This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File:                     u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier:          jKZMWMNx7PbUZG5Cz7KVOI7B8zueA0iXCe7VfT0BX4E=
Subject key identifier:   05:08:3E:28:74:97:9C:EB:7D:65:01:E9:BD:3F:5B:4D:37:F4:C1:B3
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer:       /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial:       019B2A77B89D8D43D26F57F9B7E08E72BD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number:          177E
Signing time:             Wed 17 Dec 2025 04:00:47 +0000
Manifest this update:     Wed 17 Dec 2025 04:00:47 +0000
Manifest next update:     Thu 18 Dec 2025 04:00:47 +0000
Files and hashes:         1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
                          2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: jHsxYsOKyqw5TOlAPB14lFH4lHoLFN2d1GTQDY69Z3w=)
                          3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:77:b8:9d:8d:43:d2:6f:57:f9:b7:e0:8e:72:bd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
        Validity
            Not Before: Dec 17 04:00:47 2025 GMT
            Not After : Dec 18 04:00:47 2025 GMT
        Subject: CN=05083e2874979ceb7d6501e9bd3f5b4d37f4c1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:25:02:b3:55:98:e7:ba:13:9c:24:a3:f2:
                    6d:53:86:c9:31:95:38:4a:61:af:e8:81:7f:4c:09:
                    66:60:f1:37:83:81:49:27:4b:79:8c:20:bc:0d:67:
                    58:19:99:fa:1b:0e:e0:1f:80:78:ab:a3:7c:46:b8:
                    95:21:b1:12:f4:4c:76:21:b6:8c:fa:89:e4:5d:cc:
                    a3:97:ae:75:52:6b:ac:89:60:36:66:d0:c1:7c:cb:
                    9f:ff:45:44:69:42:ba:61:74:3b:ef:ef:1a:77:a9:
                    af:c2:c9:b3:96:10:21:72:26:c7:4d:05:64:ef:66:
                    b0:dd:ca:b6:80:e5:71:e5:1d:15:11:f3:bd:65:1c:
                    77:cb:10:c5:fc:84:cd:ac:be:9b:62:d7:bc:a7:96:
                    a6:76:2a:17:86:ef:b8:9b:0f:14:8b:75:07:cb:3e:
                    a9:82:b1:13:46:4f:00:7f:e6:d0:29:f6:ad:94:3b:
                    a7:12:bd:c0:43:65:fc:96:14:94:8e:db:fe:88:33:
                    3f:ca:6f:24:be:3e:2a:7a:e9:1b:f6:b7:17:1d:d1:
                    ec:dd:5e:7d:98:bd:c2:03:6c:b8:8e:a5:18:c4:af:
                    fd:81:a4:12:1c:65:35:6e:b8:ba:0d:44:3f:65:12:
                    d4:f6:b1:6a:c3:11:67:c8:55:54:12:8f:a7:44:3d:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:3E:28:74:97:9C:EB:7D:65:01:E9:BD:3F:5B:4D:37:F4:C1:B3
            X509v3 Authority Key Identifier:
                keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:8f:73:3f:23:f7:60:12:d7:d6:db:18:d4:bc:cf:fb:6c:
         9d:50:62:61:a9:c1:03:37:5c:91:82:fa:b4:b4:61:b8:a7:f4:
         ed:5d:85:cb:7b:25:2a:3f:48:69:91:2d:3a:ad:66:40:f3:a9:
         b3:8d:2a:12:32:fa:93:dc:ae:b0:aa:d5:09:e2:27:62:54:1e:
         eb:43:e4:e9:e0:ae:02:61:a3:ad:7c:db:f3:9c:71:48:e9:e1:
         67:a6:ce:0a:9a:3f:f7:03:07:89:89:74:ef:3a:f9:33:d4:80:
         97:9f:5c:5b:06:75:bb:29:f5:47:18:9f:22:bd:fe:bd:bd:03:
         d3:f9:60:06:92:3d:9d:19:22:7d:aa:62:32:31:9d:98:17:f4:
         78:5a:af:5d:54:cf:b7:92:cd:f6:5b:d9:a1:1c:62:14:76:13:
         d0:ef:59:39:17:95:b3:a4:91:31:31:b4:a4:54:3c:0b:56:60:
         9d:87:09:c9:81:2b:17:31:d7:bd:42:43:91:28:95:52:14:1e:
         78:f9:e2:5c:fe:fc:ef:c7:4a:de:f4:0d:e3:5c:97:78:3c:c5:
         89:f3:5a:0b:a4:30:a8:0f:2a:90:85:c4:04:ec:ed:3f:41:1a:
         74:9b:e8:51:b9:3e:53:f7:2e:48:f8:c2:4a:09:7a:30:b3:ba:
         f5:bb:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----