This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File:                     zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier:          lVgjxThvUaasGdKPnj0T1KPQtov576jbNUJzW8ZjnO4=
Subject key identifier:   BA:FA:F9:64:36:FF:C7:74:84:1A:74:25:17:B8:5A:E7:6A:8C:50:D9
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer:       /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial:       0198F2E99652B10E4F1C493FDBE8DE7A8728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number:          0D40
Signing time:             Thu 28 Aug 2025 23:00:51 +0000
Manifest this update:     Thu 28 Aug 2025 23:00:51 +0000
Manifest next update:     Fri 29 Aug 2025 23:00:51 +0000
Files and hashes:         1: 2DOh93abUDEP7iIvARNzO8Baro0.roa (hash: Z/CdPO3BFU4U75w3sjAjZS7oL1oIaDik0hINZ7FE5ak=)
                          2: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
                          3: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: 6eTKKdGwfjksCovoCgJjVzQdV/wNvVbL1nLh6IYzj7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:f2:e9:96:52:b1:0e:4f:1c:49:3f:db:e8:de:7a:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
        Validity
            Not Before: Aug 28 23:00:51 2025 GMT
            Not After : Aug 29 23:00:51 2025 GMT
        Subject: CN=bafaf96436ffc774841a742517b85ae76a8c50d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:e1:46:d8:2c:7e:59:6c:79:73:5b:3d:d6:
                    55:7e:46:36:23:4d:7f:0f:f0:e0:e4:e3:54:84:6e:
                    98:45:2c:ff:ba:8a:ad:1c:4d:61:31:b2:f1:6f:2b:
                    3a:0a:5b:8d:40:d1:bb:4e:39:49:98:f9:2e:a9:35:
                    f1:91:52:ef:8d:4f:61:c9:5c:a4:40:a0:f3:0d:9b:
                    3b:84:8c:6d:c1:2c:0f:f5:6e:2b:a0:87:b9:3e:a4:
                    b0:9d:60:c7:80:79:5e:27:a3:24:1d:79:ce:69:94:
                    9b:d1:df:77:92:1f:14:53:cc:9a:47:4e:9e:ac:72:
                    97:5b:d9:2c:6d:1a:65:21:c4:f9:4c:c5:80:a8:cf:
                    53:85:b5:46:ad:3d:bc:2b:7b:98:b0:b1:75:60:21:
                    0b:98:9d:78:7b:85:bd:f1:56:3a:71:7d:b0:f5:ff:
                    9b:b8:89:db:a4:c6:92:0c:f1:1f:8d:84:31:c5:b5:
                    b6:ab:1a:0b:d6:79:e8:24:5d:ec:2c:e1:ff:4c:0f:
                    bd:9c:cc:2d:5a:4c:94:2d:4c:d7:66:c6:bf:a8:a6:
                    2e:aa:eb:f6:6d:6f:0c:9c:9f:97:c2:5b:d5:ee:8f:
                    c8:80:57:75:bf:51:de:0b:92:ac:f7:08:ec:01:c3:
                    4a:d4:8f:2f:00:9d:c4:26:da:0b:09:66:e0:5e:c8:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:F9:64:36:FF:C7:74:84:1A:74:25:17:B8:5A:E7:6A:8C:50:D9
            X509v3 Authority Key Identifier:
                keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:aa:f5:fa:11:91:6e:9e:2b:fb:4f:e2:66:1a:12:6d:f9:
         19:14:7b:11:9f:35:a0:e1:89:b8:ff:bd:48:18:a7:bf:1c:d2:
         a5:53:3a:d0:27:8f:ae:12:ed:67:e9:b6:b4:6f:4d:eb:75:78:
         79:78:6c:c5:8c:6a:30:99:f0:b8:08:b2:e0:89:91:96:eb:12:
         84:35:7a:cc:70:05:f3:38:64:5f:e1:15:47:21:c9:c3:48:64:
         74:27:af:88:ad:77:36:10:3d:e3:83:9a:dd:b2:7e:27:28:e5:
         ef:3d:8e:24:cb:9e:c2:95:d1:54:a2:24:d5:f9:5f:b3:30:74:
         95:19:50:4d:91:c6:0f:6a:fa:79:93:e0:f1:8c:1b:66:cb:e4:
         32:66:5c:ad:46:63:59:6a:ea:ed:62:68:7a:e9:58:46:3d:4c:
         67:d6:1b:50:12:55:9d:54:8d:25:58:5d:af:d2:19:c7:c6:f9:
         f6:ae:25:0b:ba:32:1d:f9:d4:58:2b:f2:9f:79:0e:ec:7b:d1:
         a3:06:48:e3:5a:89:eb:18:4a:67:fd:41:d0:96:4a:f8:52:2a:
         0a:57:79:86:30:0a:db:0b:55:4d:82:60:c6:9b:2b:58:9d:52:
         47:e9:f0:dd:2b:b7:ec:c8:5b:d4:47:35:bd:28:8f:a6:89:c6:
         24:e7:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----