This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File:                     TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier:          Ccky4yoLdCUYSifcRlLbpWu/y6q9Yzn5pzxoS+NYHFU=
Subject key identifier:   20:A2:9A:77:94:E7:73:31:9E:02:EA:D3:3E:41:88:6A:B4:C0:3F:3B
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer:       /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial:       019AC3E682721B049B3B35110A9C2E9CD969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number:          0D74
Signing time:             Thu 27 Nov 2025 06:00:54 +0000
Manifest this update:     Thu 27 Nov 2025 06:00:54 +0000
Manifest next update:     Fri 28 Nov 2025 06:00:54 +0000
Files and hashes:         1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
                          2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: gTaBbCnN8zcsPP6A8wgebLtj1yIz7kYzBqDjSqd/JUI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c3:e6:82:72:1b:04:9b:3b:35:11:0a:9c:2e:9c:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
        Validity
            Not Before: Nov 27 06:00:54 2025 GMT
            Not After : Nov 28 06:00:54 2025 GMT
        Subject: CN=20a29a7794e773319e02ead33e41886ab4c03f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:17:77:85:85:a1:a7:c5:b7:01:8a:6f:6f:
                    4c:a9:85:c8:c1:64:23:14:2d:c3:f8:fe:0d:e1:8b:
                    14:30:03:ed:f4:c5:ec:a7:b6:84:bb:e2:71:1a:4c:
                    ad:59:90:30:be:0a:78:17:b5:e0:9f:e8:7d:75:67:
                    e6:d1:40:24:6b:74:95:a3:25:12:1b:9b:60:08:86:
                    c8:b7:96:2b:23:ef:9f:8d:3f:2c:ba:38:18:e7:7e:
                    db:f7:94:90:c7:b3:a2:17:75:91:6d:1f:64:2d:24:
                    db:70:27:10:89:c3:3c:c1:3f:79:ef:2c:b2:d6:aa:
                    3d:d0:11:1b:34:16:c8:2d:a9:74:6d:f0:0d:84:c1:
                    6e:d0:17:11:d4:70:16:0b:d9:7e:ce:61:ba:32:9b:
                    db:9f:0c:8a:f2:ce:b9:c2:8f:70:fe:ef:9d:e4:ef:
                    21:1c:23:6e:87:7a:18:c4:3d:dd:cf:cf:39:ad:12:
                    d2:4f:a8:fa:00:ab:95:b0:f5:16:04:7b:d5:68:e4:
                    d9:8f:30:8b:53:10:60:b8:ad:58:d2:6e:07:92:8a:
                    95:ad:5f:d2:37:bc:5e:6e:a6:26:b5:20:25:cc:27:
                    65:dc:94:0a:54:77:cf:21:a7:f7:32:48:51:0a:e6:
                    9e:ca:58:0b:60:ce:39:c9:70:db:5d:9e:c9:af:40:
                    62:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A2:9A:77:94:E7:73:31:9E:02:EA:D3:3E:41:88:6A:B4:C0:3F:3B
            X509v3 Authority Key Identifier:
                keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e8:ee:eb:0a:75:9b:f5:f8:22:6f:c2:e1:de:16:37:27:48:
         36:9e:52:30:dd:ec:1a:d0:31:05:c8:c1:3c:6d:86:8b:46:1c:
         33:50:8e:e4:ac:d5:78:77:79:7c:43:09:2f:8d:c6:77:b6:4b:
         83:f6:54:b6:03:8e:66:63:e7:73:ed:c7:60:68:ea:bd:05:c9:
         cf:00:0f:5d:d7:d8:6c:b3:a4:02:31:d9:6f:de:1d:ea:8d:91:
         50:cf:26:e8:c6:b1:1e:81:3d:48:78:10:c9:aa:ce:6a:5a:c8:
         86:b3:63:58:8d:e2:c0:60:01:4a:e8:21:21:03:3a:f4:6a:cf:
         4c:70:c2:d6:2a:a9:11:02:b2:09:a3:da:9f:02:76:be:36:1c:
         5a:89:d0:e2:81:3b:c7:0f:4c:99:1e:6f:22:a6:e9:95:55:0a:
         f1:35:10:24:5d:f1:10:96:aa:e6:51:d8:cf:6a:b1:7f:9b:7e:
         42:2b:c4:04:8a:9c:b4:c9:f2:52:84:75:ed:a2:73:57:57:df:
         55:86:76:47:7f:19:da:cd:02:d8:43:06:a5:a7:64:ae:6e:6a:
         a0:e0:fe:c1:3b:5b:6f:72:24:59:9f:83:20:bd:1e:8e:62:a2:
         c2:13:3d:51:0d:34:30:b5:1c:4a:ce:da:3a:46:3e:01:3b:33:
         a1:97:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----