This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.mft
File:                     1-1BoM4P484NmM_TUIwrac8yyFc0.mft (raw, json)
Hash identifier:          7lzJjHNdOB8zNNoMCMmCIUNk4Zn4mfW//B3B4BCKFXg=
Subject key identifier:   E9:DE:45:64:3B:10:43:AD:73:F2:7E:CC:BB:14:DB:24:1E:8B:9F:68
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Certificate issuer:       /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial:       01876F7CEE6BBD6E1D5308DDA33D51EEDE46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.mft
Manifest number:          04AF
Signing time:             Tue 11 Apr 2023 08:44:31 +0000
Manifest this update:     Tue 11 Apr 2023 08:44:31 +0000
Manifest next update:     Wed 12 Apr 2023 08:44:31 +0000
Files and hashes:         1: 1-1BoM4P484NmM_TUIwrac8yyFc0.crl (hash: lgqqXxYGCAlja6ROr5httIzVEl1L3hZ5x/SZD5RHbPc=)
                          2: AQ9l8YICv6G1imQ1WjVsjg3ifZU.roa (hash: LmAUKtfOnHJXJON5ZAcUATH9fhTSbd4V04lPGijWLVM=)
                          3: scICPvpxU2aQhOlfA9hLkhrQXlI.roa (hash: fsVMY/SGGhM9malL3twbAd/6OD8ZMvDf7SySJQguoiM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6f:7c:ee:6b:bd:6e:1d:53:08:dd:a3:3d:51:ee:de:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
        Validity
            Not Before: Apr 11 08:44:31 2023 GMT
            Not After : Apr 12 08:44:31 2023 GMT
        Subject: CN=e9de45643b1043ad73f27eccbb14db241e8b9f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:a0:97:35:58:c4:38:2e:d3:04:16:ff:5c:
                    64:d5:2e:d0:56:45:5d:a7:3a:a3:41:0a:96:90:b7:
                    86:5b:aa:5d:2a:03:94:5a:79:3e:7b:97:9f:6e:04:
                    2a:30:34:a1:dd:75:43:32:4b:e2:37:73:f6:2c:ae:
                    78:30:eb:dc:e6:70:ab:d2:c5:3c:d7:8d:28:55:d1:
                    5d:84:65:55:7a:75:17:08:b2:f0:3e:77:e5:1b:93:
                    e7:f8:51:0b:db:e0:17:af:ac:23:86:4c:fb:8e:dd:
                    a3:9b:f5:57:a5:a2:78:62:45:6d:fa:69:2f:b3:aa:
                    11:93:77:f5:f4:ef:00:6f:28:78:c8:bf:70:a7:94:
                    5b:ec:b7:ce:a5:04:12:15:55:4d:bf:8a:1e:7b:8e:
                    01:07:94:c5:fc:7d:fa:cd:e0:5e:50:7a:7e:fa:85:
                    64:43:c0:47:82:19:1a:01:bd:14:34:65:e1:bb:25:
                    bd:1d:c9:5f:92:3d:ff:fe:3b:c3:bc:35:ad:fc:29:
                    e1:c6:cd:e6:8d:2c:b3:57:6f:a2:be:35:2b:b4:8a:
                    4a:46:a1:3d:1d:b0:f2:6c:78:19:66:39:df:62:0e:
                    6f:bc:f7:45:71:36:05:ab:c2:c7:8d:63:ef:b3:2b:
                    e2:c1:b7:34:17:8f:47:59:9e:a7:6d:12:f6:83:9d:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DE:45:64:3B:10:43:AD:73:F2:7E:CC:BB:14:DB:24:1E:8B:9F:68
            X509v3 Authority Key Identifier:
                keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a2:8b:82:dc:c4:f7:4b:d5:03:16:e8:45:63:6f:69:bc:7e:
         c0:87:0a:e9:48:56:b0:15:78:34:7b:70:6e:b4:ef:05:ca:3c:
         de:00:57:ea:76:0b:2c:f4:87:5d:1d:44:07:9f:c6:f5:02:ef:
         39:16:87:d3:95:5f:e7:c7:53:30:1c:ef:0f:db:ab:f6:b8:0a:
         1c:7f:03:7a:21:46:83:9f:36:9e:6d:7e:1f:95:4c:33:dc:c2:
         f8:5d:e2:80:20:4a:b1:5c:0f:b8:7d:bd:f2:23:31:12:02:8a:
         34:49:91:5e:e3:e7:03:68:4b:d9:09:c3:3c:f2:65:ac:73:52:
         22:f3:e7:0e:38:75:03:3f:78:b7:df:6e:44:96:27:9d:b8:a6:
         c8:06:ba:8e:60:f0:52:d0:e8:61:bf:dc:f5:ed:cc:1b:80:e0:
         93:43:c8:12:23:45:ca:04:80:b5:ad:c4:56:2e:3d:71:43:ff:
         26:dd:81:1f:cc:e2:2e:1b:52:80:d3:0f:36:59:d7:42:df:ef:
         04:96:98:3b:0d:9e:a7:2d:b8:6f:20:5c:85:c0:41:14:27:e7:
         72:d9:04:fb:cd:88:21:5d:52:cd:35:b9:01:18:b2:27:0f:2e:
         31:aa:1b:31:62:71:52:3d:ea:8a:5f:78:a7:fc:a4:1e:b5:fb:
         b6:98:23:f1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYdvfO5rvW4dUwjdoz1R7t5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNTA2ODMzODNmOGYzODM2NjMzZjRkNDIzMGFkYTczY2Ni
MjE1Y2QwHhcNMjMwNDExMDg0NDMxWhcNMjMwNDEyMDg0NDMxWjAzMTEwLwYDVQQD
EyhlOWRlNDU2NDNiMTA0M2FkNzNmMjdlY2NiYjE0ZGIyNDFlOGI5ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtWglzVYxDgu0wQW/1xk1S7QVkVd
pzqjQQqWkLeGW6pdKgOUWnk+e5efbgQqMDSh3XVDMkviN3P2LK54MOvc5nCr0sU8
140oVdFdhGVVenUXCLLwPnflG5Pn+FEL2+AXr6wjhkz7jt2jm/VXpaJ4YkVt+mkv
s6oRk3f19O8Abyh4yL9wp5Rb7LfOpQQSFVVNv4oee44BB5TF/H36zeBeUHp++oVk
Q8BHghkaAb0UNGXhuyW9Hclfkj3//jvDvDWt/Cnhxs3mjSyzV2+ivjUrtIpKRqE9
HbDybHgZZjnfYg5vvPdFcTYFq8LHjWPvsyviwbc0F49HWZ6nbRL2g53tZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOneRWQ7EEOtc/J+zLsU2yQei59oMB8GA1UdIwQY
MBaAFPtQaDOD+PODZjP01CMK2nPMshXNMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xQm9NNFA0ODRObU1fVFVJd3JhYzh5eUZjMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvNzI1MDBmLTA1ZjUtNDI2Yi04OGNl
LWM2MmEyM2FmM2Y2Ny8xLzEtMUJvTTRQNDg0Tm1NX1RVSXdyYWM4eXlGYzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NjLzcyNTAwZi0wNWY1LTQyNmItODhjZS1jNjJhMjNhZjNm
NjcvMS8xLTFCb000UDQ4NE5tTV9UVUl3cmFjOHl5RmMwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqKL
gtzE90vVAxboRWNvabx+wIcK6UhWsBV4NHtwbrTvBco83gBX6nYLLPSHXR1EB5/G
9QLvORaH05Vf58dTMBzvD9ur9rgKHH8DeiFGg582nm1+H5VMM9zC+F3igCBKsVwP
uH298iMxEgKKNEmRXuPnA2hL2QnDPPJlrHNSIvPnDjh1Az94t99uRJYnnbimyAa6
jmDwUtDoYb/c9e3MG4Dgk0PIEiNFygSAta3EVi49cUP/Jt2BH8ziLhtSgNMPNlnX
Qt/vBJaYOw2epy24byBchcBBFCfnctkE+82IIV1SzTW5ARiyJw8uMaobMWJxUj3q
il94p/ykHrX7tpgj8Q==
-----END CERTIFICATE-----
Generated at Mon Dec 15 12:01:20 2025 by rpki-client