This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File:                     0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier:          FmsJnHSRqhci8CHqPk0/IwkzyUDMQYfaKp5cjfjdSro=
Subject key identifier:   5F:80:C9:E5:A8:AF:04:23:E6:E4:EC:B3:65:32:FE:00:30:81:B7:79
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer:       /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial:       019AE93C0D50B2A5814F3A2D2C3A0E4851DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number:          1465
Signing time:             Thu 04 Dec 2025 12:00:18 +0000
Manifest this update:     Thu 04 Dec 2025 12:00:18 +0000
Manifest next update:     Fri 05 Dec 2025 12:00:18 +0000
Files and hashes:         1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: Xre+N1iIplQmwNg9vlBqk97UThHALz7Yg90vNXQ5aQY=)
                          2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
                          3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
                          4: pv2iRcEvGYzf08DLjeydaW_V3IQ.roa (hash: o0ame8S62inoRctHTPezl4cm8Q5eMbsn9LNmNr1Kn64=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e9:3c:0d:50:b2:a5:81:4f:3a:2d:2c:3a:0e:48:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
        Validity
            Not Before: Dec  4 12:00:18 2025 GMT
            Not After : Dec  5 12:00:18 2025 GMT
        Subject: CN=5f80c9e5a8af0423e6e4ecb36532fe003081b779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:a1:82:04:ea:36:6b:ba:91:5c:1a:c2:e3:
                    da:c2:f8:6a:6a:22:17:06:7e:fb:a1:c6:a5:d6:9a:
                    d9:f6:b7:08:aa:cc:96:d3:24:35:b7:61:4f:65:09:
                    ac:80:78:24:2e:3e:6b:b1:54:ff:cb:8e:c7:97:d6:
                    44:87:b4:8b:a7:fe:a4:a2:5e:61:c3:93:0e:7b:ba:
                    8e:6d:e7:69:5d:40:8e:76:c0:72:e2:b2:ce:6a:66:
                    79:a0:50:db:9f:22:8e:6a:19:52:15:0c:4e:b9:6a:
                    0d:53:31:8f:e6:22:b1:3b:44:4d:ab:b7:25:e6:f9:
                    ab:f1:4c:27:5c:10:21:85:89:cb:ab:f0:e6:96:f0:
                    50:cf:37:38:4c:4e:24:da:e3:1e:d2:54:fc:5f:7e:
                    8e:e7:96:a5:44:5b:d8:77:2a:b0:bb:a9:bf:87:42:
                    23:c9:22:e7:f5:b7:55:a4:be:4b:9c:bb:07:82:be:
                    d0:cb:f7:f0:44:5b:d1:f4:30:6a:af:4f:2c:97:42:
                    d2:9d:11:c7:6d:d3:cd:2d:4b:cb:6f:7d:af:f7:61:
                    f5:e3:01:05:bc:44:3a:1b:6f:80:8f:28:c7:bc:d4:
                    af:2c:4a:b3:ef:66:98:6e:ef:84:a5:c7:31:94:16:
                    1c:d0:10:45:76:20:8c:b6:3d:5e:e1:71:72:c7:1c:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:C9:E5:A8:AF:04:23:E6:E4:EC:B3:65:32:FE:00:30:81:B7:79
            X509v3 Authority Key Identifier:
                keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:13:7a:40:b1:00:d7:c2:b5:9d:b9:ca:b7:4c:8f:40:f0:
         2d:1f:df:22:e2:ae:d8:1f:9c:4a:14:88:83:b2:b5:2f:7c:b4:
         32:d3:43:59:10:08:1b:37:34:e6:88:25:16:04:94:7c:c1:6b:
         78:00:7c:9c:c7:e4:62:15:33:ff:c1:83:f5:0d:d9:e1:22:bc:
         eb:52:d7:73:79:19:bf:ab:2b:ab:6a:5e:1f:c6:32:7c:29:7c:
         a0:3b:a6:de:b4:dd:24:ed:27:dd:aa:db:89:6f:16:b4:19:97:
         5b:e2:7b:d4:9e:ed:48:7d:e6:04:91:89:17:1c:d5:7e:61:af:
         04:79:f1:f0:11:5a:11:11:2a:ae:2f:a2:ac:f4:e0:8d:84:ad:
         cb:fb:7e:05:fb:56:05:a6:65:d2:0c:2b:f5:5c:bb:4f:5c:ac:
         4c:26:ce:23:86:13:25:8e:ac:cc:4c:26:2a:17:d7:12:d2:c1:
         da:cc:48:6f:69:4a:0e:bb:50:f6:4b:b0:48:13:38:f0:33:fb:
         78:c0:f5:b3:0c:be:b9:ee:c7:e5:85:30:89:06:0a:f1:0a:49:
         5d:37:97:44:e0:ab:31:b9:4e:7e:98:f6:6c:96:f1:0d:b1:d9:
         ed:0f:06:c4:f0:01:f5:2a:75:28:b9:dd:da:9f:b9:80:fc:f1:
         44:e3:d5:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrpPA1QsqWBTzotLDoOSFHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzIzMTAxYjI5NTk2ZmY0NDJkMzc0OTM3M2I4ZTk5ODMz
NTQ2NzAwHhcNMjUxMjA0MTIwMDE4WhcNMjUxMjA1MTIwMDE4WjAzMTEwLwYDVQQD
Eyg1ZjgwYzllNWE4YWYwNDIzZTZlNGVjYjM2NTMyZmUwMDMwODFiNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQehggTqNmu6kVwawuPawvhqaiIX
Bn77ocal1prZ9rcIqsyW0yQ1t2FPZQmsgHgkLj5rsVT/y47Hl9ZEh7SLp/6kol5h
w5MOe7qObedpXUCOdsBy4rLOamZ5oFDbnyKOahlSFQxOuWoNUzGP5iKxO0RNq7cl
5vmr8UwnXBAhhYnLq/DmlvBQzzc4TE4k2uMe0lT8X36O55alRFvYdyqwu6m/h0Ij
ySLn9bdVpL5LnLsHgr7Qy/fwRFvR9DBqr08sl0LSnRHHbdPNLUvLb32v92H14wEF
vEQ6G2+AjyjHvNSvLEqz72aYbu+EpccxlBYc0BBFdiCMtj1e4XFyxxwyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+AyeWorwQj5uTss2Uy/gAwgbd5MB8GA1UdIwQY
MBaAFNIyMQGylZb/RC03STc7jpmDNUZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzct
NmE2YWY1Yjc0ZDM4LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzctNmE2YWY1Yjc0ZDM4
LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwITekCx
ANfCtZ25yrdMj0DwLR/fIuKu2B+cShSIg7K1L3y0MtNDWRAIGzc05oglFgSUfMFr
eAB8nMfkYhUz/8GD9Q3Z4SK861LXc3kZv6srq2peH8YyfCl8oDum3rTdJO0n3arb
iW8WtBmXW+J71J7tSH3mBJGJFxzVfmGvBHnx8BFaEREqri+irPTgjYSty/t+BftW
BaZl0gwr9Vy7T1ysTCbOI4YTJY6szEwmKhfXEtLB2sxIb2lKDrtQ9kuwSBM48DP7
eMD1swy+ue7H5YUwiQYK8QpJXTeXROCrMblOfpj2bJbxDbHZ7Q8GxPAB9Sp1KLnd
2p+5gPzxROPVnQ==
-----END CERTIFICATE-----