This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File:                     iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier:          Y6Ndrzq4LJfG8i3DeUJCK9yjFXqpnMVQ5FFz+ZZHsR8=
Subject key identifier:   9F:A7:5B:B0:91:DF:ED:3C:E8:E2:BC:49:B8:3F:02:39:F9:A2:8F:AA
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer:       /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial:       019ADE4B47C563D68AB275FBB6D26DC8B300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number:          162D
Signing time:             Tue 02 Dec 2025 09:01:06 +0000
Manifest this update:     Tue 02 Dec 2025 09:01:06 +0000
Manifest next update:     Wed 03 Dec 2025 09:01:06 +0000
Files and hashes:         1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: 97Z3WgU6U5f75mu2MiWo/kvvqhIM4IJDZa46+Ir9cCI=)
                          2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:de:4b:47:c5:63:d6:8a:b2:75:fb:b6:d2:6d:c8:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
        Validity
            Not Before: Dec  2 09:01:06 2025 GMT
            Not After : Dec  3 09:01:06 2025 GMT
        Subject: CN=9fa75bb091dfed3ce8e2bc49b83f0239f9a28faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:96:21:4a:4a:1f:f6:60:c3:61:b9:5e:63:
                    b8:c9:31:eb:da:4a:37:cd:72:49:88:3b:ef:e9:ff:
                    33:a9:48:54:b6:45:02:d0:97:e6:2d:73:9f:9c:42:
                    17:12:1e:c2:3f:2d:1a:8f:1b:98:f1:41:75:4b:09:
                    76:35:5d:f7:cc:44:58:5b:00:da:ce:84:3f:06:15:
                    af:60:aa:d0:bd:46:95:2c:48:9c:e3:cb:d5:6b:70:
                    d0:b3:6d:06:73:7a:de:d4:19:ef:25:4a:59:8e:ea:
                    b7:5a:fa:c6:f1:cf:3b:47:a1:4f:cd:e3:03:b6:47:
                    ce:fd:d1:fb:98:e5:4a:b4:2c:c7:ae:3c:f5:d6:62:
                    bf:c4:9f:5a:75:98:25:9d:9b:ac:ca:93:65:86:59:
                    de:e3:75:1e:79:9b:b2:d1:cf:c1:86:18:39:47:22:
                    0c:6e:32:2b:91:a2:d4:a0:5e:cc:3c:c8:7a:13:a6:
                    72:4b:1c:89:6f:67:c6:ba:21:9f:3f:30:b1:40:f7:
                    7f:af:82:a2:30:f4:cf:cb:6e:e9:6d:47:4f:26:bf:
                    ea:fe:36:68:67:fd:4b:ab:9d:2e:e6:8c:3b:9b:f4:
                    35:02:5b:58:d5:8c:04:27:ab:c1:3c:78:c9:27:99:
                    0e:e0:b0:e5:55:91:ff:f1:e0:81:e4:d1:2d:96:98:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A7:5B:B0:91:DF:ED:3C:E8:E2:BC:49:B8:3F:02:39:F9:A2:8F:AA
            X509v3 Authority Key Identifier:
                keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:48:e3:0b:e1:6c:28:de:c3:67:b7:d9:b7:e7:92:b4:fb:
         95:38:ba:08:11:de:4e:e8:01:33:80:10:af:72:3e:54:f0:4a:
         87:6e:51:c6:d7:9f:6f:30:d8:54:d1:af:1b:db:db:aa:b0:b9:
         82:d9:30:3a:d0:0c:bc:4b:cb:65:4c:de:5c:38:0a:16:d2:53:
         19:b8:27:b9:4c:32:6f:2c:8d:c1:14:6e:6d:a8:52:f3:b2:81:
         6a:d1:48:38:60:c9:7d:8c:44:44:cc:c1:97:d2:0a:59:8f:bc:
         25:9a:23:0e:fe:c7:e6:70:d6:08:55:b6:7f:18:f2:5d:f1:00:
         2a:5e:b3:dc:f2:03:7c:57:ef:c9:c8:20:65:ef:58:3e:5c:7f:
         e5:2d:ed:a9:29:f6:b1:58:9f:86:a9:d4:b4:76:98:dd:49:20:
         90:c7:31:be:75:68:21:0f:9e:78:07:f7:63:5f:cc:aa:46:e9:
         3f:93:b0:72:6b:af:50:64:a0:aa:eb:a4:96:1d:26:04:7e:43:
         86:30:b1:2f:c0:3b:e9:43:7f:99:4b:52:f2:c3:23:12:c8:69:
         9c:34:68:4d:07:b4:8a:e1:5d:de:75:c7:8e:9e:20:22:51:5d:
         33:c9:8d:58:cc:b0:ec:aa:10:7c:2d:3d:45:3a:7b:59:39:6d:
         74:94:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:33 2025 by rpki-client