This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File:                     _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier:          HolmBr2ng1qB0oiVyZ69jKc8WOVj7rMqxLlBkQHNYIo=
Subject key identifier:   E7:31:B2:48:B3:F5:A2:C7:AB:BE:09:B5:E6:9F:30:0A:71:5F:E8:FF
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer:       /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial:       019B3532238813EDFFE1079BC3CFA46195B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number:          1785
Signing time:             Fri 19 Dec 2025 06:00:36 +0000
Manifest this update:     Fri 19 Dec 2025 06:00:36 +0000
Manifest next update:     Sat 20 Dec 2025 06:00:36 +0000
Files and hashes:         1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
                          2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: WSdmxW6mktdSQyTbSsD3kbYmTuhEB1E1j/AIaJURnMs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:23:88:13:ed:ff:e1:07:9b:c3:cf:a4:61:95:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
        Validity
            Not Before: Dec 19 06:00:36 2025 GMT
            Not After : Dec 20 06:00:36 2025 GMT
        Subject: CN=e731b248b3f5a2c7abbe09b5e69f300a715fe8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:06:47:d0:9c:15:1e:8a:03:eb:30:aa:ea:
                    ba:0a:fb:76:b5:d8:3b:16:ef:dc:34:85:12:e4:4a:
                    bc:18:cd:98:e3:52:5d:a6:8b:a1:4f:30:75:d8:ad:
                    8d:4b:7e:a8:22:4c:dc:19:36:48:4d:a4:5e:9b:cc:
                    07:0b:f4:60:5c:28:94:a8:6c:c8:bd:e4:ac:4b:55:
                    c8:6d:8a:f3:fd:e9:69:92:23:27:07:78:3b:d4:26:
                    65:07:08:d8:4f:fe:51:20:c0:2a:53:0b:17:0e:53:
                    45:56:ea:df:84:3f:3f:7f:7a:84:c4:66:0e:72:ea:
                    2b:c0:4c:15:61:2c:20:24:f5:50:86:42:bc:ee:26:
                    a7:54:a1:c0:1f:5a:20:ae:e3:06:3e:12:8a:14:02:
                    c8:24:88:49:09:28:7f:75:d7:d7:5f:23:96:93:25:
                    7e:b7:c3:b6:d6:d7:2a:da:6b:27:c8:11:c1:be:2f:
                    c2:d6:35:c9:6f:01:b7:f8:2f:9b:ce:28:6f:7e:d2:
                    44:0e:86:dd:8d:49:c4:d0:79:e4:1b:fe:4d:78:b6:
                    d8:19:e9:98:a3:a0:3b:e3:fa:67:85:6c:1c:a7:8f:
                    01:76:1e:43:02:21:23:f1:8c:72:fc:6d:aa:f8:f2:
                    82:c0:bc:d2:75:3c:e6:2b:99:97:27:55:9a:eb:06:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:31:B2:48:B3:F5:A2:C7:AB:BE:09:B5:E6:9F:30:0A:71:5F:E8:FF
            X509v3 Authority Key Identifier:
                keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b0:01:73:3e:77:63:62:05:37:d2:bd:29:ae:15:b8:4f:d5:
         78:9b:cd:41:a9:bc:de:f1:aa:02:0c:9f:14:d9:ae:aa:58:16:
         d9:a1:55:cd:f8:35:41:c6:bd:e4:cc:01:5f:bb:7f:94:6b:2b:
         eb:1b:c1:fd:7a:d5:85:44:be:91:b2:0a:8b:39:20:1f:85:7f:
         cd:a0:a8:7b:92:4b:38:f6:cc:fd:ea:24:a7:8b:7b:5c:1d:ef:
         09:50:36:94:f3:2a:9e:1d:1e:55:f2:fc:d3:53:fb:c8:c3:69:
         dc:60:7a:2e:29:22:f6:86:d6:cb:ce:53:a0:61:07:14:0a:64:
         45:7d:84:80:cc:97:d5:cc:bb:b8:c5:54:27:55:9d:63:92:2a:
         42:d6:c8:fc:28:76:25:7c:7f:cd:8e:46:45:fc:92:c0:92:b8:
         fe:a2:16:ce:fc:69:5b:3f:27:6a:8d:35:19:c4:e2:56:5d:af:
         6f:68:cc:64:7d:33:d2:7e:7d:dd:3d:48:97:58:1f:04:4a:bc:
         21:9d:ff:eb:2d:33:bd:b7:54:0f:3d:e7:cc:3a:8b:84:8a:97:
         ef:b3:99:55:21:1e:0b:1c:ce:5c:5e:2e:6d:48:bd:df:e3:bf:
         9e:e0:b2:cc:fa:1e:17:7f:a6:77:c5:6c:2f:e6:8b:50:4b:5b:
         8e:81:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:05:18 2025 by rpki-client