This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File:                     mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier:          RTqx7cBJhOO0UNz8DfJB1nlfosnRmOYo3YJm2u0q8ls=
Subject key identifier:   86:9B:B3:E4:5C:7D:D0:AB:F2:95:12:9C:F9:F9:2D:FE:74:86:84:72
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer:       /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial:       019B6CC5A8B6D1492522E4FC9986039307C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number:          02E2
Signing time:             Tue 30 Dec 2025 01:00:51 +0000
Manifest this update:     Tue 30 Dec 2025 01:00:51 +0000
Manifest next update:     Wed 31 Dec 2025 01:00:51 +0000
Files and hashes:         1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: 9nWnHmoXZaH5d+LfSX48+CqlZqwZ98Cuv4b1OecLf04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6c:c5:a8:b6:d1:49:25:22:e4:fc:99:86:03:93:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
        Validity
            Not Before: Dec 30 01:00:51 2025 GMT
            Not After : Dec 31 01:00:51 2025 GMT
        Subject: CN=869bb3e45c7dd0abf295129cf9f92dfe74868472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:ac:4b:ed:36:c9:ff:53:a9:14:5a:6f:57:
                    53:c9:40:00:cc:39:71:7c:7d:b7:f5:09:b6:b7:56:
                    d1:d2:d4:d7:07:8b:c0:75:30:24:d3:e3:ca:12:b1:
                    36:5d:80:09:1a:02:cb:7e:3b:8d:f7:73:9a:8d:14:
                    36:3d:7e:57:5f:75:12:d9:6f:71:49:0d:a8:35:b9:
                    f2:12:f2:d0:d5:ef:f9:23:9b:5b:7f:16:83:26:53:
                    51:16:c5:c6:d1:41:00:bd:19:a7:50:fc:20:82:7a:
                    56:69:9b:8a:8b:13:39:67:8b:6c:89:b8:f6:2f:c4:
                    5d:87:0e:27:82:e0:ea:1b:72:46:e1:54:57:9f:d5:
                    fe:08:73:68:a8:d3:77:5c:23:02:6e:28:cc:03:e4:
                    02:3d:ff:0a:ad:61:23:99:0a:1e:e0:3b:5b:8b:72:
                    29:63:58:a0:eb:ac:9c:92:5b:71:1e:0e:8e:b1:b2:
                    9a:31:d9:e6:78:18:cd:98:da:e9:8d:6f:7c:24:44:
                    62:7d:b1:53:3f:8a:f1:35:3c:d7:45:b4:d6:1a:c2:
                    0d:ea:6d:71:ed:cf:db:59:8c:8a:f4:4a:3d:66:7c:
                    00:54:31:30:a3:29:98:ac:b3:f7:85:e7:7a:6a:61:
                    c4:96:61:b6:27:fd:ff:e3:90:64:74:65:94:61:56:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:B3:E4:5C:7D:D0:AB:F2:95:12:9C:F9:F9:2D:FE:74:86:84:72
            X509v3 Authority Key Identifier:
                keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:63:27:00:7a:fc:fa:91:4f:27:49:e3:70:05:12:ad:b2:80:
         2c:94:bd:3c:6e:a4:61:02:d7:7f:af:bd:66:3a:83:0a:29:af:
         91:98:4b:ec:c0:c0:13:99:f6:fa:82:9e:ac:3d:66:8f:47:43:
         d2:8d:99:05:8e:d2:0e:36:95:c0:59:c1:c8:54:9e:54:02:ff:
         58:07:f3:21:66:9a:15:dc:b5:82:cd:b8:2a:84:dd:20:28:27:
         d7:ef:e2:55:a3:2b:93:65:99:18:b0:5f:30:cc:c3:72:53:c9:
         90:d6:f4:26:a3:47:38:94:0b:a8:8b:d2:be:29:23:8b:21:ee:
         0a:76:09:80:b3:38:78:79:bd:a7:21:72:bf:b7:56:de:d1:38:
         69:18:a6:32:fd:48:92:4e:ef:3d:b1:c1:21:2d:cc:1d:37:34:
         81:d5:a1:bb:6e:30:41:97:6e:fa:62:85:24:f9:13:9c:59:c3:
         82:33:81:16:8c:8d:53:f4:d3:e1:48:e3:0a:93:dd:eb:58:e7:
         d2:c8:4a:5e:fb:d3:81:4e:b4:c0:b9:b0:35:3e:70:b6:be:7d:
         4f:90:aa:a3:0a:f9:42:5d:37:95:80:eb:ec:e0:0a:f8:2a:46:
         94:62:92:08:ac:cb:fd:4b:4f:31:30:e1:8a:6a:c9:1f:21:d7:
         19:0a:2c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtsxai20UklIuT8mYYDkwfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjU3MTMxNmMyNjI4OGUwZWQ0MTZiMDEzN2ExZjY0OGE3
ZDIwMDIwHhcNMjUxMjMwMDEwMDUxWhcNMjUxMjMxMDEwMDUxWjAzMTEwLwYDVQQD
Eyg4NjliYjNlNDVjN2RkMGFiZjI5NTEyOWNmOWY5MmRmZTc0ODY4NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5CsS+02yf9TqRRab1dTyUAAzDlx
fH239Qm2t1bR0tTXB4vAdTAk0+PKErE2XYAJGgLLfjuN93OajRQ2PX5XX3US2W9x
SQ2oNbnyEvLQ1e/5I5tbfxaDJlNRFsXG0UEAvRmnUPwggnpWaZuKixM5Z4tsibj2
L8Rdhw4nguDqG3JG4VRXn9X+CHNoqNN3XCMCbijMA+QCPf8KrWEjmQoe4Dtbi3Ip
Y1ig66yckltxHg6OsbKaMdnmeBjNmNrpjW98JERifbFTP4rxNTzXRbTWGsIN6m1x
7c/bWYyK9Eo9ZnwAVDEwoymYrLP3hed6amHElmG2J/3/45BkdGWUYVaroQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIabs+RcfdCr8pUSnPn5Lf50hoRyMB8GA1UdIwQY
MBaAFJr1cTFsJiiODtQWsBN6H2SKfSACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yNTcwMDgtZGE1Yi00MDgxLWFhZjct
NDAzMzY2OTg0YzVhLzEvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yNTcwMDgtZGE1Yi00MDgxLWFhZjctNDAzMzY2OTg0YzVh
LzEvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2MnAHr8
+pFPJ0njcAUSrbKALJS9PG6kYQLXf6+9ZjqDCimvkZhL7MDAE5n2+oKerD1mj0dD
0o2ZBY7SDjaVwFnByFSeVAL/WAfzIWaaFdy1gs24KoTdICgn1+/iVaMrk2WZGLBf
MMzDclPJkNb0JqNHOJQLqIvSvikjiyHuCnYJgLM4eHm9pyFyv7dW3tE4aRimMv1I
kk7vPbHBIS3MHTc0gdWhu24wQZdu+mKFJPkTnFnDgjOBFoyNU/TT4UjjCpPd61jn
0shKXvvTgU60wLmwNT5wtr59T5Cqowr5Ql03lYDr7OAK+CpGlGKSCKzL/UtPMTDh
imrJHyHXGQostQ==
-----END CERTIFICATE-----
Generated at Wed Dec 31 07:21:28 2025 by rpki-client