94:a3:bb:57:c1:55:3d:be:19:65:2f:b3:
         78:7a:33:82:17:65:78:df:fb:18:8b:ad:18:c9:2f:36:23:1f:
         ce:a7:cf:5b:ef:8e:ac:24:b6:0e:f5:8f:54:f1:48:9d:a9:2f:
         7b:9a:51:e6:c6:ab:c9:72:56:80:4a:c7:30:71:4e:29:c1:34:
         6b:fe:74:6c:2f:ad:91:46:b8:13:05:70:bd:ef:f0:e6:e3:10:
         eb:5c:3e:b9:81:3b:de:2d:8c:0e:87:10:3a:00:76:e1:e8:70:
         82:6e:a9:d1:b1:2b:56:fe:74:c9:f4:a0:dc:de:5c:f3:42:9b:
         7d:8d:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:42:01 2025 by rpki-client