This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
File:                     4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft (raw, json)
Hash identifier:          92sJk3jFwceK0H2nkuGRh4iub/9oX4Xs5/Ml53X3ckA=
Subject key identifier:   44:71:37:30:7F:3F:95:6D:17:2E:A6:7E:14:3C:0E:7F:3A:D6:AC:2C
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Certificate issuer:       /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial:       019A288BC255707EDAE536D1E6AC445365F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
Manifest number:          08E6
Signing time:             Tue 28 Oct 2025 02:00:39 +0000
Manifest this update:     Tue 28 Oct 2025 02:00:39 +0000
Manifest next update:     Wed 29 Oct 2025 02:00:39 +0000
Files and hashes:         1: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl (hash: f5YmeupbnkjLvodXINxIJ9JjCocUZ/7JeiCLYuuinNs=)
                          2: 8ledFww48tlGlLdCdc6wJh5gkIA.roa (hash: Tmx1stFU3W6NXlv6YnpijkUZCwIIoq5vNpNXxvyHtoo=)
                          3: kNp_3YkCixoFt65dB3MqrcA0XPo.roa (hash: yKQUvFhZ+Z1swcvVEnDhUbffbwLlIa/3aCYRRPNo5TY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:28:8b:c2:55:70:7e:da:e5:36:d1:e6:ac:44:53:65:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
        Validity
            Not Before: Oct 28 02:00:39 2025 GMT
            Not After : Oct 29 02:00:39 2025 GMT
        Subject: CN=447137307f3f956d172ea67e143c0e7f3ad6ac2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:0b:40:f5:2d:58:5e:d9:d8:66:1c:30:c0:
                    6f:f3:82:89:f2:c2:92:78:8f:da:d6:c9:35:4d:70:
                    2d:24:36:e9:87:75:96:e6:95:b2:33:fc:e9:7f:75:
                    00:1e:7a:77:09:31:8a:a4:1d:53:47:86:eb:49:46:
                    85:7d:9f:f8:12:84:c7:59:aa:b3:f3:54:67:47:2a:
                    9a:5b:a4:45:1b:89:43:5e:42:39:58:0c:47:65:f4:
                    9b:f0:66:71:3f:1b:f5:dd:30:ca:33:b7:70:11:a0:
                    b7:24:9a:68:17:e4:5d:bf:8f:1e:3a:e3:79:9a:65:
                    16:85:4d:0e:3d:a6:a3:2e:d9:18:e9:e2:b6:42:77:
                    14:e5:57:52:52:22:d4:9a:20:14:99:80:7f:82:40:
                    cf:33:7c:dd:b0:0b:d1:a7:09:6d:a9:8c:2c:82:6c:
                    c4:dc:54:07:95:11:60:b3:96:01:d0:2b:6b:fc:08:
                    83:7f:f4:ee:2f:8c:7d:9f:08:79:fc:08:8e:ac:25:
                    52:04:16:8d:eb:e2:e9:a2:6a:35:e9:c0:b5:a0:c1:
                    4d:fc:86:79:2f:2d:8c:88:f8:99:c5:e5:58:3b:20:
                    be:d2:4a:aa:06:5d:10:56:d5:fe:34:fc:11:d8:cd:
                    7e:bd:75:89:ac:d7:dd:8f:07:74:05:fb:6e:a4:d1:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:37:30:7F:3F:95:6D:17:2E:A6:7E:14:3C:0E:7F:3A:D6:AC:2C
            X509v3 Authority Key Identifier:
                keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:91:a3:aa:d1:e4:dd:5b:fa:e7:b3:02:04:23:67:1c:ec:
         7d:ca:06:ca:b7:4c:26:2e:0c:32:fa:9c:7c:d9:7b:23:3a:50:
         0a:67:39:8f:2c:87:87:81:d2:d1:ad:89:0a:42:a8:08:93:4a:
         3e:cb:ca:f4:b0:cb:a7:d0:21:83:8a:e2:30:81:7c:f8:32:11:
         35:55:64:b4:f2:4b:24:61:b2:b9:c7:84:cd:0e:2c:e1:74:4d:
         a9:d2:84:19:4d:14:54:6a:c5:21:56:13:2f:76:6d:82:c8:9f:
         5e:70:90:c7:a6:ff:1d:bf:61:f6:5b:db:9b:fe:67:1e:3d:47:
         e5:a7:d6:57:61:1c:fa:ab:5c:11:2f:39:fb:45:24:88:7f:ec:
         b2:2f:ef:ef:e9:d0:28:c3:de:d5:8a:2a:8c:20:20:66:f2:0a:
         55:00:de:59:47:36:75:0f:b1:15:38:94:be:ed:55:2c:57:ac:
         6c:66:4b:91:db:7a:74:2f:f2:32:85:0d:62:f3:02:b9:6e:42:
         8f:6b:c0:1d:99:02:58:80:3b:b5:38:96:94:89:81:61:9d:ef:
         ac:32:1e:d0:de:21:6c:04:14:70:0f:c2:a9:2e:d0:8c:8c:dd:
         f8:cc:e1:6a:d8:ae:63:dd:10:f0:a4:32:42:ef:46:e2:e9:f4:
         fe:3b:56:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:46:43 2025 by rpki-client