This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
File:                     c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json)
Hash identifier:          5ue6FV0cEp+17rDUDZLzhycQaXI9xEXiNPSxOFEx2lU=
Subject key identifier:   8D:1D:1E:07:E2:A5:D3:AD:42:AF:D9:34:B7:52:78:07:57:2E:C1:DF
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Certificate issuer:       /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial:       019B33E929D5EB7754AE3CFB85FCC238A532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
Manifest number:          178C
Signing time:             Fri 19 Dec 2025 00:01:17 +0000
Manifest this update:     Fri 19 Dec 2025 00:01:17 +0000
Manifest next update:     Sat 20 Dec 2025 00:01:17 +0000
Files and hashes:         1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=)
                          2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=)
                          3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=)
                          4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=)
                          5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: 4LDWT/LrFhnsUJzHwDKXZ1OnKIYGelwbuyWWkrQckz4=)
                          6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=)
                          7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=)
                          8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=)
                          9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=)
                          10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:e9:29:d5:eb:77:54:ae:3c:fb:85:fc:c2:38:a5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
        Validity
            Not Before: Dec 19 00:01:17 2025 GMT
            Not After : Dec 20 00:01:17 2025 GMT
        Subject: CN=8d1d1e07e2a5d3ad42afd934b7527807572ec1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:da:80:de:96:31:82:52:6c:da:17:10:3b:
                    f5:a1:4d:6f:a0:21:70:27:4a:8d:0c:5e:7b:a4:d9:
                    62:38:4e:5c:d0:8b:dc:d4:7e:2a:04:bb:18:ff:96:
                    3c:b4:d1:d9:e7:b2:97:de:af:f5:6f:c7:a4:f4:66:
                    56:50:c1:d4:5c:82:bc:b4:5b:c9:11:32:fd:13:a4:
                    c1:a7:fb:e2:28:e8:db:85:9b:9a:84:c3:57:f9:63:
                    27:96:08:46:16:5d:66:48:24:4c:a0:eb:d0:b9:1e:
                    60:e3:b1:0e:e7:bd:ef:e6:0d:b7:0e:a0:9f:f8:d2:
                    d9:e4:0e:fe:1d:7c:c9:bc:4c:ca:22:5b:13:2f:bf:
                    ff:19:ee:73:ec:b4:42:62:e7:39:83:ab:93:90:66:
                    23:de:74:ee:c4:30:ec:cb:ad:c4:52:43:09:68:eb:
                    b6:17:33:cd:9f:41:59:52:bd:83:2a:3e:e7:84:7c:
                    11:ab:ed:1b:c3:64:cd:29:a9:31:59:9a:5d:da:5c:
                    5b:c3:a0:66:91:6a:18:24:8a:54:b6:0d:54:4c:98:
                    38:67:ca:b8:19:e9:1a:f9:f5:c6:88:67:59:17:1e:
                    d3:32:8e:c9:cd:6f:02:54:35:05:73:85:96:be:cf:
                    99:1e:41:5c:2a:35:5d:58:cc:4d:6a:b9:02:26:ee:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:1E:07:E2:A5:D3:AD:42:AF:D9:34:B7:52:78:07:57:2E:C1:DF
            X509v3 Authority Key Identifier:
                keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:d7:ad:0d:d6:88:b7:c2:10:87:5d:43:41:ed:c8:09:d2:
         d6:d7:d0:ca:e2:3c:5f:98:55:54:35:a5:5a:4f:74:41:7a:31:
         91:de:3d:2f:72:2f:7f:2c:73:c4:b5:ca:3d:d9:63:5c:d3:12:
         61:43:33:b6:ae:9a:a4:45:18:05:ba:19:81:22:1b:8b:f7:91:
         62:aa:49:88:0d:af:ba:f0:98:74:e7:36:72:4a:39:b5:eb:1b:
         79:0b:15:4f:96:b1:9c:27:b4:14:75:08:8e:2a:37:82:23:16:
         ee:a1:ca:84:73:2f:1a:33:9d:14:48:11:d9:a6:11:fd:9d:b0:
         d1:ae:41:dd:bb:00:a6:e9:be:a0:90:62:c7:ee:52:22:e4:b3:
         c7:91:f1:7a:40:24:f2:47:40:13:8f:eb:ff:fd:53:b8:c6:d2:
         71:e6:b4:76:51:e9:0d:67:a4:cf:1c:6d:aa:b7:79:d5:fc:6c:
         5a:63:43:e1:05:5d:92:5b:3b:88:77:b4:3b:70:61:fa:31:c6:
         4f:51:33:97:7b:50:8a:ab:54:5d:16:d8:c8:f7:17:5a:e3:a0:
         a7:2a:98:39:58:09:18:46:67:a5:66:ba:ff:42:da:cb:19:53:
         01:b4:10:43:cb:a6:cc:92:23:18:df:92:7f:f1:0d:c5:75:91:
         42:ef:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:03:31 2025 by rpki-client