This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File:                     1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier:          /CN2D/aNHE7OMkcBHB3nEzxM2WI+UqiLeFwEt/AyVfY=
Subject key identifier:   F3:A4:9F:BC:81:84:98:A0:0E:31:31:D6:FA:E2:2C:6E:6F:57:DA:6A
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer:       /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial:       019AECE22AFB4262BF106C4AD4323DCEAA62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number:          0D32
Signing time:             Fri 05 Dec 2025 05:00:36 +0000
Manifest this update:     Fri 05 Dec 2025 05:00:36 +0000
Manifest next update:     Sat 06 Dec 2025 05:00:36 +0000
Files and hashes:         1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: ye+ZYNSjqOtA/AgoiJ/EpqtYoXy/Tx+oBQgV6cTpKiQ=)
                          2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ec:e2:2a:fb:42:62:bf:10:6c:4a:d4:32:3d:ce:aa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
        Validity
            Not Before: Dec  5 05:00:36 2025 GMT
            Not After : Dec  6 05:00:36 2025 GMT
        Subject: CN=f3a49fbc818498a00e3131d6fae22c6e6f57da6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:47:7f:f8:70:11:24:12:62:f0:6a:e3:91:
                    99:83:13:d3:f4:b7:2a:98:01:fe:af:c8:9c:02:43:
                    37:ee:e0:ba:a9:38:bc:c5:87:67:e6:f9:88:9b:f9:
                    ff:6c:07:ac:1d:26:71:98:bb:f9:3a:4a:d5:fb:2c:
                    0b:73:74:c0:70:6f:17:e8:f6:db:98:5b:42:ad:c9:
                    32:34:46:21:e0:a2:30:c1:8c:1d:e8:36:5a:c0:a5:
                    3a:5d:77:87:74:35:02:ec:6e:ab:bc:a8:14:1e:d8:
                    df:75:c9:7e:e1:8f:72:0a:11:d3:bf:13:4f:08:70:
                    f1:8e:fb:6e:df:28:0a:ce:c8:a5:75:0d:99:9a:17:
                    0c:70:de:8a:f0:5c:16:66:3f:04:3b:19:e2:5d:95:
                    b4:38:56:9b:4d:b7:96:a6:7f:c2:80:ea:e4:e5:94:
                    0c:11:89:19:f0:5f:6f:b1:ee:b9:36:13:35:c6:b3:
                    9f:32:42:6f:ae:a6:16:f3:67:45:66:76:ed:3a:e6:
                    c1:9e:e3:28:65:c5:77:d2:a0:10:e9:81:58:91:07:
                    10:c1:b4:8e:0c:b0:6b:cd:14:84:95:c9:ca:c1:53:
                    48:ec:3c:f3:99:bb:f7:3a:c3:5b:b1:4b:6c:cc:9f:
                    f7:96:9b:16:43:f6:4f:f8:a2:a5:2b:90:56:de:aa:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:9F:BC:81:84:98:A0:0E:31:31:D6:FA:E2:2C:6E:6F:57:DA:6A
            X509v3 Authority Key Identifier:
                keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:e9:20:aa:9f:a4:9b:30:0a:dc:b1:84:45:1c:dd:df:02:
         71:a1:56:56:c0:e0:8e:88:3a:15:89:3b:d5:10:47:dd:e7:f1:
         6a:99:76:52:9d:61:73:2a:e0:6f:11:0d:45:8c:5c:68:e4:1e:
         97:66:03:f5:9b:65:d7:8c:20:97:25:0b:e0:68:dd:47:02:6c:
         73:c9:dd:3b:f6:13:31:b2:99:1a:98:da:18:2c:ae:d5:c0:f2:
         c7:fa:f7:6e:af:31:d2:16:1b:73:68:98:ee:9d:ef:14:ef:b3:
         c4:fa:a0:ce:f6:c3:65:27:ea:86:12:1f:d1:b7:b3:03:26:e0:
         06:98:a8:39:79:42:58:b9:af:10:0c:ad:a3:b7:c1:ed:60:c7:
         d5:24:76:58:42:9d:97:3e:7e:7b:5c:98:b1:0e:72:ec:3d:e5:
         39:31:11:17:bf:79:04:44:e6:c2:1c:04:7e:d6:5d:e0:93:70:
         d9:66:ae:f8:1e:65:3b:a3:41:29:4f:97:8a:83:c2:7d:bf:9a:
         be:6a:d5:10:fb:52:d4:d1:67:f9:ea:c3:2d:63:73:8a:9f:92:
         59:ae:ff:14:5e:dc:48:13:62:b1:95:26:92:4d:29:4b:64:8d:
         d8:58:c9:af:2d:2f:6b:a8:99:1e:fc:04:0b:0e:9c:da:63:1c:
         9b:63:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----