This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
File:                     XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json)
Hash identifier:          nRKJkfSiF8Pyp5TxikDITYrCxz1cHypQtHmFDNf3q0k=
Subject key identifier:   78:75:F0:BD:F0:0A:74:2C:4E:E0:61:DA:89:EC:DF:C7:B0:46:3D:69
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Certificate issuer:       /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial:       0198A272550B791B059A74D9F4716D2D136B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
Manifest number:          1646
Signing time:             Wed 13 Aug 2025 08:00:58 +0000
Manifest this update:     Wed 13 Aug 2025 08:00:58 +0000
Manifest next update:     Thu 14 Aug 2025 08:00:58 +0000
Files and hashes:         1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=)
                          2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=)
                          3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=)
                          4: AVnx-FGQOCAK5RnaQADitDAO5hM.roa (hash: wCuFWWt6WOwIf0nZWJf9m4qBBL2Jw9B2DHBHaYoTQq0=)
                          5: FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa (hash: d2MgEpCCzfC5F2sJAzB1xCta9zKOCk/DnqSVe+ZZziw=)
                          6: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=)
                          7: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=)
                          8: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=)
                          9: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=)
                          10: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=)
                          11: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=)
                          12: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: Du1XFu1Jr8ih4/pbCUD4qoXvpMfy2Vs5L07TxRq6Wkg=)
                          13: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=)
                          14: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=)
                          15: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=)
                          16: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a2:72:55:0b:79:1b:05:9a:74:d9:f4:71:6d:2d:13:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
        Validity
            Not Before: Aug 13 08:00:58 2025 GMT
            Not After : Aug 14 08:00:58 2025 GMT
        Subject: CN=7875f0bdf00a742c4ee061da89ecdfc7b0463d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:e1:81:2b:68:74:1c:bf:20:37:35:f4:7f:
                    49:36:d6:50:31:ad:63:6b:73:b6:d1:bf:75:8f:da:
                    1a:6f:fa:8d:4d:8a:57:b6:26:9e:ae:b1:56:f6:f2:
                    1c:1f:70:f3:cd:9b:ae:b6:48:4a:81:e5:68:d4:0f:
                    83:cd:f7:a4:e8:69:ad:b1:21:51:ae:15:2a:c6:bc:
                    05:23:d0:4d:e8:5e:3a:37:93:ae:75:16:6c:73:fe:
                    e8:6c:79:da:5d:e6:32:ce:c6:a2:6c:2c:2b:1a:b0:
                    ff:e9:e0:7f:e5:af:8d:57:87:87:25:18:cc:6f:8a:
                    27:4a:17:bc:f5:b0:a0:07:92:c9:4c:fa:bb:70:a1:
                    e1:06:bd:b6:a1:84:7b:a4:72:86:56:bc:7f:06:18:
                    29:4a:8f:9c:e6:8f:b0:92:56:2e:9b:9f:ab:d4:d6:
                    29:4a:92:3e:35:28:41:7d:24:78:8b:49:56:c6:23:
                    9a:8f:63:d1:86:50:6f:a5:9e:01:40:44:0c:f6:b7:
                    fa:72:65:26:64:17:63:c4:98:74:7c:4d:2e:97:e7:
                    16:44:d8:0f:94:50:cb:23:ed:14:10:29:54:31:d3:
                    06:10:8d:c2:16:2c:77:df:db:8f:39:74:d7:a6:8e:
                    6c:50:40:80:eb:3e:1c:e9:ac:06:fa:b8:0c:cb:3e:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:F0:BD:F0:0A:74:2C:4E:E0:61:DA:89:EC:DF:C7:B0:46:3D:69
            X509v3 Authority Key Identifier:
                keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:c7:44:c4:37:b0:a3:59:76:60:83:81:d1:f3:bc:04:28:
         2b:d2:c8:c3:12:73:31:04:4a:91:bb:21:87:f8:aa:73:81:5e:
         a9:84:7a:6c:08:26:a9:a1:c9:95:cd:60:ca:09:2b:99:94:7e:
         fd:2e:a1:2d:5e:d4:03:d5:42:1f:7a:03:48:83:31:bd:22:6b:
         20:ae:d3:e6:6e:d0:0a:37:b6:44:5d:ab:d3:03:df:c9:f4:4e:
         3b:43:ca:9b:ef:2f:5d:ee:af:f3:42:51:c2:ec:83:28:26:59:
         33:ed:62:05:a5:4d:93:a1:62:f1:a4:b5:87:fa:13:79:b5:33:
         74:27:36:ae:35:ad:cf:57:71:56:77:80:96:b6:9a:fb:da:fb:
         34:43:47:cf:89:6a:95:ff:23:bb:f9:81:61:02:9b:22:22:33:
         9b:39:ec:7c:68:0e:56:95:7b:6a:1d:3b:4a:ba:29:c5:9a:76:
         ff:fa:1e:7a:39:e1:49:fc:fa:bb:05:3b:a6:3b:b3:4f:26:b5:
         7e:83:49:56:37:2a:6f:2b:e6:90:a4:86:b6:cb:6c:f0:b9:7d:
         16:67:54:7c:c1:1a:8a:72:30:a7:1f:be:36:2f:43:9b:47:01:
         1d:4a:c1:95:f9:81:96:7c:15:a1:93:42:69:01:07:04:d3:8a:
         06:b4:13:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiiclULeRsFmnTZ9HFtLRNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0
OTdhZjAwHhcNMjUwODEzMDgwMDU4WhcNMjUwODE0MDgwMDU4WjAzMTEwLwYDVQQD
Eyg3ODc1ZjBiZGYwMGE3NDJjNGVlMDYxZGE4OWVjZGZjN2IwNDYzZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA197hgStodBy/IDc19H9JNtZQMa1j
a3O20b91j9oab/qNTYpXtiaerrFW9vIcH3DzzZuutkhKgeVo1A+Dzfek6GmtsSFR
rhUqxrwFI9BN6F46N5OudRZsc/7obHnaXeYyzsaibCwrGrD/6eB/5a+NV4eHJRjM
b4onShe89bCgB5LJTPq7cKHhBr22oYR7pHKGVrx/BhgpSo+c5o+wklYum5+r1NYp
SpI+NShBfSR4i0lWxiOaj2PRhlBvpZ4BQEQM9rf6cmUmZBdjxJh0fE0ul+cWRNgP
lFDLI+0UEClUMdMGEI3CFix339uPOXTXpo5sUECA6z4c6awG+rgMyz5cAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh18L3wCnQsTuBh2ons38ewRj1pMB8GA1UdIwQY
MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut
MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3
LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMDHRMQ3
sKNZdmCDgdHzvAQoK9LIwxJzMQRKkbshh/iqc4FeqYR6bAgmqaHJlc1gygkrmZR+
/S6hLV7UA9VCH3oDSIMxvSJrIK7T5m7QCje2RF2r0wPfyfROO0PKm+8vXe6v80JR
wuyDKCZZM+1iBaVNk6Fi8aS1h/oTebUzdCc2rjWtz1dxVneAlraa+9r7NENHz4lq
lf8ju/mBYQKbIiIzmznsfGgOVpV7ah07SropxZp2//oeejnhSfz6uwU7pjuzTya1
foNJVjcqbyvmkKSGtsts8Ll9FmdUfMEainIwpx++Ni9Dm0cBHUrBlfmBlnwVoZNC
aQEHBNOKBrQTCg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:29:12 2025 by rpki-client