This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
File:                     R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft (raw, json)
Hash identifier:          1/5BNj3GKdFI7avGkf/FI6bQFnnzFETppNStuGevJQI=
Subject key identifier:   D9:72:B6:ED:13:FA:A2:40:38:8F:FE:3F:C4:D2:CA:7A:28:EB:D5:29
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Certificate issuer:       /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial:       019A7C0463FDA8C1202BB4BD6BF62281ED6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
Manifest number:          172B
Signing time:             Thu 13 Nov 2025 07:00:53 +0000
Manifest this update:     Thu 13 Nov 2025 07:00:53 +0000
Manifest next update:     Fri 14 Nov 2025 07:00:53 +0000
Files and hashes:         1: L6iR0CMwTlXaB3-hN4yCOodUYRY.roa (hash: eWR/YwFC9Nkq/Z8RvdCdYOBK7oxzXqUpetNS4HVcl8U=)
                          2: R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl (hash: oh9NwAFppaHKMm81fcWXmTZDf/Fqd+s2/8Kn1Ygq6NQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:7c:04:63:fd:a8:c1:20:2b:b4:bd:6b:f6:22:81:ed:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
        Validity
            Not Before: Nov 13 07:00:53 2025 GMT
            Not After : Nov 14 07:00:53 2025 GMT
        Subject: CN=d972b6ed13faa240388ffe3fc4d2ca7a28ebd529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:f4:8b:16:b6:61:34:cb:6d:c0:f4:44:81:
                    06:4c:5c:ac:e1:cb:5d:65:ea:69:82:7f:a2:08:71:
                    29:26:6f:48:b0:3d:8d:87:fc:39:62:f9:09:ee:70:
                    de:30:ff:ef:12:a6:3a:28:9c:84:7c:74:26:60:05:
                    34:43:5f:58:f0:cb:c1:3a:4e:28:41:22:4c:91:f5:
                    ed:61:ca:2a:e8:d1:ef:25:06:9a:aa:aa:b0:e6:c5:
                    3a:a1:91:97:b9:5b:f7:1e:33:82:6a:25:77:70:74:
                    f7:d4:b7:e6:1a:12:72:59:3f:e9:1e:49:f3:58:1c:
                    c9:e5:50:02:12:df:a3:b4:5c:e9:aa:84:44:cc:d1:
                    9c:73:54:b3:bf:2f:bf:ab:81:64:ec:ca:45:98:be:
                    0b:73:54:9c:68:43:16:ce:2a:e9:cb:4e:f8:21:94:
                    53:ce:3d:1a:d2:34:28:d8:92:64:90:17:c5:ea:94:
                    61:04:68:17:0c:72:c4:d5:56:2e:19:f9:75:a8:c0:
                    0d:c8:ee:fe:0f:31:ba:b5:3f:df:c6:0e:e9:49:9d:
                    26:7c:07:ff:b8:97:53:35:86:b7:da:62:31:a9:a1:
                    fd:af:2d:96:4c:a1:23:dd:6f:d1:3a:4a:dd:76:20:
                    d8:c3:9f:2a:0b:68:ce:d9:bb:36:f1:77:f7:55:61:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:B6:ED:13:FA:A2:40:38:8F:FE:3F:C4:D2:CA:7A:28:EB:D5:29
            X509v3 Authority Key Identifier:
                keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:df:84:93:27:66:e8:0f:6c:a8:de:75:25:39:35:2f:15:
         1e:aa:84:82:15:1e:e8:9c:a7:3f:7d:48:cf:a0:aa:e9:4b:6b:
         da:15:ef:57:75:ee:c2:89:f0:13:c6:48:18:2d:95:06:dc:0f:
         3b:b0:08:ad:bd:c9:a4:75:be:01:48:5b:14:54:30:28:06:f7:
         8b:3d:33:06:10:30:82:5c:17:fa:4a:67:c4:63:02:b1:dc:90:
         ce:95:96:2d:c1:4b:a0:fd:d1:3a:9c:3a:24:1a:19:28:e4:9d:
         05:2b:ca:cb:2b:66:c1:de:20:a9:d2:73:f0:f0:56:50:f0:99:
         b0:1c:19:55:23:48:88:44:ba:5a:b3:54:30:bf:57:61:ee:bd:
         f2:24:5c:36:64:10:f4:b7:3b:a5:df:6b:e9:57:5b:e2:8f:24:
         cb:6a:74:f8:2b:8d:c5:dd:54:2c:9d:71:b5:2a:71:11:c1:2c:
         2f:1f:71:93:9e:af:31:1f:11:6b:5c:9a:98:34:33:87:f8:55:
         7f:58:3d:e5:eb:40:5d:bd:a1:47:d0:a0:11:cb:e6:ba:77:03:
         3b:cf:53:22:f7:00:75:45:0a:d0:88:e2:c8:9b:40:58:44:ce:
         1e:cc:52:a7:af:b5:4a:7c:de:f1:5f:7d:73:d7:f8:3c:b2:b9:
         3d:ea:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----