This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
File:                     a8Szt0G7W1thchrTBscRR8TfK8E.mft (raw, json)
Hash identifier:          Z9Eovpmfcja3A1GgECXrb15VDl+Y29ShrBVTdgs8TVc=
Subject key identifier:   D9:F8:AE:78:3B:DF:78:FC:EE:78:2D:46:17:D9:EF:9B:F1:A6:89:51
Authority key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
Certificate issuer:       /CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Certificate serial:       019B05FD779DF44E97C6F2D8999F6D609FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
Manifest number:          176E
Signing time:             Wed 10 Dec 2025 02:00:55 +0000
Manifest this update:     Wed 10 Dec 2025 02:00:55 +0000
Manifest next update:     Thu 11 Dec 2025 02:00:55 +0000
Files and hashes:         1: a8Szt0G7W1thchrTBscRR8TfK8E.crl (hash: pLRRmy725egfh9+lst/rSUByrX34vItgJ9tF531ZfSs=)
                          2: lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa (hash: WUNdsd7uaJayOlmZESESWmlDWN7XrWQH54c9bPYnQ6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:05:fd:77:9d:f4:4e:97:c6:f2:d8:99:9f:6d:60:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
        Validity
            Not Before: Dec 10 02:00:55 2025 GMT
            Not After : Dec 11 02:00:55 2025 GMT
        Subject: CN=d9f8ae783bdf78fcee782d4617d9ef9bf1a68951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:31:55:45:44:75:87:d7:3f:81:13:da:40:
                    02:cc:73:ef:ce:aa:9d:58:7a:87:c3:eb:dc:44:95:
                    a5:e5:4f:81:7c:58:c1:e5:5d:bd:bc:9f:29:48:1f:
                    89:ae:bf:c0:f3:51:8d:35:b6:b5:6e:82:d7:fe:b4:
                    c6:89:11:f2:a8:ca:26:d1:2e:65:c7:0a:8d:33:4c:
                    52:1d:c3:5d:eb:58:5d:c1:b7:63:72:99:72:f5:19:
                    ab:76:56:33:30:20:29:8a:27:d1:76:4a:49:47:4e:
                    48:91:db:fe:f1:ff:df:37:16:06:c6:de:1b:2c:d8:
                    5b:fa:7f:a9:a4:4d:6e:a2:bc:33:e1:b0:11:e4:b0:
                    0a:74:28:d0:9c:19:ee:e9:81:b8:6f:65:65:b0:60:
                    9c:0b:ad:b1:7d:de:92:3b:6e:f0:9a:53:fd:c0:3e:
                    d5:74:76:8b:c8:02:9f:56:5a:4e:62:5e:9b:76:cf:
                    de:5f:b5:25:3d:38:ed:8e:10:72:03:6d:b1:5f:d7:
                    2d:4e:7e:54:aa:bb:85:6d:dd:37:4f:36:de:d5:38:
                    37:2b:0d:1c:13:d8:33:d5:f9:51:ec:31:c3:ef:d1:
                    d6:29:0c:40:70:70:10:fd:8a:89:7d:cd:4a:23:ce:
                    f9:6c:3e:8c:0f:3c:d3:d0:c7:d2:10:a6:55:b0:1c:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F8:AE:78:3B:DF:78:FC:EE:78:2D:46:17:D9:EF:9B:F1:A6:89:51
            X509v3 Authority Key Identifier:
                keyid:6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f1:f4:f3:9c:3b:77:50:c5:5a:69:38:54:7e:a3:05:30:90:
         c9:30:e0:a8:59:6b:80:87:99:e3:35:5c:10:b6:d8:87:a5:46:
         3b:1d:df:95:38:f1:87:a5:5a:16:ca:70:28:e7:bc:31:e6:1c:
         4d:ce:ab:db:ca:ac:c4:9a:1e:15:51:fb:63:10:fa:99:1b:8c:
         29:19:55:94:5b:62:aa:42:90:08:9b:3f:1e:52:3d:05:89:83:
         e9:f1:b9:35:4a:1a:64:3e:62:f0:20:d9:50:76:d7:9f:a3:76:
         5d:29:6f:64:3a:04:ac:ad:2a:7b:24:5c:d4:aa:43:20:2f:8c:
         a2:1c:ff:22:63:f6:1f:32:32:e9:e0:c4:17:07:40:4b:d2:b5:
         4c:5d:14:fa:67:a0:78:ee:0e:2a:ca:fc:d7:a8:9a:71:a0:60:
         01:04:ad:6f:a8:66:bf:af:a9:6a:9d:f5:fa:54:85:97:bd:ee:
         f0:be:3a:94:a7:12:dc:ac:dc:b2:ae:d0:94:f8:ae:25:89:c3:
         2f:d8:bf:e7:e5:8a:57:dd:02:a2:b8:46:e9:59:d2:78:b5:dc:
         d1:89:20:c2:7a:67:98:4f:4f:e0:2b:04:75:3b:9b:12:a6:cc:
         db:d9:4a:37:6d:01:36:5d:2f:b5:fe:3b:b7:74:ff:64:f0:b8:
         d2:8a:d1:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsF/Xed9E6XxvLYmZ9tYJ/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzRiM2I3NDFiYjViNWI2MTcyMWFkMzA2YzcxMTQ3YzRk
ZjJiYzEwHhcNMjUxMjEwMDIwMDU1WhcNMjUxMjExMDIwMDU1WjAzMTEwLwYDVQQD
EyhkOWY4YWU3ODNiZGY3OGZjZWU3ODJkNDYxN2Q5ZWY5YmYxYTY4OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU4xVUVEdYfXP4ET2kACzHPvzqqd
WHqHw+vcRJWl5U+BfFjB5V29vJ8pSB+Jrr/A81GNNba1boLX/rTGiRHyqMom0S5l
xwqNM0xSHcNd61hdwbdjcply9RmrdlYzMCApiifRdkpJR05Ikdv+8f/fNxYGxt4b
LNhb+n+ppE1uorwz4bAR5LAKdCjQnBnu6YG4b2VlsGCcC62xfd6SO27wmlP9wD7V
dHaLyAKfVlpOYl6bds/eX7UlPTjtjhByA22xX9ctTn5UqruFbd03Tzbe1Tg3Kw0c
E9gz1flR7DHD79HWKQxAcHAQ/YqJfc1KI875bD6MDzzT0MfSEKZVsBwyFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNn4rng733j87ngtRhfZ75vxpolRMB8GA1UdIwQY
MBaAFGvEs7dBu1tbYXIa0wbHEUfE3yvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZDE3YTEtYmM1Zi00OWNkLThhZWQt
Y2I3MjdiNGZjMzc5LzEvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mZDE3YTEtYmM1Zi00OWNkLThhZWQtY2I3MjdiNGZjMzc5
LzEvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPH085w7
d1DFWmk4VH6jBTCQyTDgqFlrgIeZ4zVcELbYh6VGOx3flTjxh6VaFspwKOe8MeYc
Tc6r28qsxJoeFVH7YxD6mRuMKRlVlFtiqkKQCJs/HlI9BYmD6fG5NUoaZD5i8CDZ
UHbXn6N2XSlvZDoErK0qeyRc1KpDIC+Mohz/ImP2HzIy6eDEFwdAS9K1TF0U+meg
eO4OKsr816iacaBgAQStb6hmv6+pap31+lSFl73u8L46lKcS3Kzcsq7QlPiuJYnD
L9i/5+WKV90CorhG6VnSeLXc0YkgwnpnmE9P4CsEdTubEqbM29lKN20BNl0vtf47
t3T/ZPC40orR1A==
-----END CERTIFICATE-----