This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
File:                     f_dNq9TrGqEUcUThWwJmnpgv3k0.mft (raw, json)
Hash identifier:          D3RxeZStxPlYmZdDx+57NeFuVyfOjd8HAQa2szK2ghg=
Subject key identifier:   FD:02:4A:14:AD:14:57:10:2C:F5:B5:F3:93:9C:4D:41:7C:DE:B4:8E
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Certificate issuer:       /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial:       019B258852205AE2D68ADD658A8FA2C24C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
Manifest number:          0727
Signing time:             Tue 16 Dec 2025 05:00:49 +0000
Manifest this update:     Tue 16 Dec 2025 05:00:49 +0000
Manifest next update:     Wed 17 Dec 2025 05:00:49 +0000
Files and hashes:         1: 2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (hash: YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=)
                          2: f_dNq9TrGqEUcUThWwJmnpgv3k0.crl (hash: eOW8q5sE0icHCflZGYytLxCI3BPaci0QrG6D5Ii2klQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:88:52:20:5a:e2:d6:8a:dd:65:8a:8f:a2:c2:4c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
        Validity
            Not Before: Dec 16 05:00:49 2025 GMT
            Not After : Dec 17 05:00:49 2025 GMT
        Subject: CN=fd024a14ad1457102cf5b5f3939c4d417cdeb48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:5a:cd:10:e8:7b:b1:3d:16:38:ff:86:9c:
                    07:c0:08:d6:bb:18:fb:7d:62:3f:a2:3f:c2:59:18:
                    df:e3:7c:98:6e:00:39:11:d3:6d:a0:84:f3:0e:b3:
                    43:66:ad:4c:5a:15:72:24:ea:28:db:26:95:c2:02:
                    02:2b:63:11:11:17:ac:6a:4d:2e:1f:93:d3:aa:af:
                    71:54:89:93:58:1d:b7:db:fa:bf:02:d7:33:47:d2:
                    2c:c8:2a:b4:c6:d1:d6:8b:08:0b:df:35:d7:75:5c:
                    43:df:54:4b:05:88:a2:b5:0f:69:97:0e:4b:02:20:
                    78:93:4d:e9:a3:06:1a:45:06:cd:ae:f7:f2:24:01:
                    21:d0:b6:03:5f:08:3d:f6:4f:c1:00:eb:c2:fe:0d:
                    e8:ff:23:49:60:fa:88:2e:9c:ef:04:fc:ad:1a:93:
                    54:94:da:49:32:6f:80:24:c7:70:b5:3e:93:15:0c:
                    14:26:0f:5f:80:0a:e8:1f:77:41:88:af:71:7f:08:
                    db:01:a1:96:4b:df:39:55:c0:67:94:ea:85:bf:2c:
                    f2:67:56:6f:95:b5:f2:3b:93:fb:28:4d:24:5d:6d:
                    e1:66:f7:01:35:0a:4b:51:27:9f:d1:9d:4f:d1:b0:
                    67:56:49:9c:f9:ee:55:8a:e1:db:27:15:8e:3f:22:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:02:4A:14:AD:14:57:10:2C:F5:B5:F3:93:9C:4D:41:7C:DE:B4:8E
            X509v3 Authority Key Identifier:
                keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:ec:07:c3:f8:e5:ff:27:17:ed:ae:d9:b9:50:8a:c4:5c:
         8e:ec:a1:5e:00:9a:d7:da:76:87:ae:46:0f:b4:2d:90:42:d1:
         50:45:86:3c:d2:39:47:d0:ba:c1:6d:b5:60:be:2d:a5:b3:9a:
         22:3c:27:c0:70:a9:42:0c:2e:4d:f8:d0:cf:44:78:c0:df:04:
         9c:34:f3:3a:aa:c9:49:8a:86:d3:21:e3:76:80:0a:ac:ee:33:
         6a:26:48:c6:05:78:c3:a3:f7:fb:e4:f3:76:d1:b2:47:f8:b7:
         62:92:3d:c2:5e:b9:99:d6:f4:7a:1a:c9:15:19:53:5a:1f:a9:
         60:f1:e0:8f:9b:bc:53:37:ca:51:14:b0:0f:8c:a9:6d:c3:be:
         f0:23:86:d6:95:f9:37:6a:05:55:89:10:bd:db:e8:93:6c:dd:
         84:1f:d2:cb:9b:c9:c6:0a:14:4b:13:f8:4d:83:a2:ef:0e:2f:
         47:21:67:dd:47:67:7b:e5:52:5d:c0:b1:3c:1b:ce:11:7c:d7:
         b6:16:5c:05:9c:c1:47:39:18:a8:e5:ac:44:d0:fd:c3:de:50:
         ad:0e:a6:08:8c:ad:43:7e:ac:2f:eb:88:c1:2e:68:2d:ee:93:
         95:90:c1:82:7c:36:ad:2f:69:ac:5d:8d:5a:7b:f6:c7:86:71:
         0f:93:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:51:22 2025 by rpki-client