This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File:                     00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier:          SViSxg+g6PduAhwq5U+p1ycIsZenBAiikaAryvNQHW0=
Subject key identifier:   C5:00:9D:6C:20:88:69:39:37:70:FE:9E:A9:DC:CE:26:57:72:79:46
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer:       /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial:       019A059252516856C3B3F5183A43FC3878D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number:          1547
Signing time:             Tue 21 Oct 2025 07:01:06 +0000
Manifest this update:     Tue 21 Oct 2025 07:01:06 +0000
Manifest next update:     Wed 22 Oct 2025 07:01:06 +0000
Files and hashes:         1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: h6c/NTvCci6u6PeEPFlQe5k4zP0S70+SEXlgsw9X2AA=)
                          2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
                          3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:92:52:51:68:56:c3:b3:f5:18:3a:43:fc:38:78:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
        Validity
            Not Before: Oct 21 07:01:06 2025 GMT
            Not After : Oct 22 07:01:06 2025 GMT
        Subject: CN=c5009d6c208869393770fe9ea9dcce2657727946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:1c:3b:cb:53:a8:b2:c5:00:c2:22:df:10:
                    9b:ee:49:ef:8b:96:45:e4:1d:ae:e6:fd:c6:60:fb:
                    15:61:1f:84:23:33:95:f7:33:fb:27:5d:98:a2:32:
                    fb:df:00:01:d4:cc:4c:6b:54:da:3d:49:13:f6:84:
                    94:d6:6c:c5:8b:b1:fb:36:64:30:c2:2c:9e:9b:0a:
                    f1:57:26:97:2c:d0:6b:82:36:fb:57:f1:52:fa:52:
                    d7:d1:61:b9:fc:9f:67:3e:91:1a:17:26:4f:75:19:
                    aa:b9:e3:b6:a5:24:20:95:63:e8:31:43:3c:fa:82:
                    d7:96:21:ef:46:7b:67:42:f6:29:f6:36:34:01:a4:
                    b8:e1:e0:be:83:fb:4e:8a:92:f5:eb:90:14:35:6c:
                    4f:b8:4e:ae:5f:a1:1d:70:d5:60:39:22:e5:a2:b4:
                    98:e0:4e:fb:0c:e0:4c:16:3e:2d:50:84:a9:85:83:
                    7e:06:d2:8c:d6:5c:9b:b3:82:f6:8b:40:97:a7:af:
                    3a:d5:73:b5:ef:b8:12:ff:d1:23:37:07:b0:8c:d5:
                    5b:17:79:5a:71:28:71:32:7b:14:25:ae:5f:41:cc:
                    4c:86:c8:22:6e:67:26:68:fd:60:41:58:7e:63:19:
                    b1:26:b0:1f:97:07:8e:ec:aa:32:88:44:d2:60:cc:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:9D:6C:20:88:69:39:37:70:FE:9E:A9:DC:CE:26:57:72:79:46
            X509v3 Authority Key Identifier:
                keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:be:d2:9f:97:a7:4e:02:25:c1:a1:74:d0:df:b7:8e:6b:06:
         c6:bf:80:4d:3a:c8:31:eb:d5:c3:ef:ab:dd:ef:0d:8e:63:f9:
         e4:75:77:f8:bc:03:c4:d1:89:9a:37:3f:b0:f4:02:b4:a6:95:
         8b:99:b7:76:6c:ee:88:f1:aa:67:65:5c:b3:dd:48:38:2d:91:
         ac:71:1c:5f:4c:30:44:61:30:64:78:81:96:5f:9b:69:12:df:
         e9:36:ec:c3:c9:5a:bd:fa:c8:fe:e7:68:70:c8:60:a4:96:ca:
         df:4d:1f:1e:19:30:78:95:02:a9:ba:c6:80:21:14:a6:70:0d:
         ce:13:b3:85:3d:45:a4:ef:0f:52:c8:fb:d6:f7:c3:96:cb:c3:
         f8:e0:a4:5d:11:ab:3e:04:19:e2:e1:f2:f6:5d:ab:20:24:21:
         f0:e4:ed:5d:ab:70:6e:ec:33:fe:6a:9b:fd:79:1b:0a:c1:10:
         4b:2c:7b:1b:53:af:37:36:b8:67:72:c5:29:f1:c2:93:08:ff:
         ed:a0:7e:cb:95:9b:91:98:9f:84:b4:d5:89:22:8d:f5:e8:23:
         7a:b6:ea:fc:46:b9:bb:12:2f:a2:2f:c2:3e:f5:cc:06:50:5b:
         84:b1:b9:cc:a8:a6:98:03:da:28:6b:98:7c:f7:0f:c6:36:24:
         d6:64:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----