This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File:                     G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier:          kKzzgJAOEHgx2vW4s+wYkI9OZUynfMKr6Vh35/7qSIY=
Subject key identifier:   47:02:E2:59:14:67:5C:D0:34:20:27:F2:D6:60:E0:89:6B:0E:4C:70
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer:       /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial:       019B066CEFBEE6F053B8E23FA76907996AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number:          176F
Signing time:             Wed 10 Dec 2025 04:02:40 +0000
Manifest this update:     Wed 10 Dec 2025 04:02:40 +0000
Manifest next update:     Thu 11 Dec 2025 04:02:40 +0000
Files and hashes:         1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: 3fLncCjN3b1MqAyqdIpqx8CxxnVFTHVSoBtwarrvJCE=)
                          2: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (hash: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:6c:ef:be:e6:f0:53:b8:e2:3f:a7:69:07:99:6a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
        Validity
            Not Before: Dec 10 04:02:40 2025 GMT
            Not After : Dec 11 04:02:40 2025 GMT
        Subject: CN=4702e25914675cd0342027f2d660e0896b0e4c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:69:c4:a4:42:58:24:96:09:88:5a:e0:e4:
                    69:4c:91:63:d8:ab:c2:4f:c9:0d:af:c9:41:7b:05:
                    e3:b7:b0:3c:10:10:a9:cb:14:c3:25:be:06:20:f2:
                    80:77:a8:7d:a1:17:6d:bc:9a:0f:76:6a:b4:b4:e1:
                    9c:b0:64:54:32:a7:71:fc:a9:99:31:47:56:6b:5e:
                    0b:f3:e4:f6:29:27:dd:b9:78:88:b1:42:2d:da:e8:
                    c6:ca:b9:34:f3:37:36:08:ba:26:08:a4:36:5a:83:
                    92:c9:5a:9e:38:21:f4:ac:b5:7f:d2:a1:ad:8f:d0:
                    70:68:08:bc:ab:70:8e:76:37:1d:22:28:ad:6b:27:
                    31:98:8c:43:cf:c7:89:9b:ae:c6:fc:92:38:94:80:
                    36:a3:5e:cc:f5:e1:3f:01:eb:f1:8d:b8:1b:07:9b:
                    38:04:6c:87:7a:c6:12:47:d1:b6:d7:df:00:81:8e:
                    94:ac:74:57:5f:29:2c:5a:66:94:53:4e:48:f5:25:
                    48:2b:31:a6:5e:86:56:66:7d:c1:bc:0a:94:8e:77:
                    f2:76:42:58:4c:61:9d:13:3c:fe:67:42:c1:0f:02:
                    8a:64:e2:d2:07:02:b9:8f:e8:50:f2:d5:49:c2:73:
                    8a:c6:d8:f4:e9:0a:3d:bf:0e:69:68:66:51:a5:40:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:E2:59:14:67:5C:D0:34:20:27:F2:D6:60:E0:89:6B:0E:4C:70
            X509v3 Authority Key Identifier:
                keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:4b:a0:92:d7:39:05:5c:ba:46:e0:a1:78:0a:d0:bd:69:
         80:41:67:e0:1a:63:55:3d:41:88:c2:80:4b:83:87:57:2a:2a:
         3c:41:a4:25:ff:10:8f:71:e9:2d:64:59:47:0b:c9:07:e1:af:
         a5:de:82:be:bb:11:9b:c2:a6:54:80:56:c7:9d:6a:1c:25:8e:
         3f:5d:67:2c:77:5f:b3:88:34:85:12:45:73:8b:55:d5:9b:9b:
         4e:bd:7a:20:f4:37:76:f0:8e:99:0c:ca:e2:45:4d:fe:6d:ee:
         df:84:ad:34:b5:03:41:52:1a:b6:1c:7d:14:4b:93:6c:a6:25:
         5d:38:02:cc:06:7d:b9:cb:78:ad:71:e4:ea:38:27:d0:52:67:
         6b:2d:8b:1f:39:3c:9e:ac:67:66:f3:d6:d2:10:53:08:b7:78:
         ec:6e:bf:9a:c9:be:0a:65:2c:4e:0a:09:c5:d6:4e:53:e4:52:
         fa:03:58:1e:4c:e5:40:b5:1f:51:27:7e:1a:24:4a:ce:03:55:
         62:82:f0:66:3d:41:b1:d0:63:1a:f3:32:d1:8a:be:ce:2e:81:
         78:21:4f:35:3b:a7:86:dc:4f:ca:2c:23:8d:38:44:9b:22:78:
         70:73:2b:36:49:2f:f1:5d:10:64:43:64:1f:d3:b2:f7:4d:eb:
         27:9c:3c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGbO++5vBTuOI/p2kHmWrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTA2YzMyMjM2OWQ0NDllMTc0ZmE3MzEwNDdiMzM5NzIz
ZmIwMWQwHhcNMjUxMjEwMDQwMjQwWhcNMjUxMjExMDQwMjQwWjAzMTEwLwYDVQQD
Eyg0NzAyZTI1OTE0Njc1Y2QwMzQyMDI3ZjJkNjYwZTA4OTZiMGU0YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLVpxKRCWCSWCYha4ORpTJFj2KvC
T8kNr8lBewXjt7A8EBCpyxTDJb4GIPKAd6h9oRdtvJoPdmq0tOGcsGRUMqdx/KmZ
MUdWa14L8+T2KSfduXiIsUIt2ujGyrk08zc2CLomCKQ2WoOSyVqeOCH0rLV/0qGt
j9BwaAi8q3COdjcdIiitaycxmIxDz8eJm67G/JI4lIA2o17M9eE/AevxjbgbB5s4
BGyHesYSR9G2198AgY6UrHRXXyksWmaUU05I9SVIKzGmXoZWZn3BvAqUjnfydkJY
TGGdEzz+Z0LBDwKKZOLSBwK5j+hQ8tVJwnOKxtj06Qo9vw5paGZRpUDLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcC4lkUZ1zQNCAn8tZg4IlrDkxwMB8GA1UdIwQY
MBaAFBugbDIjadRJ4XT6cxBHszlyP7AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgt
Mjk2YzQyMjI5Zjg2LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgtMjk2YzQyMjI5Zjg2
LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+dLoJLX
OQVcukbgoXgK0L1pgEFn4BpjVT1BiMKAS4OHVyoqPEGkJf8Qj3HpLWRZRwvJB+Gv
pd6CvrsRm8KmVIBWx51qHCWOP11nLHdfs4g0hRJFc4tV1ZubTr16IPQ3dvCOmQzK
4kVN/m3u34StNLUDQVIathx9FEuTbKYlXTgCzAZ9uct4rXHk6jgn0FJnay2LHzk8
nqxnZvPW0hBTCLd47G6/msm+CmUsTgoJxdZOU+RS+gNYHkzlQLUfUSd+GiRKzgNV
YoLwZj1BsdBjGvMy0Yq+zi6BeCFPNTunhtxPyiwjjThEmyJ4cHMrNkkv8V0QZENk
H9Oy903rJ5w84w==
-----END CERTIFICATE-----