This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File:                     P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier:          FLVRR1IDXaGSKQKw5FJ3vOyx3PfAx7dqlAuqJ5LcH0E=
Subject key identifier:   F3:03:F0:AE:E5:B4:D9:A4:A6:A7:21:4F:D7:6A:2E:9A:76:77:72:F5
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer:       /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial:       019B02C555A7ADF974227CB099373DD53F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number:          07B4
Signing time:             Tue 09 Dec 2025 11:00:45 +0000
Manifest this update:     Tue 09 Dec 2025 11:00:45 +0000
Manifest next update:     Wed 10 Dec 2025 11:00:45 +0000
Files and hashes:         1: 8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa (hash: OYnqa1GBuQcygL8L90eWwKPCUkwvpNVbLAFvlJTFkpE=)
                          2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: Vb0ZIMo2wmU94t7G0VNXLSxNVY9PcCR7pHDSNN9fI0g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:02:c5:55:a7:ad:f9:74:22:7c:b0:99:37:3d:d5:3f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
        Validity
            Not Before: Dec  9 11:00:45 2025 GMT
            Not After : Dec 10 11:00:45 2025 GMT
        Subject: CN=f303f0aee5b4d9a4a6a7214fd76a2e9a767772f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:b0:3d:ed:e0:da:ca:ea:2d:3b:bd:34:13:
                    87:0e:81:53:6e:5d:d0:b4:91:88:4d:1e:4e:e6:95:
                    ee:9c:d4:07:b8:ee:ef:19:7e:69:cf:92:a7:83:2b:
                    c5:02:25:1d:dc:90:19:1b:af:d2:e1:9c:74:86:64:
                    bd:4e:7f:9d:fb:d0:74:6c:a4:17:9f:fb:2b:2b:86:
                    61:b1:15:57:24:57:91:75:16:27:ad:61:de:6d:cb:
                    ff:ca:b0:5f:19:15:f4:0b:bd:a4:19:7d:82:0b:6f:
                    b0:39:10:a5:9d:3f:6c:4a:ed:b3:32:00:a4:0c:3a:
                    d6:b0:7a:bc:c7:a0:a9:71:72:9d:39:c3:02:7f:d1:
                    03:06:68:d1:57:c1:55:3d:ba:69:ad:aa:1d:11:41:
                    2e:d3:df:b0:06:ef:ab:0f:6a:86:ea:ff:2a:db:f3:
                    34:d5:ed:c1:73:65:ce:c0:d1:06:83:60:c8:14:3c:
                    52:f6:38:5e:78:56:19:ad:16:1e:75:45:15:53:67:
                    4a:5e:7f:dd:18:20:66:34:4b:6e:8a:e7:ff:cd:91:
                    5e:82:8e:b9:bb:65:53:30:6b:f4:bf:06:33:18:5f:
                    6f:13:a1:89:ab:a6:f9:7b:07:22:23:67:5d:a2:63:
                    e0:7d:b8:48:13:45:ba:8b:96:ce:5d:de:51:c1:f5:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:03:F0:AE:E5:B4:D9:A4:A6:A7:21:4F:D7:6A:2E:9A:76:77:72:F5
            X509v3 Authority Key Identifier:
                keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:d2:5e:87:10:6a:7d:96:b0:41:16:ce:b0:2c:ec:6d:16:
         dd:70:03:43:74:94:75:21:ff:32:b9:c7:62:ae:36:44:8a:54:
         15:9a:0b:7b:5c:a0:9a:a4:55:3f:05:27:a5:eb:e9:91:45:ec:
         d1:7c:d3:42:28:8a:cf:35:5d:4d:29:2c:8b:e5:c0:31:a0:94:
         25:19:22:cd:1a:6e:62:56:73:4d:3e:79:6a:85:fe:51:e2:07:
         85:41:42:58:22:c3:86:58:0f:c1:ca:2a:79:18:92:51:cc:c1:
         92:28:ba:d9:28:70:c9:fb:5d:ea:28:ff:a3:b7:b4:50:fa:db:
         d4:9c:ca:91:71:2c:44:d9:bc:79:6d:cb:8c:15:ec:1d:41:84:
         6a:f4:f4:01:d1:09:68:f9:0f:77:d5:ce:b6:a7:1f:49:ac:c0:
         41:e0:f7:5a:c3:d2:34:b8:6f:7e:b6:7b:2a:e5:96:cd:16:ff:
         12:85:4a:02:bc:ca:12:b8:af:a0:85:fc:e5:eb:e6:25:dd:e6:
         bf:f5:e4:50:44:88:d8:fd:8c:d4:c5:42:2f:ed:69:cb:c6:51:
         01:7a:15:1d:7a:71:f2:b9:31:20:07:08:b9:45:55:29:a9:21:
         74:da:ae:13:44:34:e5:fc:22:30:bc:b4:b3:51:1f:6e:85:31:
         4a:ba:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:46:31 2025 by rpki-client