This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File:                     cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier:          qrWL7YpKYFrt5mFuL4gvXarY4On2GVKqfo2IxvXAPf4=
Subject key identifier:   09:13:F7:C9:30:41:D8:DD:0E:F3:37:EE:04:E1:5F:F0:28:F2:5A:3F
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer:       /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial:       019B2C2F1829FD7FBDF699671AFDFC3BECBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number:          13E3
Signing time:             Wed 17 Dec 2025 12:00:42 +0000
Manifest this update:     Wed 17 Dec 2025 12:00:42 +0000
Manifest next update:     Thu 18 Dec 2025 12:00:42 +0000
Files and hashes:         1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
                          2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: FVYspO5jXts/eKNfb4fETesE6wpfEEJID4RZ1VSYIcs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:2f:18:29:fd:7f:bd:f6:99:67:1a:fd:fc:3b:ec:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
        Validity
            Not Before: Dec 17 12:00:42 2025 GMT
            Not After : Dec 18 12:00:42 2025 GMT
        Subject: CN=0913f7c93041d8dd0ef337ee04e15ff028f25a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:ea:8e:ca:cb:37:c1:19:4b:bf:c2:cd:d5:
                    21:82:a8:24:ef:1a:6d:0e:2e:08:bc:90:30:c7:78:
                    0a:50:09:07:04:d7:a1:31:11:b2:24:2f:23:ed:47:
                    65:46:fd:9f:d1:0c:3e:33:60:ae:8f:0f:d8:bb:a9:
                    7c:f0:bf:de:80:da:3f:81:a6:52:47:42:79:67:5f:
                    c7:86:b1:20:e9:4b:50:b2:8c:74:73:05:77:6e:d1:
                    6c:61:16:0d:c6:a6:2a:cc:68:a0:b7:ae:95:99:cc:
                    ab:72:ac:45:db:94:24:35:bb:ba:cb:e6:14:97:7d:
                    16:03:8b:60:9c:4d:0f:01:74:65:f5:22:86:bb:ec:
                    fa:39:a8:fd:51:21:18:75:02:2f:76:c3:cb:91:24:
                    b9:3f:24:8f:d0:83:98:09:3f:a9:51:37:ea:d6:01:
                    e8:19:63:41:a5:81:eb:5b:1b:93:8e:af:3d:34:59:
                    35:4c:f4:2a:44:3e:e7:d6:2d:6e:6b:9f:c9:4c:a9:
                    32:fc:cb:64:96:7c:4a:c9:ed:d7:5b:61:8a:d6:65:
                    2e:7a:7d:2e:01:f4:21:40:26:ec:56:fa:e3:aa:28:
                    d0:aa:86:c6:8d:5f:7c:bc:2b:be:b7:07:53:43:f1:
                    f3:f2:7d:b9:90:00:d8:d4:ac:6d:8b:39:f9:db:28:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:F7:C9:30:41:D8:DD:0E:F3:37:EE:04:E1:5F:F0:28:F2:5A:3F
            X509v3 Authority Key Identifier:
                keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:de:dd:e3:fc:17:55:8e:d3:eb:78:92:6a:31:68:f6:a2:46:
         cd:c8:63:e0:37:b9:00:ca:9d:21:93:29:cb:da:3a:16:5e:92:
         55:02:ec:0a:18:c7:3e:c9:c7:16:c9:f0:60:8e:4c:5c:c6:a4:
         1c:83:9d:b5:55:5e:ee:18:1b:15:80:f7:16:4d:cd:98:73:36:
         ca:6a:67:7c:58:e3:06:55:4f:fe:35:6c:ff:7a:0c:9a:27:d8:
         61:38:ed:8a:67:29:b0:59:13:3b:14:c1:bd:2f:e5:1d:56:92:
         67:89:9a:d0:76:bb:fb:aa:09:8c:b8:5e:85:47:fb:ce:c9:65:
         0c:ae:06:4f:81:83:a9:82:47:66:38:5c:3d:72:ef:65:d8:c8:
         08:a2:8f:ef:a1:87:ac:33:da:38:77:bd:d3:a2:71:a9:73:1b:
         f5:7d:e2:52:a9:ba:24:00:cd:66:4c:50:b4:de:04:f7:3d:d2:
         79:2f:e8:10:3f:24:2f:75:ab:b7:47:33:83:d0:87:fe:0c:89:
         c7:ff:13:f2:9d:71:c6:bd:3e:1f:a9:62:35:b6:84:3f:f6:36:
         fc:f0:73:c6:aa:88:e9:08:f6:8e:5c:fb:43:ad:33:2f:a0:cc:
         3b:36:bc:2e:5d:1f:ec:d8:c9:58:01:6b:98:83:bd:b0:16:82:
         a2:32:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----