This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File:                     wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier:          ZeBolI7LVzc7oFt6x4bzcJcz1fpkPwdAbNhW7kPw6L0=
Subject key identifier:   17:42:84:86:DA:86:5F:AA:AD:A7:05:06:1D:F8:4D:97:9F:F5:4B:84
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer:       /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial:       019B2A099F694453549BBACD6076D3C3D577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number:          056D
Signing time:             Wed 17 Dec 2025 02:00:31 +0000
Manifest this update:     Wed 17 Dec 2025 02:00:31 +0000
Manifest next update:     Thu 18 Dec 2025 02:00:31 +0000
Files and hashes:         1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
                          2: M-PNBYoRn09XYjLGhU_8RdqSkBk.roa (hash: 2NI1XX0KSoSzh1Rhy9d9KNJX4v0X45ViWcXvgGzEVG4=)
                          3: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: hbCchQWcJMABDKxIkC6M/x5UiN8cC1ZeOGaKRsejZEo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:09:9f:69:44:53:54:9b:ba:cd:60:76:d3:c3:d5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
        Validity
            Not Before: Dec 17 02:00:31 2025 GMT
            Not After : Dec 18 02:00:31 2025 GMT
        Subject: CN=17428486da865faaada705061df84d979ff54b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:13:72:43:79:ea:53:b5:07:0e:35:1b:ca:
                    67:9f:39:a6:b9:5d:d9:23:57:88:bc:b3:8e:de:53:
                    18:ff:82:e2:a5:5c:f0:9e:d3:de:c0:ae:61:3e:18:
                    29:88:a4:7c:9e:c5:d4:83:72:59:c4:42:83:a6:63:
                    5f:aa:99:c4:65:e6:2b:63:e5:fc:e7:13:bd:d2:69:
                    58:76:10:a8:61:57:78:16:7c:71:0a:de:ea:aa:97:
                    1b:aa:cb:de:23:33:f9:7b:ee:52:b0:7a:e2:23:b2:
                    f2:4a:ae:97:f0:7c:e2:69:4b:a5:64:7d:5d:35:d5:
                    75:e1:58:6c:ab:11:89:b6:29:e8:a7:2d:37:c5:4d:
                    7f:47:88:ae:93:d6:2e:60:d3:95:3d:32:65:39:b1:
                    0f:f4:6b:c1:c4:41:91:28:e8:f8:f9:a9:ea:d7:af:
                    25:44:34:ff:19:f3:ac:cb:f2:28:86:b4:e0:07:3a:
                    63:90:e8:70:c5:a6:21:56:88:5f:4c:13:7b:13:50:
                    ac:ae:7b:2e:c7:be:e6:a9:88:04:ad:95:88:a8:0c:
                    1c:da:c2:01:87:64:16:c4:93:36:a1:8f:93:c5:eb:
                    c2:86:c5:e5:85:35:84:b6:72:b7:57:68:3f:98:43:
                    0d:57:97:4d:14:29:6f:08:5d:e7:04:44:de:b6:74:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:84:86:DA:86:5F:AA:AD:A7:05:06:1D:F8:4D:97:9F:F5:4B:84
            X509v3 Authority Key Identifier:
                keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:ae:57:bc:ea:e1:91:e0:e4:43:55:10:c0:b1:3c:c2:ea:
         ec:bf:f3:7a:16:2b:17:1f:19:d6:7e:92:a7:58:31:b8:60:45:
         e3:15:87:06:23:63:0a:63:b7:c3:59:23:29:a0:be:95:93:ce:
         78:52:7a:01:5e:1e:50:b2:bc:fb:12:64:25:d4:4b:6b:fb:db:
         2c:6b:22:f9:e3:40:05:b6:c7:dc:09:2b:39:df:79:95:e1:a6:
         08:4b:bf:ce:11:55:15:22:f9:4d:7e:1d:f2:61:a2:d1:32:d7:
         4d:43:98:09:ea:52:a7:25:1d:df:f1:0c:47:4c:e9:24:53:e4:
         a7:d7:5b:8d:63:e4:1b:30:42:6a:32:e9:e5:88:dd:a4:56:e2:
         a8:f4:66:46:61:ac:ca:66:4c:e1:2c:85:b6:20:38:88:ec:21:
         9d:40:5b:b7:b1:7f:10:c0:13:b3:ff:5b:c3:ac:51:59:11:ce:
         70:d5:79:6d:4f:2a:b8:78:71:07:19:07:8a:88:1b:b1:15:39:
         88:5c:b0:95:a1:a2:3a:5d:15:ae:31:c5:b1:c4:38:e4:a7:7a:
         6c:f3:0b:f3:c2:99:ad:c2:7f:d2:eb:15:a1:22:df:c2:99:47:
         4f:43:26:3a:02:47:37:c0:d7:fb:93:fe:d7:64:b7:03:11:06:
         08:ee:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----