This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File:                     nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier:          njxwxDMl4/Wat/Yv9VMKN1vrAG8/VEKHBnMYnkQOuxM=
Subject key identifier:   0B:70:F9:45:2E:DD:D9:C5:53:FE:2F:8B:F4:92:A0:00:71:1A:28:6C
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer:       /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial:       019AE3DF6C87DBEAA4DAE1976D52F34A6FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number:          0640
Signing time:             Wed 03 Dec 2025 11:01:01 +0000
Manifest this update:     Wed 03 Dec 2025 11:01:01 +0000
Manifest next update:     Thu 04 Dec 2025 11:01:01 +0000
Files and hashes:         1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: rcUqgZhmauLBR3LFsn3E1F2gWVG9dRWOp2Jvz16/yv0=)
                          2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e3:df:6c:87:db:ea:a4:da:e1:97:6d:52:f3:4a:6f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
        Validity
            Not Before: Dec  3 11:01:01 2025 GMT
            Not After : Dec  4 11:01:01 2025 GMT
        Subject: CN=0b70f9452eddd9c553fe2f8bf492a000711a286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:94:40:64:70:e3:18:07:b4:15:f1:6f:56:
                    5e:20:1c:19:bf:27:7e:c4:e7:7b:02:af:f0:32:d7:
                    70:5a:ce:aa:80:9d:e8:9e:a7:4b:bb:54:7f:e6:50:
                    38:09:b6:9e:b0:72:c7:01:40:2c:d8:50:75:d1:f1:
                    4d:71:a5:f7:80:a4:8c:ac:91:0c:e6:c6:a6:d5:4b:
                    0f:e0:2b:20:66:d0:8d:01:02:9a:5c:81:5c:7f:4c:
                    ba:46:02:46:7e:b8:e8:dc:d2:05:19:dc:38:b7:d3:
                    8b:24:5c:03:89:bc:90:7b:a1:f4:13:14:c1:82:50:
                    d9:89:2a:33:1a:68:f9:b5:6c:32:73:61:fd:4c:02:
                    0b:3f:9e:3d:04:20:df:23:fb:7e:46:91:fd:83:05:
                    e6:b6:5c:b6:c7:ce:01:20:43:50:b5:af:92:36:2f:
                    14:96:ee:3b:8a:e5:70:dd:c8:dd:94:db:64:87:f0:
                    75:33:76:69:cd:89:ea:52:82:f5:39:a6:ea:e1:e0:
                    e1:00:82:93:49:95:a5:3c:53:94:a8:19:d7:1c:80:
                    43:d2:2f:ce:f4:84:06:e6:54:8d:64:f1:28:1a:6d:
                    ef:b5:86:fb:49:e2:5f:56:03:b5:ae:00:a1:bd:ba:
                    d3:1a:25:ad:40:be:d3:18:33:67:d1:22:78:80:17:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:F9:45:2E:DD:D9:C5:53:FE:2F:8B:F4:92:A0:00:71:1A:28:6C
            X509v3 Authority Key Identifier:
                keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:20:35:8b:f2:db:c0:15:ef:3c:8d:f0:d7:07:79:e4:f0:19:
         25:1c:1e:0c:54:95:db:03:b3:12:52:23:c7:89:78:55:c5:2c:
         0f:10:e8:58:ad:e1:99:49:72:5c:c7:55:03:4c:6a:c8:f6:66:
         23:ce:ff:47:fc:e2:e2:b4:f8:f9:57:2d:9a:9a:64:c9:c8:de:
         22:64:29:a4:2b:4f:47:f8:dc:21:42:8d:e9:52:d6:63:10:b1:
         d2:2a:86:2b:4a:b5:ff:bd:96:38:0d:69:4a:84:ab:6d:40:75:
         5d:b0:13:39:af:4c:c5:c7:9a:d5:6d:e8:f8:2f:0d:44:e3:de:
         00:6b:f1:48:d3:17:cd:45:24:ed:6c:b1:48:5f:1a:cd:0d:30:
         75:9b:a3:0a:70:39:f5:c6:65:de:47:d4:97:13:e8:b6:2f:12:
         9f:27:1d:7c:02:e6:71:89:5e:2d:ba:58:2f:ff:b2:62:70:4b:
         28:0a:47:b3:25:4d:e3:df:24:5a:71:14:74:d1:e6:43:3c:e5:
         55:a1:24:19:5f:f4:d1:a3:ac:00:58:c0:09:67:9d:21:82:27:
         b1:4f:4d:f5:65:1b:ff:d9:a1:c9:2b:07:ef:67:2b:08:53:f5:
         4f:3e:1a:51:57:f5:ca:b0:5e:58:75:a7:c3:ed:5e:53:3d:a0:
         d9:ef:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:53:51 2025 by rpki-client