This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File:                     Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier:          6AfcRIIaOQxsH8XhiGLXp0pA53g0/fIS2OyDci0t+gM=
Subject key identifier:   55:E3:3C:71:64:4B:BC:82:AF:4F:41:94:76:80:5F:0D:4A:00:63:84
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer:       /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial:       019AE3041DD2326B27B4F4F46B33FF74635D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number:          1773
Signing time:             Wed 03 Dec 2025 07:01:29 +0000
Manifest this update:     Wed 03 Dec 2025 07:01:29 +0000
Manifest next update:     Thu 04 Dec 2025 07:01:29 +0000
Files and hashes:         1: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (hash: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=)
                          2: 6aH0GUkty0zRVM49hltz0E26o9g.roa (hash: B/btaQwmZwkS77oTf9pVbleylcjeDQp/znaQQHS+UkE=)
                          3: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: bqNqQEZRtr4gHKEoZohAfZFwNnjnCjZOBT1sj/0f8Ho=)
                          4: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
                          5: Pti_2wHf4nDoTULmHuDpJnb60tw.roa (hash: 6vLb3cXdRGpIGB8yJspOGZTYqcFejvNzXH+8oL9C5OA=)
                          6: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
                          7: fCbpeuPkw7-WeltvV11giyI0D1c.roa (hash: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=)
                          8: yyk6Di2XbNlkRGc89Nu-_03BSyA.roa (hash: fjtXv9Ycls9ttlFxVrAfyjqDfoCq3GWEcLByl3LaF+I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e3:04:1d:d2:32:6b:27:b4:f4:f4:6b:33:ff:74:63:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
        Validity
            Not Before: Dec  3 07:01:29 2025 GMT
            Not After : Dec  4 07:01:29 2025 GMT
        Subject: CN=55e33c71644bbc82af4f419476805f0d4a006384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:c5:02:79:0d:19:20:14:d9:fd:9b:db:b7:
                    b1:ad:95:47:69:c4:e4:5e:44:0b:79:a4:f1:4d:0d:
                    b8:32:fa:20:aa:04:82:e6:24:66:06:ca:8a:fe:7f:
                    be:2f:75:c8:c4:15:ad:de:c4:53:28:c0:05:aa:3e:
                    fa:d2:af:5b:da:40:c3:63:d8:e1:b6:af:50:18:44:
                    a1:d5:cc:92:a9:48:24:64:ab:2d:a3:9c:62:63:1a:
                    6f:32:49:40:04:c6:b0:be:e8:6f:1c:63:50:d1:e6:
                    92:f4:f0:26:85:ce:a4:a9:e3:cc:95:6c:c1:dd:b8:
                    b0:72:bf:47:8b:48:26:72:16:5c:65:e1:3d:e6:9f:
                    c3:3d:fb:6e:fc:c6:f1:cf:45:66:a3:41:24:b6:ec:
                    e8:f9:b7:b3:e2:8b:52:52:85:2a:02:7f:dd:b1:35:
                    45:d7:37:f1:95:17:1a:9d:79:87:0b:29:34:45:98:
                    63:45:1e:ea:51:3f:61:49:03:0c:83:54:05:4b:a5:
                    bf:39:2c:27:ae:07:c0:d1:65:6f:ca:eb:5f:01:73:
                    16:81:0b:ba:72:8c:ee:0c:04:ae:cb:9a:cd:06:5e:
                    50:e5:92:b2:11:7c:c9:3b:e3:c8:3b:e6:76:07:2e:
                    a6:ee:7c:37:ad:71:ee:ad:56:98:17:db:85:be:54:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E3:3C:71:64:4B:BC:82:AF:4F:41:94:76:80:5F:0D:4A:00:63:84
            X509v3 Authority Key Identifier:
                keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:81:fb:08:a3:20:d2:92:b4:24:d7:4c:dc:75:39:5f:14:0e:
         c9:32:a7:81:15:fe:ba:2c:34:1d:19:61:36:18:c0:86:c3:d0:
         cf:ea:7d:e4:d5:81:f9:c3:0f:7d:b2:9b:33:b0:e0:26:86:a4:
         4d:ed:c3:ab:78:e9:11:1c:db:9b:01:a8:6d:30:cc:a8:26:fa:
         e9:76:87:d6:fc:c0:3a:6d:1b:7c:da:a6:05:3e:ad:73:cb:3f:
         2a:88:8d:7c:68:e8:bf:c1:6a:9a:89:2f:f5:fe:da:59:a7:c1:
         a2:73:56:f9:82:92:1d:11:79:89:c6:61:b4:ca:b7:b0:37:6d:
         8b:30:69:bd:99:a4:0d:cd:d4:b9:0c:98:87:94:35:44:c0:e2:
         72:2c:fd:ba:95:e6:99:79:8c:cb:43:b2:af:d6:0a:db:d2:04:
         15:ce:8f:37:68:1d:a3:45:9d:18:cd:d5:cf:b7:94:36:81:c5:
         d9:f2:19:94:2a:6b:91:f9:91:55:02:19:5e:94:15:81:23:3b:
         85:e1:27:c8:d8:53:e7:26:41:12:6e:df:a1:0c:bf:ff:74:5d:
         a8:16:ac:7c:e9:d4:4b:a1:e8:c9:6e:e8:f7:9a:a8:08:90:93:
         66:f9:4d:3d:ea:e4:77:0b:39:84:32:ab:3f:14:bf:c9:a8:9d:
         33:21:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----