This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File:                     79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier:          NO8tRfdJBWICl/kWp6eK2IiDwEoTRE6D/8hlgh7ArvQ=
Subject key identifier:   82:0C:15:06:04:8E:DE:06:5B:FA:67:27:53:CF:64:4E:89:85:9C:3F
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer:       /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial:       019AA0478AC45067D32A81F277256E5F8C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number:          160E
Signing time:             Thu 20 Nov 2025 08:00:34 +0000
Manifest this update:     Thu 20 Nov 2025 08:00:34 +0000
Manifest next update:     Fri 21 Nov 2025 08:00:34 +0000
Files and hashes:         1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: XsDEsRCvHGRiqp3n55TMdAzIdZ06vTrwJJRgn8ZCmDg=)
                          2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a0:47:8a:c4:50:67:d3:2a:81:f2:77:25:6e:5f:8c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
        Validity
            Not Before: Nov 20 08:00:34 2025 GMT
            Not After : Nov 21 08:00:34 2025 GMT
        Subject: CN=820c1506048ede065bfa672753cf644e89859c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:a3:92:20:55:d5:38:cc:e5:97:d0:be:4e:
                    f3:23:fc:a9:de:a6:ca:04:4b:57:7d:23:0a:70:d1:
                    bb:97:7a:1c:6f:8f:56:14:ad:dc:11:44:bc:0e:40:
                    7b:fc:20:aa:db:59:94:21:03:57:a0:5d:49:66:70:
                    1a:5d:6a:f3:0b:8f:ec:6f:b1:5c:e0:8b:8c:7c:ac:
                    13:b2:31:cb:2e:cf:7d:79:1c:10:89:54:fe:00:40:
                    c3:a5:ee:fb:32:2c:67:1e:df:a7:4f:c5:74:07:85:
                    14:8f:c4:8c:bf:ae:1d:d8:98:59:91:b9:2d:51:db:
                    65:cf:b6:49:f7:11:5d:77:08:8d:cc:b6:23:65:0b:
                    6a:38:17:9e:6b:84:39:d2:e0:8d:8f:32:68:f0:56:
                    d1:67:48:eb:a3:c0:07:07:4d:be:28:fe:12:c3:f8:
                    f6:d9:81:47:28:91:ce:c3:d4:89:89:1b:7c:b8:9e:
                    c8:f3:e7:e6:89:08:65:ef:14:a2:d2:e7:77:cf:7c:
                    67:ed:b6:4e:8b:6f:99:66:1a:63:37:c0:58:16:03:
                    ee:91:d5:d5:19:ec:26:6a:81:6b:18:23:4b:03:e3:
                    bf:31:82:95:e3:c8:ea:f6:f3:8e:01:20:4d:c9:71:
                    23:c0:51:db:a4:62:08:1d:a0:ef:fe:f5:fc:95:02:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:15:06:04:8E:DE:06:5B:FA:67:27:53:CF:64:4E:89:85:9C:3F
            X509v3 Authority Key Identifier:
                keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:84:b9:2d:34:f7:4e:4e:d8:e0:25:3c:7f:5f:c7:79:98:39:
         d7:a5:d1:ff:27:ad:36:25:60:40:2e:0a:c2:92:7c:8d:19:b8:
         e4:ea:5f:6b:6e:ed:fa:c6:e7:c1:24:61:46:f9:dc:58:89:b3:
         34:56:95:a4:d9:39:47:10:cc:4e:5a:f3:dc:11:18:5a:db:7a:
         d5:57:43:21:31:a8:b6:76:b8:d2:44:d1:f7:19:4d:c2:ce:31:
         6f:9b:e6:e6:c3:93:47:36:fd:50:8f:e0:8c:56:31:1f:f9:22:
         56:c5:f2:19:57:9b:cb:3d:24:e0:3c:c1:97:42:58:38:35:56:
         a4:21:dd:3d:37:4e:40:3f:40:fe:77:3b:e5:44:27:a8:a7:49:
         34:94:2b:33:19:af:29:ec:0a:5e:1b:b4:1a:78:6f:4b:2a:fe:
         43:e7:aa:7e:fe:51:4f:5e:f3:88:09:86:50:71:e3:d8:d8:f2:
         28:b9:bb:65:f8:34:f0:b7:cd:dc:9b:94:b5:18:49:9b:dc:ea:
         a8:13:9a:17:83:e1:ac:b8:ef:b7:e3:90:a9:8f:9a:3a:58:2c:
         13:07:b3:d2:17:ab:3f:45:2d:0e:9a:90:21:53:2f:92:de:17:
         df:38:91:0a:6b:51:f8:11:63:8f:41:2d:36:90:56:56:ed:ed:
         45:93:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:21:34 2025 by rpki-client