This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File:                     a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier:          pA8zRedjpMJrbCNe3bJ1FRj+Q1a3GSBVm3XfZpxaES8=
Subject key identifier:   28:7A:36:38:7F:E9:95:18:05:D8:7E:37:D1:CC:AE:8C:5E:09:43:C3
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer:       /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial:       0199A795B5176EDE160D46671EE5A4EA070A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number:          0B09
Signing time:             Fri 03 Oct 2025 01:00:30 +0000
Manifest this update:     Fri 03 Oct 2025 01:00:30 +0000
Manifest next update:     Sat 04 Oct 2025 01:00:30 +0000
Files and hashes:         1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
                          2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: zRQ8Mwe+SdNCdwndqgDU+zqIQBzucDpi2ZHnJLKuBbQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:a7:95:b5:17:6e:de:16:0d:46:67:1e:e5:a4:ea:07:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
        Validity
            Not Before: Oct  3 01:00:30 2025 GMT
            Not After : Oct  4 01:00:30 2025 GMT
        Subject: CN=287a36387fe9951805d87e37d1ccae8c5e0943c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:96:a0:03:95:f8:ac:cc:a2:ed:99:e4:be:
                    48:2f:55:72:a8:72:07:b5:c5:55:28:f7:0b:99:5b:
                    77:57:35:de:cd:aa:99:d3:24:ef:f6:4a:e1:19:ee:
                    a0:ef:9c:82:ae:33:db:02:35:9e:4d:7e:98:27:c7:
                    04:66:d8:4f:bf:9a:49:24:d2:09:df:68:b6:92:20:
                    09:21:60:0f:7c:39:fb:90:40:1e:65:92:c3:9f:ac:
                    e7:ed:56:fa:ca:d9:b7:43:e7:38:a8:88:72:26:b5:
                    e1:ae:14:af:f9:6a:3d:8f:4e:4e:b6:2d:1f:0f:24:
                    ff:8c:d1:6d:0e:80:e8:27:85:27:b7:5a:a4:a0:55:
                    46:86:92:dc:a0:04:d8:86:ed:a9:c8:e7:5b:dd:28:
                    47:c4:c1:ae:59:69:24:ea:de:9e:23:da:0c:5b:b5:
                    dc:ba:51:52:49:4b:f0:07:30:70:f2:de:78:51:41:
                    ad:ee:c0:b1:90:dc:55:a9:9e:dd:c8:78:79:f8:12:
                    ea:30:4c:05:7c:fe:19:e8:91:a7:e0:b1:0e:a6:58:
                    99:8e:74:d6:82:f7:fc:8b:c4:07:a2:43:89:12:de:
                    6f:dc:d8:d4:a3:c5:48:35:41:2c:6e:a8:58:3e:03:
                    1f:99:09:c5:31:d4:e0:a4:57:b0:9e:9d:94:4f:09:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7A:36:38:7F:E9:95:18:05:D8:7E:37:D1:CC:AE:8C:5E:09:43:C3
            X509v3 Authority Key Identifier:
                keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:37:74:3c:0d:2f:7e:97:ae:20:f5:7e:78:15:54:69:6c:
         5b:98:ac:2e:46:d4:57:11:ea:eb:db:95:fb:25:e2:db:7c:bb:
         3f:5b:67:af:23:06:d1:e8:2c:c3:bf:7d:fb:3d:0f:40:5a:b7:
         68:d0:28:cb:88:af:3e:ae:57:f6:df:d9:97:78:ef:02:09:0c:
         26:d0:6b:24:63:35:7d:2b:53:b7:30:5f:e1:15:42:5f:2e:0f:
         61:57:da:3c:66:15:20:3a:d3:c9:a9:13:c5:60:78:78:cf:b6:
         1a:ee:1a:72:94:04:f1:68:ac:93:51:52:89:22:e6:1e:cc:f8:
         2e:e2:a0:8d:ec:6e:f7:d1:a1:c0:f4:67:dd:cd:f5:9f:00:7e:
         81:61:05:8b:3f:cb:e1:f4:ca:28:08:36:ec:ff:b5:05:ad:c0:
         64:3c:77:a1:41:16:10:f8:59:89:2c:17:4a:a5:de:03:6c:e1:
         40:9a:ca:e5:11:cf:d2:79:fd:87:8b:6a:9e:11:8a:55:54:a4:
         a9:83:45:30:fd:0a:33:6b:b3:ea:c4:17:42:b6:f4:fa:2a:15:
         50:c6:2e:0a:e6:74:40:ee:d2:36:45:9a:4c:37:fa:fa:e4:b6:
         8b:da:3e:ed:86:8e:97:67:d8:e0:eb:75:a6:42:c5:44:d2:0a:
         a7:5f:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----