This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
File:                     aMwyXIrZdpobVNopYwX-DDZXN3U.mft (raw, json)
Hash identifier:          SXcQO1ieHgLmh/KtPyIHBXIKxYx2zSIQTVKX6aNktnI=
Subject key identifier:   AF:DB:C4:DB:43:C6:7D:AF:A0:DC:E7:37:74:84:90:A8:41:BA:92:06
Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Certificate issuer:       /CN=68cc325c8ad9769a1b54da296305fe0c36573775
Certificate serial:       019B028EFEF962F29B558C936388EBF855E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
Manifest number:          0AAA
Signing time:             Tue 09 Dec 2025 10:01:24 +0000
Manifest this update:     Tue 09 Dec 2025 10:01:24 +0000
Manifest next update:     Wed 10 Dec 2025 10:01:24 +0000
Files and hashes:         1: 8SXa1LGEgRchazaJtCn45wimFzI.roa (hash: aarcdMLMUD+vhP2Nt/G/Xfb4TI1KlOo20WqPIWfHmGk=)
                          2: 9h0zhhREd-POjncfc-zEp4ug01M.roa (hash: JFrWYEIaG5U63hgpJ7xXhrCvo1w1GUW7UsCloYFy5DI=)
                          3: aMwyXIrZdpobVNopYwX-DDZXN3U.crl (hash: 3R080zkS36D+lTn3k+XsDAJ2/0YIA5RdzaRveuosEhc=)
                          4: hOg_cmo_1iPWo-TSIDavHMMiNf0.roa (hash: x2NoBu31Yw8pVlDgk5TVKt6dy/zU3kvxFv7RpieFwqA=)
                          5: mrLaA1eR5ZA6ZP7iWY4b8XRMWTY.roa (hash: jJecCTBKKFO9xnb082mcb8oh5M5FNk8lCFd2JS7Xlls=)
                          6: zZ03RoGozbT1HFe4mhpawTrExsc.roa (hash: lLn9Wn1De0ejD1AHiJO5yX30r5UE6GRrj/0NmZ5bxR0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:02:8e:fe:f9:62:f2:9b:55:8c:93:63:88:eb:f8:55:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775
        Validity
            Not Before: Dec  9 10:01:24 2025 GMT
            Not After : Dec 10 10:01:24 2025 GMT
        Subject: CN=afdbc4db43c67dafa0dce737748490a841ba9206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:ce:1d:c4:8b:ba:a6:c9:0d:67:7b:2e:34:
                    e9:c7:46:fc:2a:0e:a9:78:2f:4a:88:62:48:ae:ac:
                    a9:07:b5:da:fa:97:a8:3f:9c:d9:bf:cd:03:61:27:
                    3b:ce:39:a4:11:73:cf:42:c7:b6:f8:fc:1a:8e:71:
                    a5:40:c8:ba:22:c1:5c:bc:3e:2a:31:00:9d:e1:84:
                    56:fd:48:3f:f6:43:08:fc:b2:2d:f8:24:79:cf:a8:
                    df:63:b8:99:70:eb:85:4a:22:a4:5c:dc:ec:2e:cc:
                    4d:67:93:04:5b:04:ab:98:ed:b5:d3:d1:70:40:aa:
                    46:16:59:a0:37:a2:80:14:b3:15:52:d5:58:45:f6:
                    ec:e3:22:80:37:85:12:c2:a0:3e:91:fa:a7:62:52:
                    f5:60:de:bb:31:7c:bd:9a:4f:4f:2c:7e:80:49:f6:
                    5f:1c:a4:5c:b0:fb:51:c5:b3:46:7b:83:1f:b6:97:
                    fb:ee:e8:cb:5b:55:60:f2:e6:4d:35:9e:b2:8e:61:
                    9b:db:f8:2e:47:61:5f:54:d7:c4:0e:16:ff:29:46:
                    78:f9:39:ae:eb:db:e4:a3:f1:e1:e7:38:72:6b:38:
                    ce:de:e3:5d:f1:2f:42:da:d1:25:ce:09:50:73:38:
                    8c:f6:76:c4:b4:4a:9b:15:bc:92:33:12:7a:b5:e3:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:C4:DB:43:C6:7D:AF:A0:DC:E7:37:74:84:90:A8:41:BA:92:06
            X509v3 Authority Key Identifier:
                keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:1a:7d:24:4b:25:38:3c:57:1e:a0:9e:9f:a5:3f:e5:12:
         84:cb:1f:13:b5:ee:84:c3:29:28:14:60:dc:9d:e3:1a:20:93:
         79:60:47:af:08:70:cf:b3:a9:e8:80:80:96:a6:33:d9:c2:66:
         fd:f0:e4:60:b6:96:44:39:43:5a:de:88:0e:8b:6e:4e:20:54:
         ec:b5:68:d6:a2:60:4f:97:de:ff:13:ed:46:72:bc:d6:a1:30:
         1c:8f:65:08:45:28:1b:3e:64:c4:5d:2f:a1:7b:94:f0:f2:4d:
         bb:92:04:e0:c4:c8:62:8c:4c:11:18:fb:d1:f6:ec:1a:f6:9a:
         a4:31:ae:0b:4f:35:f0:ba:f8:14:8c:b8:ec:1c:f3:ef:f3:46:
         12:9f:28:70:0a:12:7f:ad:5b:e8:43:28:7c:b1:e4:90:f9:f2:
         db:a5:9d:38:ae:0b:a6:e5:15:48:05:34:5c:43:5d:bc:e5:f4:
         aa:da:14:34:64:82:54:51:d3:f1:a8:ac:0c:b9:24:5e:1d:1f:
         c1:4b:69:66:44:0b:e1:08:bf:3d:b8:06:b5:88:21:d9:1a:81:
         0f:35:61:1c:92:c1:e6:bb:7f:18:a7:27:ea:a4:b2:11:af:77:
         39:54:c2:85:27:43:8a:a6:b2:83:54:2e:80:dd:50:5d:a2:98:
         2c:19:e7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----