This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File:                     KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier:          pnVqsxD0pOLmsiR4tsZecCxMlEEJWtsNHUh30PWYfRo=
Subject key identifier:   7B:2C:8B:C0:B6:50:84:A1:AD:EA:1D:4B:A7:E1:B3:0C:71:F9:DF:B9
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer:       /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial:       019A95FB6876EDD6E5B8FA18CF1CC23A10C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number:          0724
Signing time:             Tue 18 Nov 2025 08:01:12 +0000
Manifest this update:     Tue 18 Nov 2025 08:01:12 +0000
Manifest next update:     Wed 19 Nov 2025 08:01:12 +0000
Files and hashes:         1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
                          2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: 4yQ2ye/AvpbWJCNojiBx41JEBfN8KfI/Wc9G34ayw0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:95:fb:68:76:ed:d6:e5:b8:fa:18:cf:1c:c2:3a:10:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
        Validity
            Not Before: Nov 18 08:01:12 2025 GMT
            Not After : Nov 19 08:01:12 2025 GMT
        Subject: CN=7b2c8bc0b65084a1adea1d4ba7e1b30c71f9dfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:44:38:79:20:7e:f0:61:02:12:de:59:a5:
                    c3:57:a3:e2:89:89:2d:8c:90:4a:77:f5:0c:b0:95:
                    70:ab:5d:4d:37:18:ce:df:2a:ea:de:06:d5:12:4f:
                    b5:b2:65:57:bf:0e:ab:85:6c:64:d5:29:fe:3a:ea:
                    eb:ec:e2:f1:7f:5e:71:53:84:2e:f4:6e:b5:b9:d1:
                    03:37:40:c7:e6:51:8f:66:52:09:e3:91:46:69:a7:
                    b7:c6:93:4d:a9:a1:32:bb:80:d1:23:14:87:4e:f2:
                    32:4c:e8:c6:e8:a3:0a:ad:ba:5d:54:26:0f:d3:1b:
                    75:ba:98:a9:1d:4e:e4:40:9c:90:da:fc:ff:2d:3a:
                    4d:ee:4d:7d:2e:7a:d3:0c:44:2b:1f:3a:a0:b5:c2:
                    98:2b:c8:11:c5:21:cf:44:23:9d:37:4d:2c:fd:32:
                    dc:21:40:d0:d4:bd:05:f0:90:e1:e7:1d:f2:f2:be:
                    fb:0e:72:d6:c4:4f:e3:5b:89:5d:a9:ae:7e:3e:c6:
                    2a:d2:87:27:9d:e3:43:01:52:57:9f:a1:48:43:aa:
                    c5:bf:b5:e7:d5:93:13:68:69:c5:49:08:fc:e6:a9:
                    ee:60:c0:07:e2:21:b9:d8:8e:72:57:2c:7e:15:43:
                    7c:75:6e:da:97:11:c3:95:a2:35:8a:6c:35:7f:64:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2C:8B:C0:B6:50:84:A1:AD:EA:1D:4B:A7:E1:B3:0C:71:F9:DF:B9
            X509v3 Authority Key Identifier:
                keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:fd:f2:6e:f1:b6:19:83:67:5a:f4:2f:7a:53:8a:1a:37:
         ca:c3:45:88:7b:a3:bb:ee:b3:3b:e2:9f:39:e5:cc:22:de:76:
         64:45:fd:83:06:22:58:4f:32:26:13:04:96:2a:21:95:3c:81:
         34:ce:f2:dc:35:67:2f:d1:6d:a2:61:66:b5:21:c7:c5:fc:5e:
         e8:d6:67:85:8a:93:e0:99:7b:14:11:3a:0e:d8:ea:af:80:97:
         7a:42:dd:0d:79:6f:95:99:74:ba:53:70:0c:d8:6b:3c:fb:09:
         a1:cd:c5:73:ee:00:dd:32:45:b0:70:c4:75:88:8e:c2:d3:29:
         cf:3d:e9:f2:3d:ad:c0:3d:39:d4:c3:dc:33:d5:e2:d9:93:bd:
         b4:9f:d7:b0:f3:4a:6e:25:0f:5b:0c:bc:bf:22:f8:1c:fe:42:
         dc:22:86:45:d3:c7:e5:d2:4d:b0:05:22:6b:a7:8d:5d:b8:9d:
         96:c1:b1:cf:a9:9a:2d:8b:2e:54:e8:fe:cc:26:11:b8:4d:dd:
         1d:b2:ad:ff:7e:90:0c:81:84:4b:75:d3:8a:c0:b4:c7:f2:f6:
         61:b4:dc:1f:3e:13:39:0a:63:6f:6f:29:fc:12:cb:8a:16:b4:
         8b:99:ab:69:29:84:64:f2:1b:ff:28:be:a4:c4:10:eb:a6:c1:
         3c:14:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----