This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File:                     3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier:          +qNvhcSPbiDpobVLktYF8frWbKz2W9vb+eLPvCxz8lc=
Subject key identifier:   69:D9:88:CF:6E:FE:D1:5F:C1:79:3E:81:F3:43:F0:0E:57:A5:93:B4
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer:       /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial:       019B0AB599E0D92CBF621A2FD9D72EC2017F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number:          0FEF
Signing time:             Thu 11 Dec 2025 00:00:32 +0000
Manifest this update:     Thu 11 Dec 2025 00:00:32 +0000
Manifest next update:     Fri 12 Dec 2025 00:00:32 +0000
Files and hashes:         1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: /6ggKwpumL/OmgzedCFqv0RBWJjeDzDqqPn0zPQ+40I=)
                          2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
                          3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0a:b5:99:e0:d9:2c:bf:62:1a:2f:d9:d7:2e:c2:01:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
        Validity
            Not Before: Dec 11 00:00:32 2025 GMT
            Not After : Dec 12 00:00:32 2025 GMT
        Subject: CN=69d988cf6efed15fc1793e81f343f00e57a593b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:47:9c:cf:37:14:ba:b6:b8:47:97:28:dc:
                    2b:63:09:1a:a6:3a:52:6e:c0:72:12:35:6b:ce:d0:
                    a7:55:d3:4e:d4:4b:6c:9c:2f:2c:af:ec:2d:c6:b5:
                    03:4e:52:9e:a6:f5:3c:14:f1:af:c2:25:32:ba:8c:
                    6f:08:9e:a7:c2:44:b2:25:c3:1f:a5:86:49:73:10:
                    4c:94:7d:70:4d:84:bc:08:f8:24:ff:eb:50:35:4d:
                    14:ef:43:8d:72:35:51:18:6a:bd:f5:8b:07:df:5f:
                    d4:67:c9:a0:6a:6e:e5:9f:59:e1:f1:62:6f:6a:ce:
                    82:44:5d:79:ca:60:17:ed:52:29:49:5d:ce:58:81:
                    8e:94:bf:bf:74:4f:92:af:f8:20:ca:18:86:ea:41:
                    80:9f:32:aa:5a:db:3b:ba:49:a6:1b:24:87:49:ef:
                    a2:80:fe:31:2c:14:3e:76:19:1d:7f:02:1b:81:84:
                    00:62:1c:50:80:ec:02:6f:2e:d2:c6:0a:82:9e:a3:
                    05:5b:b9:9d:61:b0:e5:70:fd:f7:cf:8c:19:6c:52:
                    8c:83:ae:bf:c2:3c:cc:7d:64:f1:94:6e:71:3e:58:
                    7f:ea:4a:51:d1:1c:f0:e7:a2:1f:95:11:18:d5:57:
                    68:49:13:1f:78:0d:c6:70:7f:f0:ee:d7:85:79:c4:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:88:CF:6E:FE:D1:5F:C1:79:3E:81:F3:43:F0:0E:57:A5:93:B4
            X509v3 Authority Key Identifier:
                keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:e7:4c:14:c0:4d:1c:67:c1:71:c6:6f:b6:40:96:88:74:
         a3:03:17:c6:9b:a9:cd:d3:10:b0:e2:54:0d:cb:b4:f1:31:03:
         5d:3e:17:5e:a0:a1:88:a0:9f:ed:23:d0:eb:6a:21:1b:a2:eb:
         d1:09:de:28:a0:66:b4:6e:eb:66:6d:aa:5b:21:77:79:54:a9:
         c8:52:ee:97:dc:06:4c:0b:82:2e:dd:d3:3e:36:af:4f:c5:2e:
         96:80:bb:4c:8c:21:cc:ac:8a:07:54:58:6a:5d:e6:f6:c5:f3:
         d8:55:08:6b:8a:aa:19:af:be:7a:a2:0d:8c:e8:6d:b3:1f:5a:
         7a:96:33:c8:cb:76:ad:e9:c3:14:a4:5a:9a:42:69:32:91:8a:
         25:61:9e:50:4a:eb:24:96:0f:57:f9:e3:e9:ef:f4:1d:08:95:
         06:0b:bb:be:9a:3b:ca:95:e8:a8:f6:60:c4:2f:91:4e:ef:7e:
         02:30:7e:0c:8f:b3:d1:d2:64:5a:e5:1d:2e:a7:71:37:17:d5:
         e8:2e:c4:97:e5:94:6b:9e:26:9f:47:1e:33:54:d2:50:29:d1:
         d8:80:2b:54:eb:1c:05:43:f1:2b:86:26:ee:89:57:36:a4:9d:
         83:dc:c1:54:c4:18:29:ba:18:24:c7:99:62:70:45:48:14:53:
         3a:aa:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----