This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
File:                     wHgEdmsjU5hblxgIi1xnngw-pn8.mft (raw, json)
Hash identifier:          WsE8DxxPwltzU8OiG8x6bKp4sXxqFpz5RiO0Ye9XK/Y=
Subject key identifier:   57:04:F4:C6:42:DD:DC:30:9C:72:FA:4C:29:78:77:DD:C8:C0:D4:D5
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Certificate issuer:       /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial:       01984106AB4B8F591FC0BB56252179B63C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
Manifest number:          15FD
Signing time:             Fri 25 Jul 2025 10:00:12 +0000
Manifest this update:     Fri 25 Jul 2025 10:00:12 +0000
Manifest next update:     Sat 26 Jul 2025 10:00:12 +0000
Files and hashes:         1: JQloxPoQ9afiJp-IoXzHvRWMpm4.roa (hash: J8Wxq2Z9UXMMHjhsUvukCz7EJtE55wrWEedjgrBy+C4=)
                          2: wHgEdmsjU5hblxgIi1xnngw-pn8.crl (hash: 4EBVjWuzGVucEF1kPohKFpPgW9UURx0ozbcqspAoofw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:06:ab:4b:8f:59:1f:c0:bb:56:25:21:79:b6:3c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
        Validity
            Not Before: Jul 25 10:00:12 2025 GMT
            Not After : Jul 26 10:00:12 2025 GMT
        Subject: CN=5704f4c642dddc309c72fa4c297877ddc8c0d4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:ab:2d:55:52:9e:83:81:3b:e6:e3:60:15:
                    79:eb:40:b8:55:9b:63:75:ef:5b:96:ed:b5:a3:83:
                    30:c8:9d:80:8b:92:3a:4a:93:30:c0:d0:5d:91:70:
                    af:f7:87:06:9a:b4:47:73:19:99:73:9f:3a:a2:3e:
                    21:44:4f:dc:9d:8e:5d:64:92:51:a6:5c:e9:a9:08:
                    28:ca:ed:51:08:22:95:5a:e2:d5:f9:a4:66:82:7a:
                    5d:c6:cd:04:ba:50:cc:62:e6:03:62:28:fe:67:f0:
                    01:02:a6:e9:8f:98:dd:fe:3c:7a:03:56:51:40:aa:
                    9e:d5:58:97:6b:fe:7f:9d:c5:bf:0a:40:f0:dd:7d:
                    6c:1a:1f:f2:ba:2c:b3:cf:37:72:0e:20:f8:07:1e:
                    93:59:00:a5:92:96:86:23:b6:9d:8a:5f:73:11:0f:
                    c9:3f:97:12:57:ce:85:9d:7d:a0:87:e2:4a:80:78:
                    a2:1a:cb:b9:a8:10:d7:e3:11:5e:28:f9:ef:48:17:
                    3e:95:fe:2f:b5:a7:11:9b:75:98:b1:59:67:88:9b:
                    c9:4d:f0:00:fd:82:39:93:28:af:8d:e3:93:eb:a7:
                    f6:c0:12:a7:72:52:09:49:49:17:d0:fd:9a:33:f4:
                    33:c0:80:68:45:4e:92:d0:df:73:a1:96:a0:8f:b2:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:04:F4:C6:42:DD:DC:30:9C:72:FA:4C:29:78:77:DD:C8:C0:D4:D5
            X509v3 Authority Key Identifier:
                keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:43:9e:22:e0:8a:86:27:44:5c:a5:69:db:50:ea:a6:99:
         39:90:bf:b7:9c:9c:3b:90:93:3b:c5:d9:98:20:61:64:46:31:
         dc:45:af:ee:3d:a7:f1:3b:e8:f6:52:33:c8:9a:b5:f8:68:61:
         96:34:3d:8e:86:51:1b:b1:78:55:f5:54:83:ff:3c:9b:a4:2e:
         19:c6:a5:47:57:30:03:f6:ca:da:20:c2:8f:f4:ea:86:39:76:
         c6:44:fd:bc:87:be:55:27:1b:a8:29:c1:2e:d3:99:fc:c5:11:
         87:38:7a:5e:7c:0b:78:7d:d0:d1:c6:d5:58:1b:5c:67:6b:7b:
         eb:c3:91:70:42:bc:32:bc:7b:03:5a:7b:08:2a:74:dd:a9:2f:
         af:58:63:02:39:1b:5e:86:45:99:d6:d1:78:67:40:c9:b0:30:
         0c:68:6c:d2:1a:76:20:a1:22:c7:2a:e7:04:b8:c2:6c:a4:72:
         ed:88:19:f0:9d:9b:2c:33:46:86:d3:b6:6d:7d:f8:65:f6:14:
         05:99:5e:b5:1a:22:07:e3:2d:c4:83:8d:ba:c3:2c:44:27:d2:
         54:b8:75:dc:76:65:1f:cf:ea:4b:6d:9f:bc:3f:0f:97:e7:1b:
         24:7c:17:f6:d6:c3:da:01:f1:a2:0c:0f:7e:0f:1c:7a:4b:87:
         94:e4:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:52:38 2025 by rpki-client