This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
File:                     sz3NILWulcFy0y7XKevzBhl7I-c.mft (raw, json)
Hash identifier:          brZoH9+SoEfBxw85fSW6jxfx/fzfAyZS40ydsSB7yfc=
Subject key identifier:   E1:B7:9C:82:C4:1C:E3:E5:62:1B:C4:4C:7F:7C:D8:4C:BB:A1:49:D0
Authority key identifier: B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
Certificate issuer:       /CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Certificate serial:       019A348F648D5D5BBA59A3DC492AD214D2A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
Manifest number:          1700
Signing time:             Thu 30 Oct 2025 10:00:03 +0000
Manifest this update:     Thu 30 Oct 2025 10:00:03 +0000
Manifest next update:     Fri 31 Oct 2025 10:00:03 +0000
Files and hashes:         1: CIm7PdRT4tGc0ohUd0vMkXyk2Z4.roa (hash: bKi9ERQ3HDvQWS3A9n+SnlJFymCAx7E6eQcIAFgcP7o=)
                          2: sz3NILWulcFy0y7XKevzBhl7I-c.crl (hash: 6vFaidkQH8HvQ11TbYDunxSHO4C5rrFG2k4KmsmPSRY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:34:8f:64:8d:5d:5b:ba:59:a3:dc:49:2a:d2:14:d2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
        Validity
            Not Before: Oct 30 10:00:03 2025 GMT
            Not After : Oct 31 10:00:03 2025 GMT
        Subject: CN=e1b79c82c41ce3e5621bc44c7f7cd84cbba149d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:3d:25:23:10:55:74:57:1b:f5:d1:6d:fc:
                    cb:be:a7:35:50:8e:58:2d:f4:97:5e:16:1d:6d:a2:
                    08:1f:a6:ef:d7:ec:dd:f7:58:0b:ab:46:7f:2a:d9:
                    c5:89:a3:2a:0d:2c:6a:b6:2b:52:8b:0b:9e:f5:39:
                    72:aa:1a:cf:77:24:eb:b2:05:a8:4c:f2:fd:1b:c8:
                    63:e9:f8:21:35:87:a0:4d:1a:87:34:3d:31:60:be:
                    8e:05:5a:ca:46:4b:a6:30:a7:de:a3:01:21:53:8e:
                    42:c4:78:34:fe:e9:7d:6f:81:a8:0a:f4:c3:20:16:
                    bf:d8:e3:d8:38:15:c9:b9:ab:e5:9d:e5:d9:c7:af:
                    bd:c1:94:47:ce:2a:34:3c:67:f3:96:64:87:68:c2:
                    7b:d8:f0:96:d8:ab:50:b9:8a:a7:5f:55:e9:87:44:
                    20:2a:0a:b3:38:c3:9f:08:32:7f:f0:62:3f:9f:07:
                    ef:9d:b8:eb:d6:6a:7d:31:57:40:18:ef:1c:2f:be:
                    85:20:ce:8e:37:1e:ea:5e:c5:30:ba:0a:20:5a:65:
                    20:45:fb:88:be:ad:ce:58:3b:16:94:3b:bf:cf:a7:
                    91:7b:8e:d0:76:43:48:9f:6a:b3:e2:77:60:42:83:
                    b7:04:ca:44:7f:15:dc:83:7c:69:ab:8f:fe:71:d3:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:9C:82:C4:1C:E3:E5:62:1B:C4:4C:7F:7C:D8:4C:BB:A1:49:D0
            X509v3 Authority Key Identifier:
                keyid:B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:c4:58:89:72:6c:aa:d1:2a:04:51:77:61:7e:12:4c:77:
         db:3c:44:d9:4c:dc:19:44:71:3a:4c:3a:6f:fe:26:1a:90:e1:
         45:03:d2:12:31:d9:f2:e2:d1:10:ac:26:df:35:b7:4c:d0:be:
         bd:4f:cc:1c:9d:66:a4:5f:5b:7d:5a:f9:34:f7:de:e0:32:c1:
         98:57:a8:73:63:16:4d:43:aa:35:03:65:30:b1:df:ba:bb:46:
         f4:0a:22:e4:98:04:7b:e3:10:12:7a:c3:8f:00:d6:cd:ee:b8:
         aa:69:e7:1e:f2:6a:25:ba:4f:86:8e:47:89:cf:3d:6d:b1:b0:
         48:92:9b:65:8e:ad:37:07:7b:8c:b3:f8:f6:a0:1d:38:9b:bd:
         59:f2:3d:52:c3:9f:71:93:d8:f7:0f:03:6c:56:8c:57:78:4c:
         39:e8:fe:ec:9f:04:9a:4f:40:23:f5:05:cd:e8:cb:73:69:ac:
         53:ef:85:9f:92:e3:08:a4:81:44:94:99:c6:8e:9f:1e:8e:1a:
         c3:f1:ec:4f:f4:3c:f9:c4:e5:bb:1f:e7:c9:d1:f0:61:b0:63:
         46:ec:d2:a8:c4:79:68:1d:3d:bd:6c:be:b8:6d:0d:ba:bc:3b:
         cb:7d:af:8a:2b:1a:ba:6e:df:d0:fd:e8:7c:98:e1:44:7f:5e:
         92:df:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----