This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File:                     zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier:          h3yj0QkmVq4gdrdSMa+tTSgg5USKC7J7rC2/U2eSgkY=
Subject key identifier:   CB:00:BC:76:B5:AE:44:C7:19:71:AF:2B:A6:93:B6:DF:5F:41:9B:8E
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer:       /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial:       019B3532B026A7E556A272EBB8A9143043DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number:          1499
Signing time:             Fri 19 Dec 2025 06:01:12 +0000
Manifest this update:     Fri 19 Dec 2025 06:01:12 +0000
Manifest next update:     Sat 20 Dec 2025 06:01:12 +0000
Files and hashes:         1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
                          2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: XJqHFlyar35nS/KkPaTr2bYPSseeqgezUeFPfMYCgmA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:b0:26:a7:e5:56:a2:72:eb:b8:a9:14:30:43:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
        Validity
            Not Before: Dec 19 06:01:12 2025 GMT
            Not After : Dec 20 06:01:12 2025 GMT
        Subject: CN=cb00bc76b5ae44c71971af2ba693b6df5f419b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:30:ff:8b:f6:e1:a3:b3:a4:82:f8:0b:66:
                    0c:e9:1c:d0:62:e7:d4:a7:f4:ca:ff:52:b9:e2:f3:
                    79:c9:dc:12:7f:b3:95:0f:95:2c:98:6a:fe:ee:db:
                    8b:2c:31:5b:02:8f:86:e7:d7:bd:97:f2:ce:0e:59:
                    0f:a4:67:2e:05:6b:35:a8:af:41:35:41:5c:68:ae:
                    69:2a:a6:81:fe:b8:60:9f:41:fa:b0:c2:e4:39:f3:
                    ff:26:c1:ac:f7:e9:fd:52:ab:31:07:93:10:b5:5d:
                    21:b7:7d:41:2c:4f:09:28:b2:30:a2:4a:b9:7f:b8:
                    cd:75:1d:46:5c:90:2c:00:a5:09:29:aa:be:86:1c:
                    46:af:54:01:2f:80:56:3d:53:4d:34:f3:50:e4:84:
                    49:5f:de:5d:31:92:db:6b:fb:c5:40:8f:2d:3f:43:
                    21:d7:af:b6:59:9f:27:ee:1a:3c:c9:e6:51:76:83:
                    58:48:b6:e0:be:32:dd:95:e6:3a:14:8e:ee:74:44:
                    47:f2:33:c7:ef:6e:97:73:7d:8e:a3:8f:ca:b6:f6:
                    a0:36:f6:35:ae:f5:70:5e:89:f9:09:d3:e8:22:fc:
                    ca:04:c2:d1:eb:f3:81:4f:12:ed:ef:cf:9e:b1:cf:
                    71:c5:4d:42:da:50:43:32:65:56:7c:dd:7e:5f:2c:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:BC:76:B5:AE:44:C7:19:71:AF:2B:A6:93:B6:DF:5F:41:9B:8E
            X509v3 Authority Key Identifier:
                keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ca:d5:72:4f:14:8e:89:e9:b4:51:9f:0a:48:85:b0:ba:26:
         aa:fa:9d:ba:00:4b:10:30:3b:ae:ac:7a:d0:95:5a:87:ec:f9:
         63:04:6e:8b:64:9a:70:59:42:e6:02:9a:77:b2:30:d5:b6:0c:
         c9:f1:52:7c:ff:87:cc:1e:b0:eb:f0:93:ff:ec:50:ff:77:25:
         10:1c:56:25:7e:77:78:94:d5:94:ad:0a:c9:6d:c3:8f:05:cf:
         3f:90:f4:0b:b9:cc:21:31:bc:5b:4c:fc:93:75:53:ed:e8:3e:
         0a:16:8a:47:9b:ea:31:14:0a:cc:e7:f4:1f:cf:b7:0f:fb:58:
         12:93:e6:a9:0d:d4:2f:c2:f5:53:20:be:fb:be:ec:62:17:d8:
         f8:09:5f:6b:ee:aa:b0:ae:b0:f0:ad:78:42:52:02:4b:ed:5b:
         e8:a8:f1:57:e3:dd:8e:b9:e2:cc:ec:42:54:a6:15:bd:56:91:
         b9:1a:22:d8:16:62:07:03:a4:76:72:a3:f8:bc:c5:1d:79:32:
         0a:81:e6:36:d3:19:c5:0c:10:10:6a:4e:5b:05:c0:0b:45:49:
         0e:53:f5:64:06:ae:17:da:95:5d:81:c9:9d:2b:63:ca:b2:a7:
         71:97:11:da:51:31:62:ba:6b:9b:be:15:dd:cf:a1:71:d6:d0:
         55:af:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----