This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File:                     6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier:          qZoBWzAAlPxYqwHuzLzLxkuVMLbDeHzK4W5uCBfCIYk=
Subject key identifier:   BC:D1:FB:CE:CD:E6:46:70:0A:69:4F:EE:CD:B6:28:66:21:88:09:57
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer:       /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial:       019A8206D5B73F67A53CD14904540234E00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number:          09A3
Signing time:             Fri 14 Nov 2025 11:01:17 +0000
Manifest this update:     Fri 14 Nov 2025 11:01:17 +0000
Manifest next update:     Sat 15 Nov 2025 11:01:17 +0000
Files and hashes:         1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
                          2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: MlvDZloq3+cz/no+vQGfyg9DKhDwQdyGqcmhOuZ6vrk=)
                          3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:82:06:d5:b7:3f:67:a5:3c:d1:49:04:54:02:34:e0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
        Validity
            Not Before: Nov 14 11:01:17 2025 GMT
            Not After : Nov 15 11:01:17 2025 GMT
        Subject: CN=bcd1fbcecde646700a694feecdb6286621880957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:02:31:da:9e:73:c1:57:53:d2:a7:1d:dd:
                    cf:c2:19:19:ac:88:83:b2:89:78:75:60:25:1d:8b:
                    e4:a4:4d:40:34:b9:c4:e6:c2:07:81:bf:ab:f9:68:
                    05:6d:05:44:04:b0:e0:a9:8f:82:5d:55:a0:78:7e:
                    1b:79:40:fc:24:86:79:33:59:98:e9:fd:f5:dd:e4:
                    37:71:6f:02:1e:38:32:e8:da:ec:96:1e:80:98:0a:
                    2b:03:f6:7c:00:15:86:79:82:37:c6:9d:f6:09:3f:
                    d4:f0:ed:d6:42:71:5d:a9:f4:40:ee:10:a2:ed:56:
                    ea:85:63:cf:1c:c8:e8:7f:44:da:dd:c1:e6:44:7c:
                    e9:e3:7e:17:da:05:d6:58:f6:93:90:4c:da:40:73:
                    ba:01:86:2c:66:12:dd:2a:2b:b0:bc:16:3c:ae:65:
                    4b:cc:80:d6:34:cc:77:27:1a:71:b5:8e:ad:83:45:
                    85:bc:a8:b7:e8:63:21:aa:3d:6c:b5:e3:35:b0:0d:
                    cf:99:f2:cf:6a:81:df:19:c4:b3:9c:68:a7:18:87:
                    65:6e:0e:db:67:41:39:5a:7f:b5:b8:c9:1b:a7:21:
                    88:a9:61:8a:77:df:a8:ed:2a:c8:64:6d:d5:00:16:
                    d8:14:f7:c1:74:e5:5d:02:7a:fa:56:23:41:42:2b:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D1:FB:CE:CD:E6:46:70:0A:69:4F:EE:CD:B6:28:66:21:88:09:57
            X509v3 Authority Key Identifier:
                keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:08:c5:a4:23:f1:03:3c:1f:0a:2b:3a:a5:dd:b9:70:b1:
         8a:43:18:f8:07:ba:2a:31:86:8b:5d:08:ce:69:64:06:90:fd:
         96:2f:10:c5:78:46:84:15:f8:41:77:11:73:7e:08:97:a5:93:
         7f:47:28:f3:7a:ed:0e:32:ab:a8:48:c2:84:9d:e3:63:a2:e5:
         8e:b0:99:ae:29:9b:5b:4b:0b:f7:c5:ff:84:31:7e:a7:1d:95:
         f0:88:7c:a1:2a:4c:bb:a8:67:6a:b3:a0:03:4b:51:0e:ef:05:
         4c:26:eb:b2:32:9a:18:bf:bd:80:f8:20:54:ba:64:2f:7d:d7:
         28:e8:3b:51:15:0e:06:f2:9c:b3:34:fc:5b:cd:8f:8b:1f:4e:
         3a:0e:e4:29:98:0f:17:26:44:87:11:97:68:98:72:6f:ba:a7:
         de:94:ca:51:aa:57:18:f8:81:14:7c:4b:89:10:a7:d5:88:ea:
         ea:45:6f:d6:72:ff:f9:a1:58:dc:8f:e4:8b:fc:25:2b:99:d3:
         d2:5a:68:ff:e8:b5:eb:53:1a:a7:8f:02:a5:2a:99:77:cd:9e:
         2e:fd:a6:bc:3a:44:90:f5:73:dc:a1:0b:a3:87:09:c4:ce:79:
         c3:b7:85:16:57:c1:4e:96:b9:09:c8:16:e6:89:48:9b:e3:7f:
         6a:00:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:46 2025 by rpki-client