This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File:                     1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier:          kQ1fJy1MLPkc7NXTn1xo9od8aKmi6ejYLPzwglwYtr8=
Subject key identifier:   BD:01:0F:F9:BB:79:FE:93:08:07:9A:9F:A4:DF:22:49:38:E9:87:10
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer:       /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial:       019B30E9A2D7A9553A5AD6C25C9B6C1962D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number:          146D
Signing time:             Thu 18 Dec 2025 10:02:56 +0000
Manifest this update:     Thu 18 Dec 2025 10:02:56 +0000
Manifest next update:     Fri 19 Dec 2025 10:02:56 +0000
Files and hashes:         1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: 1FQ7ueN0ytGE4VuMI8kOOybef+xEAtdgV6I3OVIT6So=)
                          2: fd3RLaFFUHr9bPymSzzZKZLcsB4.roa (hash: 3Ik69tfrjCim/XG7P7iIuurAIirGQVM0pHHnR6Ng8tk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e9:a2:d7:a9:55:3a:5a:d6:c2:5c:9b:6c:19:62:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
        Validity
            Not Before: Dec 18 10:02:56 2025 GMT
            Not After : Dec 19 10:02:56 2025 GMT
        Subject: CN=bd010ff9bb79fe9308079a9fa4df224938e98710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:5d:de:d3:31:45:91:21:79:11:80:0c:4e:
                    75:84:45:90:37:0d:1f:23:5f:04:38:07:7c:86:7e:
                    31:3d:4f:13:fe:c5:df:29:24:ab:69:a3:db:ce:e1:
                    04:40:ff:88:fc:63:34:02:fa:f3:08:b2:4e:f8:94:
                    53:61:29:d5:78:5a:24:85:fe:0b:c3:d2:f6:e1:49:
                    08:1a:8b:ee:75:ba:06:a8:f0:82:ac:c4:c5:23:2c:
                    ae:60:ce:64:20:91:e4:42:4c:f4:c3:b6:1b:6b:49:
                    11:18:32:13:4d:f3:e1:cd:d0:e2:fa:f7:16:bd:7f:
                    99:9e:be:c8:62:7d:f3:61:b3:c7:3f:63:0f:2a:98:
                    5e:64:d3:37:72:ae:8d:ff:ea:35:ca:50:12:83:c5:
                    27:46:db:88:c0:ff:cd:35:6d:da:6d:1f:a8:89:87:
                    1e:1f:bd:28:07:41:ca:e9:10:2d:75:12:52:3c:6d:
                    7e:34:2e:b8:44:75:ef:4e:68:c6:9d:cf:bc:44:57:
                    a8:67:c9:d6:a0:ce:bb:60:0c:31:c0:57:73:b5:7e:
                    f7:b9:23:3a:e5:95:73:e6:b4:dd:20:92:2c:68:23:
                    d8:3b:6f:e1:36:c3:0d:93:cb:17:7d:0c:ff:a7:4c:
                    29:8a:9f:f8:17:7e:e8:5b:14:e6:f9:fa:24:fe:ca:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:01:0F:F9:BB:79:FE:93:08:07:9A:9F:A4:DF:22:49:38:E9:87:10
            X509v3 Authority Key Identifier:
                keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:91:9f:88:31:46:bd:be:43:ff:ec:13:a2:f3:f6:3f:68:
         5c:a1:7d:74:db:2f:08:81:42:59:83:bb:3d:c5:14:2f:03:26:
         9b:a7:54:cb:7e:57:eb:64:8e:dd:e3:b5:59:c8:a4:aa:1e:95:
         b8:8f:75:51:f1:9c:bc:73:7e:30:12:2c:8c:60:10:39:0f:51:
         8c:c3:39:33:fb:ff:6b:19:76:c2:0f:f9:fb:5c:86:c8:ed:cb:
         2f:0f:bb:56:03:5b:4d:54:b7:c1:0c:65:6e:46:83:a6:3b:fe:
         e8:a3:2a:a6:1b:2d:ff:0d:ed:6f:eb:e7:17:69:8f:64:ea:08:
         34:8a:94:16:28:f3:f7:8d:1a:8b:e9:13:6b:b8:6b:b3:79:91:
         01:fb:6c:3e:79:18:da:b9:00:bd:35:1c:a5:34:f1:e8:cb:56:
         fb:5b:76:9b:82:49:eb:7f:fa:4c:f7:1f:c6:98:cd:c5:b9:c6:
         3d:c3:5a:15:34:00:ea:64:30:af:e5:98:db:31:d2:a9:79:54:
         19:e4:59:bd:6d:c5:ca:7e:f0:6b:6b:72:59:58:47:2c:24:9e:
         b4:c0:b3:ab:65:62:39:42:49:41:36:ce:2c:c6:60:3e:40:99:
         c2:cf:87:6c:74:f7:b1:f8:c2:5a:a6:3b:a7:aa:04:0a:f3:89:
         04:7c:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----