This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File:                     Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier:          Ix27QXHEqNfbgCxEnZ4RTmd0/fVCX9udwse3SPC5gNI=
Subject key identifier:   8E:F1:52:B7:DC:D9:F1:3A:87:AD:32:C0:79:14:76:DD:89:F6:A6:5B
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer:       /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial:       019A76DE1C9E3240467A8030C48636A836E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number:          0DA1
Signing time:             Wed 12 Nov 2025 07:00:58 +0000
Manifest this update:     Wed 12 Nov 2025 07:00:58 +0000
Manifest next update:     Thu 13 Nov 2025 07:00:58 +0000
Files and hashes:         1: 0kA2_ewOMVMAEYLVnBFhn9DnxNQ.roa (hash: VLhUVQVXXK/9mGvNIufCMC2i+nvhDBmLPb4hciIr/qU=)
                          2: 6fpTUBj4_bNH_UUZdkvOYnGb8NE.roa (hash: PlXgEgBQghszn8El/TxK0a2TFgaJeGliB29YkDf0Zsc=)
                          3: 7MYms7RIOoUO2o285IfZbjWVePI.roa (hash: yO2Sj8XRd0zshIE7s3ZciOp7WY+fc2AkNg79N4X3TaQ=)
                          4: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: hG4mted0YCpEqsa8GPKOOVgq9twMDit8pImHuldRmlI=)
                          5: Ztetkk4bdJv5vcyHrtmKUOqZ7DY.roa (hash: UiZIzCeT9foT0pPnNWPu5tyLanoiyyPQHnGD82mCoIc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:76:de:1c:9e:32:40:46:7a:80:30:c4:86:36:a8:36:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
        Validity
            Not Before: Nov 12 07:00:58 2025 GMT
            Not After : Nov 13 07:00:58 2025 GMT
        Subject: CN=8ef152b7dcd9f13a87ad32c0791476dd89f6a65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:24:5d:c1:8d:bd:3f:26:8c:66:b1:f4:99:
                    d0:77:42:13:22:bb:4c:55:66:9c:e7:8b:ab:e1:1e:
                    c3:82:6e:a6:82:a7:9d:8a:7a:8b:a0:19:36:2e:09:
                    d1:14:36:dd:53:aa:93:78:1e:a6:67:a3:16:9d:85:
                    3a:65:f0:d6:1c:e9:a4:11:35:b8:d5:03:e6:4a:17:
                    07:7a:e5:29:1e:73:07:42:93:3b:ad:39:60:eb:b3:
                    0f:e0:dd:cc:19:a9:43:47:50:a9:b8:45:e4:06:88:
                    d0:5e:92:70:66:35:d2:b8:6c:85:5f:d3:d5:b7:a7:
                    96:ba:46:98:8a:24:5c:ef:d0:36:21:8d:2e:29:ec:
                    68:84:f0:e6:38:de:40:cc:96:d6:df:be:d5:57:51:
                    28:bb:2a:b6:a2:19:b1:71:64:ed:4b:18:6c:da:e9:
                    f1:2f:f5:08:86:d1:5d:51:89:9b:78:0d:c4:b0:61:
                    20:f7:a7:38:97:43:1e:cf:3b:e8:4c:d0:69:d7:b3:
                    42:8e:56:7b:cd:5a:3e:78:f8:dc:c5:b2:96:1e:52:
                    31:d7:8e:cf:31:5a:85:1b:fb:cd:de:c0:07:37:70:
                    5e:e0:5e:e8:9e:b6:f3:16:e5:e0:77:b2:72:69:ce:
                    41:c9:de:48:40:f9:db:cd:1c:f0:e5:84:46:08:d2:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F1:52:B7:DC:D9:F1:3A:87:AD:32:C0:79:14:76:DD:89:F6:A6:5B
            X509v3 Authority Key Identifier:
                keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:87:ff:d5:f3:64:7e:0d:d1:15:09:e9:c6:1f:ed:05:99:
         74:6e:29:99:27:8b:91:b7:76:b1:af:54:cc:42:3a:0a:37:27:
         d9:74:7b:3a:45:fa:2a:95:45:a6:d8:ec:3e:a7:77:8c:e8:fa:
         68:1d:ef:86:1e:e9:4b:41:8a:02:57:3b:ea:79:bf:12:96:8c:
         a3:aa:2b:26:35:0b:02:32:ac:f7:c9:7a:e7:62:5d:9b:63:da:
         c1:74:a7:3f:d5:af:fc:f0:15:ba:3e:41:32:29:94:c5:64:dd:
         fa:5d:b3:18:5b:d1:7e:df:e3:38:84:7f:50:41:26:48:7c:ec:
         da:d8:f4:aa:c4:64:3c:d7:8e:fa:69:47:72:52:1e:4b:41:0a:
         b0:c4:c5:dc:06:82:e4:d2:d9:04:5f:e5:90:99:90:ba:38:32:
         14:06:50:93:1c:61:a4:22:cd:b5:de:d3:e6:b0:57:26:c6:a6:
         e6:34:78:d7:c1:83:8e:bc:e1:63:da:95:9d:c1:18:94:69:42:
         02:96:b5:dd:ec:da:cd:31:2f:61:1f:3f:3d:85:17:81:18:dd:
         1d:1d:9e:54:d6:52:2c:ea:be:d2:e6:c2:9c:82:8a:6b:56:a7:
         7c:cf:28:d7:c2:d4:ae:c5:4e:5d:17:fc:91:4c:3b:13:ce:1e:
         6b:69:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----