This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File:                     U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier:          Dn6DWZRxvsrj4dqbg3rN8JQcF5woqnwz2pMwZ5cBdHg=
Subject key identifier:   B7:C8:6E:50:18:81:7F:B3:75:28:5D:0B:76:15:E7:32:1E:3C:4B:F6
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer:       /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial:       019AD8493CD35931C8D2540C47D22AC9302C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number:          1755
Signing time:             Mon 01 Dec 2025 05:01:09 +0000
Manifest this update:     Mon 01 Dec 2025 05:01:09 +0000
Manifest next update:     Tue 02 Dec 2025 05:01:09 +0000
Files and hashes:         1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: tO24wbDfNSyMxc4qFNOxy2e73gpMObd8fcxUZgpKdpE=)
                          2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d8:49:3c:d3:59:31:c8:d2:54:0c:47:d2:2a:c9:30:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
        Validity
            Not Before: Dec  1 05:01:09 2025 GMT
            Not After : Dec  2 05:01:09 2025 GMT
        Subject: CN=b7c86e5018817fb375285d0b7615e7321e3c4bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:df:4f:24:89:4b:8a:9a:8e:35:f5:ff:31:
                    ac:90:d7:20:12:40:03:43:13:87:0d:c0:fa:32:ec:
                    53:1d:d6:ab:83:2f:2c:92:4f:ec:b1:c6:9d:25:bc:
                    51:44:84:ab:15:38:e6:fa:fa:fb:fa:ba:58:36:cf:
                    47:71:24:48:57:c7:45:fe:a8:35:b8:72:2e:ad:4b:
                    be:49:13:b5:6b:32:44:0f:02:96:78:7b:15:ba:d9:
                    2c:7a:30:46:22:46:26:4a:b0:61:bc:af:d9:55:a0:
                    59:ca:7c:3f:a7:fd:eb:69:ad:6e:fd:1c:17:0f:6e:
                    a6:57:09:72:c2:f4:5c:ff:2e:85:1c:15:9b:76:50:
                    57:c1:86:d6:22:86:bc:c3:ca:d7:f5:07:c3:8f:21:
                    42:c5:eb:28:1c:bc:45:26:7f:28:47:f1:dc:2f:ca:
                    e7:54:9f:b1:90:9f:e7:d7:f9:b6:90:a1:5e:e2:e0:
                    26:83:27:13:0b:cd:13:c2:8c:91:8a:12:2c:48:c8:
                    e2:cd:d5:9a:ca:f5:c7:f1:3b:da:9f:fe:5c:c6:97:
                    e2:cb:91:02:fd:7e:a3:5b:a6:39:c3:68:9e:9d:63:
                    f0:92:e6:59:5f:03:a1:b1:a6:f9:86:b4:4d:de:47:
                    04:9f:fc:df:9e:47:38:5f:be:3d:1a:38:12:1f:d2:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:6E:50:18:81:7F:B3:75:28:5D:0B:76:15:E7:32:1E:3C:4B:F6
            X509v3 Authority Key Identifier:
                keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:19:84:4d:d3:7b:24:e4:6a:3a:94:5a:c8:da:f8:40:c2:
         40:4d:f8:0f:b7:24:6e:ae:57:75:a4:45:23:dd:9d:b1:61:1f:
         15:ed:ca:de:af:39:cd:e2:21:2b:34:ac:d8:57:01:ef:06:9e:
         ff:ab:61:f0:ce:78:89:ee:95:49:58:61:df:31:f7:85:38:d0:
         fa:08:7d:0f:84:6d:ef:a2:ab:85:28:f6:a1:fe:bd:9b:0e:7b:
         e0:d7:33:f2:9c:60:e8:86:8f:0d:b7:b3:17:42:0f:c6:a0:67:
         c6:e0:5b:89:c0:8c:c2:8d:7a:28:05:3b:c4:0a:6b:1d:bf:75:
         06:75:46:a6:35:0c:56:97:24:40:3b:50:45:ba:d1:49:56:d2:
         86:6a:25:56:2b:82:24:b3:08:de:48:33:c0:07:95:01:83:e1:
         60:24:9c:4f:4c:9e:45:9b:e9:d3:5f:bb:45:16:8b:8e:17:45:
         14:3e:df:d3:db:c3:ca:cd:e3:d8:44:8c:d8:7a:68:7b:30:9a:
         f9:de:68:6b:65:26:0a:68:c5:cc:e7:3e:b6:49:30:ff:b0:be:
         81:14:f5:aa:aa:7d:90:dd:52:48:88:6a:0b:1e:45:38:c7:1f:
         36:7c:3d:90:f6:b9:30:5a:48:ed:07:b5:32:d8:ac:27:26:b4:
         af:ce:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:54:20 2025 by rpki-client