This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File:                     MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier:          6Dv7ffbR9IT7BuAtlkJqkhEdlUUs0LZVTI/JvFg3Op8=
Subject key identifier:   2E:3D:6F:2A:C8:16:27:9D:8A:AE:36:CD:3A:64:6A:B9:F3:2C:A9:47
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer:       /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial:       019B29D2C210817C9E850DC8BED0621DB98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number:          072C
Signing time:             Wed 17 Dec 2025 01:00:36 +0000
Manifest this update:     Wed 17 Dec 2025 01:00:36 +0000
Manifest next update:     Thu 18 Dec 2025 01:00:36 +0000
Files and hashes:         1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=)
                          2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: ajxyE+yLENUMzxoUcqRYvOfk9YrFilMIIvRrSWrsbHs=)
                          3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:29:d2:c2:10:81:7c:9e:85:0d:c8:be:d0:62:1d:b9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
        Validity
            Not Before: Dec 17 01:00:36 2025 GMT
            Not After : Dec 18 01:00:36 2025 GMT
        Subject: CN=2e3d6f2ac816279d8aae36cd3a646ab9f32ca947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:a9:7f:65:ad:39:f6:9b:c3:c8:3e:51:c6:
                    f0:34:e2:73:f2:26:f3:01:bf:c0:9c:39:72:30:87:
                    56:14:bb:d6:89:d7:96:32:79:de:2d:f5:69:0f:ba:
                    34:33:0e:d3:05:04:8e:7b:ed:91:25:d0:fc:8f:91:
                    f0:9b:ae:16:36:bd:26:1c:d1:be:4d:c2:53:40:d8:
                    01:89:72:aa:d9:46:72:a8:00:ac:0e:12:62:26:12:
                    00:8b:99:60:1d:24:05:fb:3d:52:f7:29:10:58:cd:
                    15:34:e0:54:48:1c:7f:03:de:60:70:af:08:b5:d4:
                    c3:5e:20:66:2b:ca:4b:76:e4:8e:b1:9a:48:0f:fc:
                    22:8e:01:f8:61:3d:fe:ed:00:bd:96:62:4b:85:f1:
                    6f:e7:eb:17:cd:91:d1:1f:4f:50:d9:d6:da:75:97:
                    3a:1c:bc:5b:f9:69:a5:db:22:a4:12:f4:4b:43:9e:
                    70:6e:f2:ef:35:60:e2:2c:2e:f0:c3:90:f9:cc:96:
                    cd:6f:25:94:85:01:16:a3:e9:64:85:0b:1a:d4:32:
                    1b:cf:49:9b:c1:47:3b:47:d3:67:93:01:e8:97:03:
                    57:57:cc:ed:e4:74:d6:97:2f:71:d3:fc:e1:95:a4:
                    7a:f8:a5:d0:60:02:52:9d:53:b9:84:c4:f2:d5:fa:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3D:6F:2A:C8:16:27:9D:8A:AE:36:CD:3A:64:6A:B9:F3:2C:A9:47
            X509v3 Authority Key Identifier:
                keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:85:26:49:71:c4:ef:64:5c:ae:92:28:8a:d4:62:a9:45:e7:
         4f:b3:96:98:3f:81:59:60:bd:2c:8a:9f:20:1c:ce:d6:ec:e2:
         30:13:a6:b1:08:2a:dd:f3:a5:2c:df:57:bf:9f:09:0c:4b:ff:
         57:f5:32:84:68:65:18:e9:fb:a1:b8:6b:89:6e:0d:9b:2e:bf:
         02:e5:0e:16:0a:af:90:c1:ef:b4:c9:5b:7a:f9:8c:0b:a6:20:
         62:09:20:81:93:61:8a:07:a7:f7:6a:17:6f:f7:7d:b9:1e:54:
         24:22:62:29:c7:23:25:25:ae:fa:35:f6:3d:a2:1a:b3:4a:aa:
         4f:aa:54:16:ac:f2:85:40:6c:98:4c:db:c9:a0:e3:67:26:15:
         77:a5:71:5d:4f:58:a3:5c:e9:5c:49:99:97:02:f2:c5:4a:49:
         36:b8:4b:96:16:5d:26:49:cc:47:a2:9d:16:1d:64:71:1e:a0:
         aa:cb:7a:68:c3:92:55:85:1e:65:a0:95:ba:83:a1:ee:72:61:
         84:b2:76:1b:8c:77:5f:99:e9:c7:81:91:cc:c0:66:42:50:67:
         b6:1b:32:cb:4c:4c:1b:4a:70:09:fa:f1:74:9e:7d:39:ba:98:
         db:40:68:c2:c0:76:bd:b5:cb:ed:1d:36:f6:93:bf:57:dc:10:
         9c:0d:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----