This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File:                     1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier:          Qa5PokyCZkkj7BMQSm3dEsTg1LnEbJS7KO0Aw4MgTyU=
Subject key identifier:   CC:76:70:76:D7:34:A5:25:C8:3B:46:A3:69:6B:6E:68:09:7C:AD:C0
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer:       /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial:       019B21E23D835CD08437B94435CD64646CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number:          177A
Signing time:             Mon 15 Dec 2025 12:00:33 +0000
Manifest this update:     Mon 15 Dec 2025 12:00:33 +0000
Manifest next update:     Tue 16 Dec 2025 12:00:33 +0000
Files and hashes:         1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: 8J92H4VevPA+tTd+RJ59zwo1QsUmX/q1SR97cBbFjjg=)
                          2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:e2:3d:83:5c:d0:84:37:b9:44:35:cd:64:64:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
        Validity
            Not Before: Dec 15 12:00:33 2025 GMT
            Not After : Dec 16 12:00:33 2025 GMT
        Subject: CN=cc767076d734a525c83b46a3696b6e68097cadc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:65:45:f5:35:99:12:1f:39:6e:21:e3:f4:
                    c5:41:98:ca:d7:1f:9d:ac:d1:8c:c7:54:31:84:72:
                    97:16:82:66:22:ef:7a:b8:f3:8f:cf:68:fc:96:e3:
                    c0:aa:bd:46:09:f7:66:5e:35:43:46:f1:91:36:e5:
                    4f:7e:70:92:3b:c9:cc:99:d4:4e:c4:81:d4:18:10:
                    1e:97:a8:d3:cc:ba:5f:61:af:9c:35:eb:87:46:88:
                    4f:5b:f3:71:e7:98:ac:4f:74:3d:06:8a:04:7a:d3:
                    07:9d:70:22:50:d5:9b:dc:75:59:65:d5:ee:b3:dd:
                    ee:19:41:b6:d0:36:41:f8:94:6b:cb:3f:c6:5d:f7:
                    ca:d6:1c:c3:7d:3b:44:69:f6:dc:e0:85:41:b6:80:
                    a3:63:0b:6e:e6:84:5d:57:4b:f9:62:fb:aa:5f:e5:
                    8a:5b:11:0e:d8:84:73:d5:80:78:2b:92:f6:a9:d8:
                    f7:6b:af:79:60:4e:55:e0:03:9d:45:19:90:e0:26:
                    e0:87:df:1d:67:23:56:06:2c:aa:57:a9:bf:57:11:
                    16:42:88:87:c8:44:18:f9:aa:60:00:81:17:2b:59:
                    b6:fc:9f:d0:73:78:ad:b4:48:92:38:d7:b6:03:da:
                    7d:1b:8b:8d:d0:b9:17:bc:38:f7:bd:03:9b:c0:17:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:76:70:76:D7:34:A5:25:C8:3B:46:A3:69:6B:6E:68:09:7C:AD:C0
            X509v3 Authority Key Identifier:
                keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bc:44:b7:08:b3:9e:7b:ce:03:ca:42:b4:2f:69:4e:8e:5a:
         f7:6b:cd:cb:20:cf:6e:3c:97:38:37:03:8f:cc:83:d8:ba:df:
         5c:89:4d:97:4c:04:88:e9:eb:ad:0e:2b:45:61:f4:a0:da:2d:
         18:02:b1:23:ab:f4:a5:06:cc:17:dc:6e:83:c6:cd:a6:12:24:
         9b:7d:d1:00:ac:9c:ed:85:61:2e:f4:82:83:6b:3f:8f:b5:9b:
         79:e7:c9:ea:6f:25:e5:fa:6c:19:17:68:7a:ad:12:a8:a4:de:
         e3:5e:2a:7a:e6:5e:09:e4:22:89:61:48:1d:4e:fb:ce:ea:7d:
         d1:e0:19:76:8d:34:0b:7d:85:df:e4:f3:89:1b:e6:42:42:29:
         ae:9c:96:0a:e4:6f:11:db:32:26:18:4c:fd:ba:ef:47:8c:f6:
         cf:16:30:07:dc:d5:ba:0b:39:91:83:dd:2b:74:69:bc:13:a5:
         1c:4b:9d:5e:cc:30:93:a6:92:8f:55:6a:a7:2b:e4:d3:d9:f7:
         56:77:18:5d:da:48:0f:fa:c1:7c:c0:63:9d:4a:f7:07:e5:e9:
         5a:42:d7:d0:e3:0e:10:4e:d8:79:25:a0:c1:58:b1:32:7c:40:
         bd:75:4a:e4:7e:eb:66:f2:3d:b1:95:81:34:b4:ce:fb:f1:63:
         8e:e5:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----