This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
File:                     uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft (raw, json)
Hash identifier:          ti19euMuhweISWtnbSWS2RvjwL7mQ5qQdCT8Sjq/JeM=
Subject key identifier:   D3:B4:BC:C0:45:8D:66:FB:44:5C:3C:51:20:E1:E1:49:D8:A2:49:C3
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Certificate issuer:       /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial:       019B06A27A4908E2C4AE75E4BF52C9438F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
Manifest number:          0D3E
Signing time:             Wed 10 Dec 2025 05:01:09 +0000
Manifest this update:     Wed 10 Dec 2025 05:01:09 +0000
Manifest next update:     Thu 11 Dec 2025 05:01:09 +0000
Files and hashes:         1: c47adC4Bxlaw5597wV2V7KU0TIk.roa (hash: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=)
                          2: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl (hash: Uil1JARJbIzlr971ShoRoGiBUC6CUY19sWeiXb1mLt4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:a2:7a:49:08:e2:c4:ae:75:e4:bf:52:c9:43:8f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
        Validity
            Not Before: Dec 10 05:01:09 2025 GMT
            Not After : Dec 11 05:01:09 2025 GMT
        Subject: CN=d3b4bcc0458d66fb445c3c5120e1e149d8a249c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:17:d3:6f:b9:fb:bb:59:fc:a3:a5:51:20:
                    2d:20:20:8a:e3:42:6e:00:23:78:84:66:3e:e8:59:
                    5f:5b:de:17:4b:0e:20:9e:07:60:cb:3c:7d:dd:fa:
                    93:07:db:0c:2c:23:20:17:2d:07:4c:ff:9d:76:9f:
                    56:07:6e:b6:12:18:66:17:64:d8:ca:01:fd:25:f4:
                    64:e3:a7:aa:64:9c:21:2c:c5:10:07:50:a1:a8:54:
                    85:8a:aa:bf:93:ee:de:ba:b8:01:41:f3:8a:86:53:
                    d5:83:9c:b0:26:f3:13:d9:7f:1f:5c:df:ce:b9:6e:
                    69:22:e5:24:3b:47:6a:91:4f:13:a6:d7:f6:1c:67:
                    e8:87:e1:db:b0:9a:69:71:18:b6:06:8e:38:04:b6:
                    71:11:84:21:42:2b:c8:a3:63:5c:b1:91:03:07:62:
                    3b:ad:ff:dc:ab:30:48:11:99:d8:e0:ab:1d:51:c3:
                    69:40:63:25:37:93:a3:a5:16:3d:de:de:39:c2:f7:
                    1b:60:fd:c5:13:cd:ce:34:87:0c:ce:94:00:7b:92:
                    28:f5:ce:7b:c2:8a:21:95:02:8c:d5:6b:29:51:d5:
                    38:71:10:a8:69:34:e9:57:52:bb:c3:83:bd:0f:8b:
                    e1:73:4a:d9:32:ce:29:a7:c0:6e:f4:2d:c3:d6:e3:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B4:BC:C0:45:8D:66:FB:44:5C:3C:51:20:E1:E1:49:D8:A2:49:C3
            X509v3 Authority Key Identifier:
                keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:f2:8b:1b:0c:f0:59:d2:a5:b9:db:8f:ed:3f:0e:ca:1a:
         a2:e6:c5:73:24:cc:ba:81:aa:4f:ca:17:8f:e8:07:ab:9a:1a:
         d9:c6:7b:96:ec:b7:fe:15:d3:d7:ca:b8:c6:70:5d:6b:cd:c9:
         84:a6:43:fe:44:96:0f:1a:83:6e:ee:10:e0:5d:b5:eb:f7:08:
         cf:ab:ab:12:3f:7b:5b:96:0a:19:0b:58:0e:f9:ea:06:69:a7:
         66:c1:af:4b:9c:ea:7a:e2:0d:2e:ac:da:36:b8:c5:bf:87:99:
         39:e9:bc:a6:ff:0d:39:7b:99:18:12:11:64:1e:b1:0c:e3:96:
         7f:ee:c1:0e:ed:85:e2:3a:8e:34:50:f3:23:62:82:19:30:f6:
         5f:88:89:08:b9:f9:4a:87:a8:8d:23:e0:67:7f:18:7f:de:cd:
         a2:7b:50:44:85:2a:93:3c:2e:aa:72:8e:ac:cc:ff:c2:37:80:
         2c:0e:9b:09:dd:32:e3:cc:71:52:fc:54:52:db:2a:53:62:90:
         4f:ea:78:6f:c2:30:ae:46:40:ec:dd:b9:1d:79:6f:ae:0d:c3:
         ac:02:dc:55:be:3c:fb:95:02:fa:04:5a:b9:e7:92:87:a0:7b:
         3e:5c:70:3d:c6:92:1f:3a:1f:75:e0:9e:2d:3d:74:7e:55:6c:
         ac:80:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:48:45 2025 by rpki-client