This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File:                     xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier:          S5mlwQy3bTUcIlfAnP67HlavLLw3mkIouZSFnH2u1zI=
Subject key identifier:   83:7F:5D:B3:0F:5E:2E:2A:49:18:78:EC:A6:B7:25:2A:CF:A2:87:93
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer:       /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial:       019ABF2E1A371E594628AE6E42EFBF618C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number:          07C8
Signing time:             Wed 26 Nov 2025 08:01:00 +0000
Manifest this update:     Wed 26 Nov 2025 08:01:00 +0000
Manifest next update:     Thu 27 Nov 2025 08:01:00 +0000
Files and hashes:         1: 1RxiuQQEE3hYvCnKLXbQqvZScn4.roa (hash: Fco0LOIT6Jp6IN6bV0QpMxndj/V7V5a5vCdUbYOcT+0=)
                          2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: XSuNMV8XkKJMVqgHN7CqiuDHZLTvtXLMOhe9IbenS+c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:bf:2e:1a:37:1e:59:46:28:ae:6e:42:ef:bf:61:8c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
        Validity
            Not Before: Nov 26 08:01:00 2025 GMT
            Not After : Nov 27 08:01:00 2025 GMT
        Subject: CN=837f5db30f5e2e2a491878eca6b7252acfa28793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:7e:d5:a4:07:82:c5:ef:04:da:d9:31:c5:
                    73:64:ad:8f:61:c6:fc:95:35:23:3a:a6:24:89:2f:
                    d1:cf:d1:e7:b6:86:f0:f0:77:30:32:8d:48:96:a4:
                    27:67:69:75:23:88:72:6b:ff:a5:04:11:23:3e:19:
                    23:0d:7d:43:41:32:1e:28:f6:36:48:7c:6b:b1:fd:
                    e1:98:fe:25:a9:e1:60:1a:c3:a7:b8:e5:05:1a:04:
                    98:26:40:b0:52:6e:f1:4a:0f:ca:35:74:82:54:b0:
                    09:4d:b3:01:ac:41:9f:4e:0a:6c:87:4a:5e:a5:dc:
                    78:05:99:c6:fa:36:bd:75:55:ec:d5:23:20:40:e9:
                    5d:e7:15:0c:fd:d5:a7:91:7b:29:e0:2d:69:65:4d:
                    28:fa:8b:e8:a3:6f:f5:a8:40:4a:b7:a1:43:29:fe:
                    a4:d8:e8:14:44:36:d3:db:01:89:a4:59:97:8f:96:
                    a9:43:41:dc:64:b5:1e:b3:63:6e:fc:06:03:10:8c:
                    99:7c:57:75:d9:29:f9:2a:40:a9:d4:7b:f4:27:af:
                    29:4b:9e:cf:d8:14:8b:44:d7:e5:1f:56:4d:81:a7:
                    6a:3b:0f:db:e4:7b:5b:78:8a:8e:d5:bc:3f:9e:22:
                    b2:ed:92:53:85:5d:be:7c:98:16:f6:df:c0:68:da:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:5D:B3:0F:5E:2E:2A:49:18:78:EC:A6:B7:25:2A:CF:A2:87:93
            X509v3 Authority Key Identifier:
                keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:22:df:92:f8:f5:c9:6c:aa:b1:1b:64:53:a1:9f:70:f5:
         b7:12:83:f9:51:ad:66:b6:27:55:f3:bc:8a:4c:58:03:af:fd:
         1a:20:8c:4e:91:47:76:63:bb:b3:9c:e6:b7:fb:bd:69:d2:3f:
         1a:9c:51:d5:44:c0:67:4b:b3:6a:5b:53:71:71:eb:4a:87:8c:
         c7:85:a6:f9:85:62:4c:5f:52:ef:19:22:94:2a:3e:71:aa:9e:
         ae:61:18:db:28:3b:f1:0e:30:09:00:2e:ec:f0:91:d6:26:03:
         b7:89:06:2d:b9:ea:b2:a7:b6:58:5a:40:66:a1:0e:6c:0b:3b:
         e6:3c:a1:a7:f6:a8:80:91:55:ba:cf:9a:66:d9:ad:25:6c:1b:
         89:4e:1d:0c:62:99:0d:f8:02:a8:3f:c4:c1:0a:de:b1:aa:a7:
         4b:5d:d6:b7:43:6a:a1:ff:c0:07:2d:f0:22:50:8c:73:47:35:
         ab:19:8a:78:0b:e1:5f:58:dd:46:c7:ad:2b:ec:94:e9:24:8a:
         8e:2b:df:0c:25:04:16:b6:91:88:d8:84:39:6f:0c:be:e2:4d:
         59:3a:fc:d3:2e:17:aa:f9:41:31:41:18:8a:a8:2d:c6:18:8b:
         81:7e:cc:5b:40:70:3e:ba:75:87:a8:0f:af:b5:0f:e2:3e:ab:
         d2:67:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----