This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File:                     fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier:          JNuXPwkN/kyjcPvllu5S6NBJ/8m5MoSgKTxGTDhFxL0=
Subject key identifier:   68:E8:33:1E:C8:2B:C0:43:00:5B:76:AE:3B:9D:A8:6A:F8:91:8C:79
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer:       /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial:       019A59416C5EEDED21C2B429BD8D35792E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number:          0705
Signing time:             Thu 06 Nov 2025 13:00:50 +0000
Manifest this update:     Thu 06 Nov 2025 13:00:50 +0000
Manifest next update:     Fri 07 Nov 2025 13:00:50 +0000
Files and hashes:         1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: gndz+W/vwPk30krq8LH9vLPvvm0SXfUznXch1D72NEs=)
                          2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:59:41:6c:5e:ed:ed:21:c2:b4:29:bd:8d:35:79:2e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
        Validity
            Not Before: Nov  6 13:00:50 2025 GMT
            Not After : Nov  7 13:00:50 2025 GMT
        Subject: CN=68e8331ec82bc043005b76ae3b9da86af8918c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:f5:4f:89:05:eb:54:e9:bd:5f:1d:8b:e5:
                    1a:19:37:fb:15:86:5b:42:ee:08:1f:cf:d6:3a:1f:
                    4d:34:e3:4e:29:43:32:9c:92:26:e5:ed:fb:52:06:
                    b3:ea:0c:e1:2f:ec:1a:c7:25:1b:bc:34:d3:1c:4d:
                    6c:dd:e4:bf:39:a5:e0:4c:38:dc:7e:2a:db:d8:c6:
                    05:6b:3b:9a:65:45:e1:d6:a2:6e:43:e0:ee:d1:ed:
                    c7:71:23:cb:09:61:e5:df:5e:a9:66:5a:2d:1d:dc:
                    9f:db:8a:8a:ba:69:ce:cf:c4:b8:ec:6e:df:07:94:
                    27:7f:5c:58:9a:9b:7d:ad:f8:01:30:69:bf:22:3e:
                    60:87:b0:b3:01:ce:61:fe:d6:a9:c2:7c:31:09:a7:
                    1c:de:f1:15:8f:5e:43:e2:74:f2:1b:84:f8:22:f6:
                    cd:85:eb:63:b9:6a:dd:a4:2c:12:90:3d:3a:29:3a:
                    fc:03:49:40:6b:8b:10:f1:1a:a9:ce:cc:58:19:4a:
                    fb:6e:51:1f:9a:d3:81:79:9c:ce:f2:2d:12:3a:e8:
                    a8:58:ca:bd:a7:23:06:55:75:18:6e:dc:46:f8:ad:
                    bd:28:13:62:50:7a:f2:74:1a:f9:f0:39:1a:30:14:
                    36:40:a7:a2:af:46:84:1d:a4:ff:16:07:f8:d0:af:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:33:1E:C8:2B:C0:43:00:5B:76:AE:3B:9D:A8:6A:F8:91:8C:79
            X509v3 Authority Key Identifier:
                keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:7c:94:cc:76:30:d8:17:2f:d4:20:1c:06:dd:67:36:87:
         73:94:6b:7b:b2:a8:cd:39:1d:e3:41:d4:af:25:d9:dc:87:35:
         cf:3f:aa:51:de:40:61:d2:00:e9:24:57:45:af:87:6c:b5:72:
         60:30:84:72:18:a7:0d:96:32:51:91:55:73:02:5c:34:79:9a:
         7c:c9:e0:a5:e8:4b:90:37:fe:23:1e:b4:f1:9f:f5:b3:f1:0f:
         05:34:de:f0:41:b9:ba:85:48:4e:f4:2c:e4:aa:2d:4a:e8:9e:
         62:23:4f:5d:75:31:d8:ce:9b:cc:83:03:7e:a6:df:b0:15:a2:
         56:8b:14:cf:02:1d:31:d4:51:1e:a2:00:7c:4c:3e:f5:c0:e8:
         ce:5a:39:28:80:40:b7:61:51:d7:e0:01:4f:09:90:90:db:d1:
         9a:32:ed:d7:5c:e0:da:fc:ee:e3:4e:54:e9:ff:df:c5:88:12:
         31:96:d4:37:93:08:42:cc:62:42:f5:af:dc:f9:7e:0a:ad:b5:
         6a:92:f8:6a:12:8d:a0:8c:65:e4:b7:ae:1b:37:b9:67:87:40:
         c3:87:45:5c:85:17:82:b2:dd:c1:05:26:4b:01:2e:48:bc:07:
         38:b0:7e:4c:13:74:67:cc:32:d9:54:46:b7:e8:2b:d2:f4:51:
         49:26:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----