This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          DLPeFMY/+acrpp53iEkhwUnTLIOtWeCXrhYlBw6TQmE=
Subject key identifier:   77:E4:83:5F:B8:FC:15:24:CE:66:7D:A3:B2:4D:2C:DC:BC:2A:70:D1
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       019B066CB66DD470F17A4BCB6150AB7A00DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          0B11
Signing time:             Wed 10 Dec 2025 04:02:26 +0000
Manifest this update:     Wed 10 Dec 2025 04:02:26 +0000
Manifest next update:     Thu 11 Dec 2025 04:02:26 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: RivqBlOgn+mK8OeCbjEcntKi17sTZ1jWn4nqVB9tWE8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:6c:b6:6d:d4:70:f1:7a:4b:cb:61:50:ab:7a:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: Dec 10 04:02:26 2025 GMT
            Not After : Dec 11 04:02:26 2025 GMT
        Subject: CN=77e4835fb8fc1524ce667da3b24d2cdcbc2a70d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:30:45:dd:9d:75:e0:75:4e:fa:b5:e7:6e:17:
                    01:c2:25:af:86:59:f8:72:e9:7e:3c:71:da:19:11:
                    d4:0a:a2:02:20:29:f3:bc:0e:2b:ce:3c:f6:6a:85:
                    ea:39:b7:ae:0f:c2:1d:62:e5:f2:6c:c6:ab:d3:bd:
                    f6:dc:0d:33:73:02:21:42:74:b8:27:da:2f:b3:33:
                    9c:84:d6:2d:da:d6:d1:ca:f0:98:d8:4c:42:7b:28:
                    13:ce:59:35:29:7f:23:72:fd:00:e4:c1:96:8a:b1:
                    e1:cd:92:ff:c6:03:a3:58:4a:08:93:02:da:6b:a2:
                    6e:5c:8d:2c:63:7c:92:2f:11:b7:9f:8e:09:4e:e1:
                    37:3d:69:3b:c5:f1:64:2c:17:2b:45:2e:ee:d2:be:
                    d1:cf:a2:de:ac:ba:9f:3c:35:81:fa:15:2f:93:8f:
                    e2:b5:24:ba:fd:b1:a4:66:07:92:f0:90:89:06:46:
                    1f:11:56:ed:73:b6:a2:78:f2:21:77:e6:b3:fd:14:
                    36:e8:e0:15:ff:60:ec:ed:ff:ae:2d:0f:38:e2:28:
                    33:48:68:79:33:b6:0d:e6:b4:f0:27:73:76:e6:7f:
                    5d:ef:91:0b:66:34:2c:c6:f1:ee:d4:51:c9:7e:89:
                    39:23:25:4b:6f:d9:a0:cb:13:3e:34:60:12:4d:6b:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:83:5F:B8:FC:15:24:CE:66:7D:A3:B2:4D:2C:DC:BC:2A:70:D1
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:38:0e:48:6d:86:b8:10:cc:b0:3c:5f:30:77:39:48:ce:df:
         9a:e9:99:35:c0:ee:54:19:0d:eb:31:37:a6:1a:88:0f:de:f2:
         59:3e:af:a7:a9:82:e7:b9:55:9f:17:5c:14:c1:a1:7d:71:64:
         e3:2e:7c:d8:02:f6:f4:00:4b:df:37:e8:1a:c4:26:c7:92:fd:
         f5:78:00:3d:82:64:40:f4:cb:db:4f:4c:69:4f:44:a4:2a:1b:
         3b:c2:8f:1d:d9:03:c3:fa:1e:fd:13:b7:44:33:d3:9a:d2:2b:
         9b:f3:2c:88:f7:f0:20:fd:5b:84:4b:0e:8e:c0:d5:f9:42:c9:
         de:f0:aa:0c:d8:4f:5f:26:48:54:15:e5:08:d0:25:02:dd:48:
         ea:3c:df:96:8e:92:a4:f1:a6:8e:86:b3:f1:b8:50:f9:28:da:
         73:63:1c:59:6a:f7:27:16:e5:57:73:ae:b2:e7:05:27:d9:44:
         37:83:12:c2:bc:63:0b:83:87:aa:7e:f4:bd:47:59:18:21:61:
         b0:78:95:d7:51:c7:8f:18:94:3b:e9:99:09:02:ed:b0:b0:37:
         53:6f:58:c1:87:1c:ce:28:f3:a7:63:b7:95:1d:52:2c:7a:cb:
         8a:36:49:7d:5b:3d:2f:58:4b:6d:e9:51:b5:0b:fa:b1:bc:79:
         27:ec:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:08:58 2025 by rpki-client