This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File:                     0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier:          fVUSJOmvms96VrJMPOyAP63CumQdOC7EQtZPRnxmIao=
Subject key identifier:   1B:F6:8A:25:90:A7:E5:7B:B3:9F:7F:3F:F0:96:51:BA:91:BE:F4:88
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer:       /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial:       019A77B9D70DF12A9F01222DDEB8797A4E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number:          09B5
Signing time:             Wed 12 Nov 2025 11:00:59 +0000
Manifest this update:     Wed 12 Nov 2025 11:00:59 +0000
Manifest next update:     Thu 13 Nov 2025 11:00:59 +0000
Files and hashes:         1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: VusGD5hVhiojNzmcOxFFwAleYoV/UBxo9hNGGVwhTwA=)
                          2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:77:b9:d7:0d:f1:2a:9f:01:22:2d:de:b8:79:7a:4e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
        Validity
            Not Before: Nov 12 11:00:59 2025 GMT
            Not After : Nov 13 11:00:59 2025 GMT
        Subject: CN=1bf68a2590a7e57bb39f7f3ff09651ba91bef488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:59:7d:ab:ab:6e:78:03:78:81:cb:e5:17:
                    92:2c:56:9f:be:d3:2d:19:ed:bd:96:75:d2:b4:b3:
                    e3:5f:53:65:5a:45:29:21:ec:6e:e1:21:94:67:bc:
                    6b:be:78:e2:17:63:56:9c:c5:25:37:ab:ae:69:c7:
                    19:78:54:cb:45:f0:eb:43:13:d6:88:ca:82:db:41:
                    57:ec:a5:76:18:c0:1b:1d:b6:4d:3f:a7:27:51:17:
                    5c:c9:16:2e:90:65:08:07:83:8e:a3:0a:07:ad:4b:
                    51:26:38:86:86:ab:e4:ad:dd:e4:5a:20:f7:cf:30:
                    8c:08:98:af:24:34:50:a7:a7:f9:0f:9d:a9:df:e7:
                    4a:c7:cd:f5:1a:22:be:93:04:13:07:66:64:c2:a9:
                    88:6e:72:73:d8:71:8a:c5:8c:85:28:f4:d8:64:e7:
                    04:90:ed:aa:f5:13:22:a9:b0:f7:1d:6a:32:b0:25:
                    2c:3b:78:d0:f8:ba:96:57:31:19:57:d9:9d:17:6f:
                    bc:9c:35:95:d3:7d:26:e4:91:7b:f8:60:df:0f:e3:
                    69:73:37:9b:30:cb:c0:e7:f0:0a:02:b0:6a:66:7f:
                    a6:82:03:b0:f4:06:03:ec:15:02:45:7a:bc:f1:3d:
                    0e:47:65:d9:b1:85:8f:b1:46:16:9b:b8:26:5c:3f:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F6:8A:25:90:A7:E5:7B:B3:9F:7F:3F:F0:96:51:BA:91:BE:F4:88
            X509v3 Authority Key Identifier:
                keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:84:e4:05:1b:08:40:c1:b8:48:a4:ab:3d:9c:b3:79:41:d0:
         bb:fc:32:d8:e9:40:0d:73:7b:28:28:7d:7d:09:02:91:d4:15:
         33:d6:86:fa:55:d2:8e:96:a0:0b:bb:aa:63:ca:f9:40:9e:bd:
         ec:5f:3a:0f:c7:ea:6e:fc:d8:d3:57:92:eb:23:2f:d1:15:17:
         7d:96:ae:fc:7b:64:ac:ef:0d:54:ee:45:f7:d6:2c:62:9a:7f:
         aa:5d:78:82:35:10:5e:29:33:fa:b0:18:d9:f1:41:9f:16:08:
         42:20:20:3c:ff:fa:71:3a:a7:a3:ee:bc:53:ee:3c:eb:11:7e:
         f9:5e:d7:ce:17:6c:73:42:d9:c7:39:17:52:ac:2d:6e:ca:4e:
         a9:fc:b6:27:88:4b:4a:2e:a4:f9:65:0f:dd:ac:50:cf:84:ff:
         eb:2d:9e:0a:ec:dc:3d:4b:87:4f:4e:79:6c:5b:96:bd:af:46:
         db:0f:d5:d7:1f:39:78:6f:cc:5f:6b:f3:e1:17:65:8d:97:6e:
         54:1d:75:b5:df:5d:64:f7:a4:61:a3:83:e6:97:2e:2d:33:51:
         34:a1:a5:66:85:f3:f8:6f:cf:41:1b:e1:87:b0:e6:b8:e8:94:
         2b:1b:50:00:bd:00:fc:2d:b4:f8:63:67:a3:ab:29:3d:b5:fb:
         91:d1:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----