This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File:                     y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier:          h6Xi6VC/1s7XVKX2i/aGVzjS7BXZazAxljwZx10B/+I=
Subject key identifier:   35:2D:82:E7:09:0A:70:C0:8E:15:94:14:13:E9:E3:89:A6:9A:D2:FC
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer:       /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial:       019A582E263328750B255BE8BC149A666384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number:          1712
Signing time:             Thu 06 Nov 2025 08:00:10 +0000
Manifest this update:     Thu 06 Nov 2025 08:00:10 +0000
Manifest next update:     Fri 07 Nov 2025 08:00:10 +0000
Files and hashes:         1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
                          2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
                          3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: KVfvo330aJRUSePCP1Y5AEOC2NngDWh2z5Ar6cOn/U4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:58:2e:26:33:28:75:0b:25:5b:e8:bc:14:9a:66:63:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
        Validity
            Not Before: Nov  6 08:00:10 2025 GMT
            Not After : Nov  7 08:00:10 2025 GMT
        Subject: CN=352d82e7090a70c08e15941413e9e389a69ad2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0a:83:76:0d:6a:bf:47:cb:14:d2:df:a7:26:
                    d8:be:7f:58:6b:f9:db:48:6b:ed:fd:fe:f0:5c:ae:
                    98:4a:3e:af:0d:7e:53:78:0a:34:5b:73:96:e2:88:
                    3d:f8:a2:92:1f:0b:05:5d:db:41:38:8d:32:ac:5f:
                    3a:4f:a0:ab:ca:f6:61:31:b1:39:8a:01:fd:f1:31:
                    4e:ab:08:dc:73:0e:5d:e4:8d:9f:e8:4b:7a:10:70:
                    f5:e0:2b:9f:f2:10:57:f8:6f:94:a0:46:09:27:6f:
                    a1:e6:25:e8:1a:f2:05:fb:8b:76:ce:fc:f9:b8:a1:
                    42:ac:7a:5a:a0:52:67:e2:24:0b:0c:d0:f6:d9:5a:
                    36:ce:e3:fc:b1:85:40:ba:bc:c2:a4:66:13:ae:b2:
                    aa:fd:d3:b1:9d:f9:ba:e9:47:a3:72:9b:18:72:8d:
                    7a:f5:26:d6:17:88:6d:66:8d:cd:eb:fd:5d:83:22:
                    fc:3a:57:e1:5d:d2:40:e3:52:d7:17:03:f9:4e:5b:
                    cb:0f:e8:83:02:05:57:66:41:9c:18:93:00:0c:fb:
                    e0:ef:f0:13:56:f2:d6:e1:d4:8e:9d:3d:e3:49:2e:
                    fe:61:9b:73:46:f1:1a:a0:b9:f5:9e:05:b4:51:32:
                    e1:20:82:97:67:4a:22:78:0d:65:3b:7d:a3:8a:c2:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:82:E7:09:0A:70:C0:8E:15:94:14:13:E9:E3:89:A6:9A:D2:FC
            X509v3 Authority Key Identifier:
                keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:7e:84:24:84:64:d8:a8:d8:f7:e2:1f:55:60:a1:73:66:
         bd:10:94:3e:0f:98:2a:20:41:5c:eb:ef:eb:77:df:64:55:1e:
         57:76:13:58:f0:8a:e0:f8:d5:76:1b:b2:78:42:a2:21:ac:78:
         ae:1c:af:ca:8b:30:0d:ff:b4:2e:ed:1f:3d:f3:f6:a3:c0:a2:
         d7:48:04:10:08:8b:21:49:f4:98:42:f4:50:c7:c8:95:15:6c:
         67:13:78:11:9f:19:b4:b3:25:68:7b:a2:ea:66:72:30:15:0a:
         27:7e:6a:3f:68:d4:d8:f6:cc:01:a6:02:0e:0a:be:8c:1d:94:
         ef:39:9f:ef:7c:74:2d:a9:36:18:62:82:29:12:f7:58:ff:cf:
         e4:a6:72:6b:ea:86:13:d6:b9:d8:75:cc:9a:2f:8f:8b:88:05:
         0c:95:8f:7a:3a:95:18:a5:f3:47:3c:d0:8c:14:9f:fa:d1:08:
         9b:2f:83:03:11:ac:ce:ba:c1:62:97:06:9e:a6:64:2c:4e:5d:
         59:f1:ee:5d:8b:49:c9:bf:9e:b4:70:30:6e:63:45:cc:58:49:
         1b:2a:6d:aa:73:e6:eb:6c:a5:b5:4a:f5:5e:c6:18:6a:0d:99:
         10:07:fc:5b:f6:59:3f:54:30:d4:80:34:d2:4c:fb:0e:e5:5a:
         86:72:d9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpYLiYzKHULJVvovBSaZmOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmYyMDQwZDk0Yzk5NWIwNDYxZGM1MTE0YTRjMDg3MzUx
ZTk5ZjIwHhcNMjUxMTA2MDgwMDEwWhcNMjUxMTA3MDgwMDEwWjAzMTEwLwYDVQQD
EygzNTJkODJlNzA5MGE3MGMwOGUxNTk0MTQxM2U5ZTM4OWE2OWFkMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wqDdg1qv0fLFNLfpybYvn9Ya/nb
SGvt/f7wXK6YSj6vDX5TeAo0W3OW4og9+KKSHwsFXdtBOI0yrF86T6CryvZhMbE5
igH98TFOqwjccw5d5I2f6Et6EHD14Cuf8hBX+G+UoEYJJ2+h5iXoGvIF+4t2zvz5
uKFCrHpaoFJn4iQLDND22Vo2zuP8sYVAurzCpGYTrrKq/dOxnfm66UejcpsYco16
9SbWF4htZo3N6/1dgyL8OlfhXdJA41LXFwP5TlvLD+iDAgVXZkGcGJMADPvg7/AT
VvLW4dSOnT3jSS7+YZtzRvEaoLn1ngW0UTLhIIKXZ0oieA1lO32jisL4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUtgucJCnDAjhWUFBPp44mmmtL8MB8GA1UdIwQY
MBaAFMtvIEDZTJlbBGHcURSkwIc1HpnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYt
MTk4MDhiZjQ0NDcxLzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYtMTk4MDhiZjQ0NDcx
LzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+x+hCSE
ZNio2PfiH1VgoXNmvRCUPg+YKiBBXOvv63ffZFUeV3YTWPCK4PjVdhuyeEKiIax4
rhyvyoswDf+0Lu0fPfP2o8Ci10gEEAiLIUn0mEL0UMfIlRVsZxN4EZ8ZtLMlaHui
6mZyMBUKJ35qP2jU2PbMAaYCDgq+jB2U7zmf73x0Lak2GGKCKRL3WP/P5KZya+qG
E9a52HXMmi+Pi4gFDJWPejqVGKXzRzzQjBSf+tEImy+DAxGszrrBYpcGnqZkLE5d
WfHuXYtJyb+etHAwbmNFzFhJGyptqnPm62yltUr1XsYYag2ZEAf8W/ZZP1Qw1IA0
0kz7DuVahnLZBQ==
-----END CERTIFICATE-----