This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File:                     xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier:          BDm+yNyl/f6o3UIxJo8M7IuMC2cHG3JTNfG1Y9sVwFY=
Subject key identifier:   66:04:CA:57:0D:EB:D3:66:B0:DC:B2:16:B2:2B:7A:09:4B:7D:8A:AB
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer:       /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial:       0199B92E4B38CAC2F74D8F664577E9AA342E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number:          16C2
Signing time:             Mon 06 Oct 2025 11:00:42 +0000
Manifest this update:     Mon 06 Oct 2025 11:00:42 +0000
Manifest next update:     Tue 07 Oct 2025 11:00:42 +0000
Files and hashes:         1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
                          2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
                          3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: 81G5oYbOLM8qALkRDoLRO26OXqzmfvCRMO1+5ZM2wKc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:b9:2e:4b:38:ca:c2:f7:4d:8f:66:45:77:e9:aa:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
        Validity
            Not Before: Oct  6 11:00:42 2025 GMT
            Not After : Oct  7 11:00:42 2025 GMT
        Subject: CN=6604ca570debd366b0dcb216b22b7a094b7d8aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:a9:c2:04:04:a2:48:0f:31:2e:6d:5c:79:
                    a6:8b:9e:6f:ae:99:f6:41:ed:60:73:36:34:13:16:
                    5e:95:a4:dc:9f:1e:9c:c3:1f:68:38:c4:9a:1b:4d:
                    ed:f3:87:b6:0e:ee:91:46:cf:13:2c:e2:5b:71:3d:
                    48:88:7f:86:4e:8e:7b:5d:dc:28:54:b2:f1:45:71:
                    c3:55:2e:bb:14:dd:e0:fd:d0:b6:d1:ca:8c:f7:65:
                    9f:8e:a3:11:01:6e:80:ec:e7:2a:13:e6:91:aa:ab:
                    a4:07:7e:03:40:fc:92:aa:c7:45:28:36:6a:8d:3a:
                    87:63:8a:63:f8:be:15:b9:60:8f:10:1f:9e:0b:64:
                    4a:94:6e:dd:74:15:f6:10:e3:b4:f1:d1:01:db:6f:
                    21:9c:ec:c6:c9:2d:3d:ee:c4:9d:d1:00:c2:47:75:
                    92:64:d2:4c:86:30:27:51:88:1f:32:ad:66:95:c0:
                    c7:67:cd:c8:f5:e6:ee:92:3f:59:37:ce:ff:38:db:
                    3f:f2:91:f6:62:47:59:9a:4b:37:26:d5:5a:08:b9:
                    b3:1e:a0:ff:84:63:64:1a:61:3d:38:71:dd:a6:5a:
                    87:d8:1e:38:fc:b8:28:d5:24:b9:40:fe:98:1f:dc:
                    d6:d4:e0:8b:f2:74:57:0d:40:b3:18:28:82:88:eb:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:04:CA:57:0D:EB:D3:66:B0:DC:B2:16:B2:2B:7A:09:4B:7D:8A:AB
            X509v3 Authority Key Identifier:
                keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:cd:85:b7:78:ea:bb:b5:ad:18:ab:3a:40:b4:ed:bc:d6:
         bf:ca:af:48:a2:72:3a:65:78:91:d3:c1:9b:51:59:df:fc:34:
         76:48:05:86:65:f8:28:97:7b:d0:a6:53:30:75:8a:d9:4f:78:
         ae:df:35:d1:c9:a8:74:68:de:e8:56:49:2c:bd:be:b3:5e:5b:
         61:9f:9b:03:34:c4:c1:ec:59:28:2f:da:4d:dd:4a:bb:89:f2:
         4f:1b:98:aa:c6:a4:9c:f7:8e:94:17:9c:ed:bc:a3:11:7c:17:
         b8:bc:03:c4:3e:80:bb:90:e0:f7:e2:2a:a9:9f:a8:f3:0f:d9:
         27:31:bf:e5:2f:43:58:ff:4e:0b:f1:f0:ff:e2:94:1e:ad:a5:
         d8:71:17:9c:d8:7a:f0:22:73:1c:a5:c4:5d:41:41:b8:1b:e4:
         14:c2:f4:bd:6f:c0:dd:a3:d0:13:74:f5:f5:3a:c6:2d:ab:e3:
         3e:f6:bc:23:54:f1:ad:8e:5e:2f:56:fd:80:4b:52:ba:e5:76:
         98:3f:70:96:e9:8f:1e:55:09:57:6d:81:a2:bb:c0:55:57:8d:
         5c:9e:99:2e:53:91:06:45:5e:b9:36:ab:09:4f:04:ec:aa:0f:
         e5:14:d7:a8:e5:43:84:3e:f3:48:e9:20:5c:16:96:f0:08:6b:
         2c:3a:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----