This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File:                     xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier:          xKO3QUupMR3yDVvTWUP+DGrtveB2CNAcv6g8+vujVls=
Subject key identifier:   07:FE:1F:30:0A:E4:DA:C9:CC:EB:8B:E0:9B:A5:BF:02:C3:67:D6:EA
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer:       /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial:       019B2F67CE9B4E16C69E1B8A92E00D03AD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number:          06B7
Signing time:             Thu 18 Dec 2025 03:01:30 +0000
Manifest this update:     Thu 18 Dec 2025 03:01:30 +0000
Manifest next update:     Fri 19 Dec 2025 03:01:30 +0000
Files and hashes:         1: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (hash: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=)
                          2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: VYaIX74LeRFwoHewbcAgJ5Lshtbg0NHCJG6uRwpgFJc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:67:ce:9b:4e:16:c6:9e:1b:8a:92:e0:0d:03:ad:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
        Validity
            Not Before: Dec 18 03:01:30 2025 GMT
            Not After : Dec 19 03:01:30 2025 GMT
        Subject: CN=07fe1f300ae4dac9cceb8be09ba5bf02c367d6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:db:83:7c:ef:0a:d4:5d:df:c4:5f:3d:b8:
                    71:0a:0a:74:ba:31:55:1d:51:8f:2b:1f:2d:2e:29:
                    b8:e9:04:0b:e2:76:77:d3:09:f8:0f:07:ba:9d:8b:
                    69:66:33:22:af:d5:9d:f4:5f:a9:ae:96:bc:b4:b8:
                    6d:a6:55:fb:93:ff:a4:ca:98:61:d2:4a:8f:b1:c2:
                    42:35:35:1f:aa:85:0c:0c:22:37:c7:0b:94:9c:0f:
                    94:70:e5:a2:6d:63:9a:6d:7a:f2:c7:f0:3e:f0:98:
                    2e:f8:c5:96:b6:69:29:88:9b:12:7e:20:29:e8:60:
                    c7:ff:32:a8:ee:66:42:1c:80:12:12:17:b1:9a:ba:
                    8c:09:1f:c7:b7:d4:58:75:28:44:74:45:81:5e:90:
                    7a:1d:ef:25:9c:d1:64:34:17:61:f0:b6:a0:80:7f:
                    8c:11:09:46:79:b4:6d:a2:fa:f6:44:06:95:17:cc:
                    d8:d4:bd:07:bb:6a:06:ef:5f:fa:38:25:7c:ef:26:
                    fe:a4:95:67:37:c0:21:d3:92:5c:6f:2a:f3:85:e1:
                    f1:26:29:d7:85:46:52:6a:68:25:63:de:dd:38:57:
                    5d:4c:5c:36:08:c1:6f:33:a5:04:4e:08:b9:74:90:
                    b5:0a:85:a6:64:c0:f0:78:84:8d:43:0b:cb:0a:8a:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:1F:30:0A:E4:DA:C9:CC:EB:8B:E0:9B:A5:BF:02:C3:67:D6:EA
            X509v3 Authority Key Identifier:
                keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:1e:88:90:67:1f:82:91:f7:65:88:27:0b:ee:17:e8:9b:
         d4:50:ce:37:36:c9:af:4b:5e:de:48:3f:dc:25:be:0f:c5:3c:
         64:dd:c0:75:6c:29:f7:b1:4d:8a:a2:d8:4b:d6:bd:d9:7e:a8:
         9d:a3:c3:3f:04:4c:ce:e5:72:10:07:ef:80:69:ef:d3:90:7e:
         17:77:13:3c:ec:1c:e8:55:68:09:6b:8c:e5:95:10:af:e0:ef:
         cc:b4:ef:03:e7:4b:fa:4e:de:1e:6c:55:d1:da:2a:82:cb:68:
         d8:30:40:fa:2f:59:eb:24:51:09:47:ff:2f:e2:8b:05:52:60:
         97:73:9b:ab:e4:01:a7:5e:97:22:8a:19:ce:9d:03:82:2f:30:
         34:56:d4:97:fd:11:ab:ee:2c:d3:71:24:86:7e:8b:db:d9:cd:
         da:e2:9b:bf:ee:0b:6a:51:59:9b:a5:7b:89:9d:a9:66:39:cf:
         24:7b:74:4f:60:03:71:32:39:e0:07:73:0b:04:d4:d0:92:f1:
         63:0d:19:b2:3d:97:6e:19:8d:f2:81:7d:e0:cd:e3:ac:f7:24:
         67:57:f6:72:6b:7d:c6:a1:59:65:50:9b:af:36:5d:5e:6c:7e:
         79:ea:df:88:a1:41:c2:77:0b:15:3b:2d:43:10:5a:5d:fc:3a:
         03:f3:8e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvZ86bThbGnhuKkuANA62fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZDc2YzFhZjhmYWQyZWJjNjM0ZWEyZTIzMzcwZjEwYzVj
NTlkMGIwHhcNMjUxMjE4MDMwMTMwWhcNMjUxMjE5MDMwMTMwWjAzMTEwLwYDVQQD
EygwN2ZlMWYzMDBhZTRkYWM5Y2NlYjhiZTA5YmE1YmYwMmMzNjdkNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjjbg3zvCtRd38RfPbhxCgp0ujFV
HVGPKx8tLim46QQL4nZ30wn4Dwe6nYtpZjMir9Wd9F+prpa8tLhtplX7k/+kyphh
0kqPscJCNTUfqoUMDCI3xwuUnA+UcOWibWOabXryx/A+8Jgu+MWWtmkpiJsSfiAp
6GDH/zKo7mZCHIASEhexmrqMCR/Ht9RYdShEdEWBXpB6He8lnNFkNBdh8LaggH+M
EQlGebRtovr2RAaVF8zY1L0Hu2oG71/6OCV87yb+pJVnN8Ah05JcbyrzheHxJinX
hUZSamglY97dOFddTFw2CMFvM6UETgi5dJC1CoWmZMDweISNQwvLCor8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf+HzAK5NrJzOuL4JulvwLDZ9bqMB8GA1UdIwQY
MBaAFMXXbBr4+tLrxjTqLiM3DxDFxZ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQt
ZmRlNmZiOWFmMjMwLzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQtZmRlNmZiOWFmMjMw
LzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAee4eiJBn
H4KR92WIJwvuF+ib1FDONzbJr0te3kg/3CW+D8U8ZN3AdWwp97FNiqLYS9a92X6o
naPDPwRMzuVyEAfvgGnv05B+F3cTPOwc6FVoCWuM5ZUQr+DvzLTvA+dL+k7eHmxV
0doqgsto2DBA+i9Z6yRRCUf/L+KLBVJgl3Obq+QBp16XIooZzp0Dgi8wNFbUl/0R
q+4s03Ekhn6L29nN2uKbv+4LalFZm6V7iZ2pZjnPJHt0T2ADcTI54AdzCwTU0JLx
Yw0Zsj2XbhmN8oF94M3jrPckZ1f2cmt9xqFZZVCbrzZdXmx+eerfiKFBwncLFTst
QxBaXfw6A/OOVw==
-----END CERTIFICATE-----