This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
File:                     hGhM2vJd5AvvwejkIoWo1ew4kEc.mft (raw, json)
Hash identifier:          jv8bUZH1C6ulxAzuRsoERhum9J8hYb9ZohRe9jBg1V0=
Subject key identifier:   61:29:7E:54:D7:9F:8A:F4:68:A3:C9:EA:9A:D5:5A:10:1A:3D:F5:9C
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Certificate issuer:       /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial:       0199E185ABD034310A979130E9F6499BD1D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
Manifest number:          04F2
Signing time:             Tue 14 Oct 2025 07:00:57 +0000
Manifest this update:     Tue 14 Oct 2025 07:00:57 +0000
Manifest next update:     Wed 15 Oct 2025 07:00:57 +0000
Files and hashes:         1: hGhM2vJd5AvvwejkIoWo1ew4kEc.crl (hash: 7maBchbQ2PuVwGKb3WC6rkAsqP/XaWYVJITg3XoYZ0I=)
                          2: oidwYZW8G2o74OS_a_nCcJCpjCg.roa (hash: ogxgsB9YER6I/w+iNtW/Wqu1gf3XIhY2x4sxgGoaIJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e1:85:ab:d0:34:31:0a:97:91:30:e9:f6:49:9b:d1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
        Validity
            Not Before: Oct 14 07:00:57 2025 GMT
            Not After : Oct 15 07:00:57 2025 GMT
        Subject: CN=61297e54d79f8af468a3c9ea9ad55a101a3df59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:e1:80:90:65:5e:29:02:bd:07:9d:e6:e1:
                    1e:8b:48:2f:c9:ca:44:aa:dc:1b:10:9a:3c:c5:32:
                    c9:19:c3:d5:0f:ff:32:70:e6:e0:b0:cd:45:3f:89:
                    ad:80:18:06:1d:40:8f:3b:03:06:75:54:a5:f3:77:
                    b3:24:b4:6b:d0:bb:3b:55:2f:97:89:f3:a2:78:ad:
                    66:c3:53:7b:28:7b:58:85:83:3b:e6:7d:cc:0e:a6:
                    94:7e:2f:e5:b5:16:48:ad:89:9d:d6:6d:c9:69:43:
                    96:b9:49:26:39:f9:26:aa:ac:e2:29:81:be:d5:f0:
                    77:2c:8f:9a:d8:be:e1:ec:3f:4c:86:ac:c9:bc:8c:
                    ac:22:75:e5:09:2d:c0:0c:8c:c0:ba:66:38:b0:92:
                    fb:12:35:a5:56:4b:ad:c6:37:61:0a:3a:6a:fb:81:
                    ce:f2:27:5f:12:e1:6c:8f:50:46:61:c4:7c:49:ee:
                    36:0c:b8:7a:21:df:ec:b8:47:1b:ec:77:79:f9:f3:
                    b6:30:10:b5:e6:03:62:0a:cd:73:d9:81:43:20:62:
                    3e:41:73:ae:f2:aa:f6:cb:06:3c:f7:ba:12:80:96:
                    4e:c6:c0:d5:2b:57:47:04:80:dc:cb:f6:2c:19:4b:
                    7e:4f:e4:7b:d7:7f:da:0b:2e:9e:e2:ef:50:02:7f:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:29:7E:54:D7:9F:8A:F4:68:A3:C9:EA:9A:D5:5A:10:1A:3D:F5:9C
            X509v3 Authority Key Identifier:
                keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:c9:c1:4f:21:8e:46:2b:e0:c5:69:b3:ca:03:a4:a5:2d:
         52:99:de:b6:2d:f5:72:84:b3:76:eb:6c:15:39:8a:c7:72:e6:
         06:73:8c:0e:a5:5f:fc:a3:41:fd:21:d2:6c:be:40:4b:9c:0a:
         22:64:9d:09:61:c0:8a:65:06:68:a5:37:cb:f4:68:19:f0:df:
         73:c9:d0:e6:f4:31:e9:4e:07:c0:80:9f:28:38:c4:83:8d:42:
         13:2c:87:38:18:2f:f1:8f:8f:d6:c5:2c:7d:be:9b:b9:a6:5a:
         38:32:e3:09:9f:f3:44:c4:4f:0f:b8:14:cc:2e:25:19:5e:16:
         ed:7a:90:66:91:c1:12:dd:4d:23:33:63:b5:3e:49:b8:e4:cd:
         d3:1b:de:0e:db:fc:9d:ff:12:86:81:6e:ba:d9:c9:77:e4:04:
         e7:f4:19:f5:85:0c:b9:75:cc:8f:b3:a5:16:0c:ca:16:b2:95:
         42:43:53:4a:1e:07:0d:62:73:7d:5a:60:66:1e:6f:10:f9:11:
         69:d5:cf:87:92:30:c2:99:19:82:3d:b4:b2:c2:6f:04:7a:80:
         fb:8e:a1:05:97:80:27:75:c0:86:3f:69:bb:92:5b:56:4b:67:
         c5:45:0c:44:d9:c7:18:6a:8f:be:a7:e9:9a:68:90:61:a5:e4:
         98:98:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----