This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File:                     NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier:          L8sO0LL66ocXAJCL/+M9wf8QzZK0oqVrafNfcnpSnbQ=
Subject key identifier:   6C:81:31:40:6C:30:BE:69:66:77:B8:15:A5:21:22:02:7B:64:DF:38
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer:       /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial:       019A6C915AA5E4D73F07A4390DC2AE15DEDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number:          171E
Signing time:             Mon 10 Nov 2025 07:00:56 +0000
Manifest this update:     Mon 10 Nov 2025 07:00:56 +0000
Manifest next update:     Tue 11 Nov 2025 07:00:56 +0000
Files and hashes:         1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
                          2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: SnSHbX1J/SqqFaOy9zjO5/vyiEF990xwVCn5IuLuZXc=)
                          3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:6c:91:5a:a5:e4:d7:3f:07:a4:39:0d:c2:ae:15:de:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
        Validity
            Not Before: Nov 10 07:00:56 2025 GMT
            Not After : Nov 11 07:00:56 2025 GMT
        Subject: CN=6c8131406c30be696677b815a52122027b64df38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:9d:2f:7f:86:40:14:2b:d9:be:e2:98:ec:
                    4e:4b:08:a9:34:b4:f5:d6:8f:fb:fb:11:97:81:a3:
                    0b:89:05:9e:bb:dd:b7:a8:9a:b4:3c:5f:96:52:20:
                    bd:88:9e:41:c1:1e:16:e2:8e:a1:4d:99:01:ae:60:
                    5f:9a:07:8d:86:b7:93:d8:97:f3:fa:5e:7f:e7:9f:
                    46:c8:13:1d:74:2e:f0:77:d9:75:0f:13:99:80:84:
                    55:75:9a:0d:35:5b:40:8b:c0:3d:c2:57:1b:bb:22:
                    b4:3e:4b:85:15:9b:74:4d:3e:2a:bd:74:1b:f8:b6:
                    4b:14:ce:61:a8:bd:71:5c:0b:b7:0b:e7:23:b5:c0:
                    ea:53:bf:a6:88:2d:0a:77:0e:69:67:96:44:38:3e:
                    7b:d2:d3:23:d8:45:63:04:42:bf:a2:44:e8:48:c0:
                    1c:3d:5b:7c:62:dd:54:e8:08:c4:ea:dd:6f:49:35:
                    f4:ce:d6:cf:06:1d:36:e8:bd:55:b3:ba:35:3f:a4:
                    ee:20:f4:aa:a6:e5:84:e5:ca:b3:cb:5e:40:5f:ed:
                    5f:74:91:32:e7:30:7c:e8:59:63:40:61:e4:f7:1c:
                    82:e8:70:79:92:84:4f:af:d8:9e:8c:b3:f1:38:15:
                    d2:c0:90:ef:33:fc:7e:c9:27:fe:64:30:cf:1b:06:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:31:40:6C:30:BE:69:66:77:B8:15:A5:21:22:02:7B:64:DF:38
            X509v3 Authority Key Identifier:
                keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:45:62:51:d8:cd:38:01:2a:74:e3:ae:4a:11:cd:7c:f4:
         a7:94:8f:ac:58:f7:a2:f2:10:88:85:d5:18:86:46:78:74:8a:
         3a:21:3b:4b:22:27:85:41:68:33:8d:22:32:52:b9:df:ba:40:
         ac:fd:3c:e7:8f:7e:df:b8:28:58:56:0d:18:29:90:c8:e4:28:
         e8:e8:25:cd:bc:a4:3a:06:e5:b1:d6:a1:4c:98:8d:97:e1:50:
         4e:f8:83:79:b9:73:12:9a:b0:36:f6:51:20:8b:30:30:e0:a6:
         d8:b2:d8:96:ae:e0:fa:31:79:29:18:4b:7d:e5:b0:bf:c5:a9:
         37:e7:99:7e:f1:49:04:93:0c:1b:02:21:58:32:88:0e:c0:72:
         5f:1a:8e:90:4a:97:6c:46:60:89:fb:4d:06:16:16:43:33:ba:
         01:54:d7:36:65:d7:64:28:57:a6:f2:5d:e7:12:24:bd:66:48:
         a5:c1:a7:44:16:ad:cc:64:c9:fa:8a:71:2c:16:d0:49:ef:87:
         06:4e:90:30:54:db:b3:ad:1e:eb:5c:b3:7e:9f:ad:45:23:8d:
         43:3c:8f:53:52:44:14:f6:73:0b:6d:db:8c:8d:18:f7:24:5e:
         0e:15:e1:24:f6:b5:e3:9e:31:b8:93:35:42:b8:58:c3:ab:8a:
         55:25:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----