This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
File:                     __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json)
Hash identifier:          jcv7hZl+fzvjZ7/+Mu0eGyCvYv1vwCqMpU/VegzLQGg=
Subject key identifier:   B7:F2:C1:98:E5:75:B9:78:73:F3:E6:4F:11:9C:18:75:E8:BE:17:8E
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Certificate issuer:       /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial:       019B24E3BF1FA4FCDE8F897DCEFBA439CC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
Manifest number:          177D
Signing time:             Tue 16 Dec 2025 02:01:03 +0000
Manifest this update:     Tue 16 Dec 2025 02:01:03 +0000
Manifest next update:     Wed 17 Dec 2025 02:01:03 +0000
Files and hashes:         1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: 8pSGV1IiAB23DZfaRTcKcQxQkQr4USGsU9/M1fyDTDM=)
                          2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:e3:bf:1f:a4:fc:de:8f:89:7d:ce:fb:a4:39:cc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
        Validity
            Not Before: Dec 16 02:01:03 2025 GMT
            Not After : Dec 17 02:01:03 2025 GMT
        Subject: CN=b7f2c198e575b97873f3e64f119c1875e8be178e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:d6:e5:fb:81:b5:e8:01:64:d8:d1:a5:f7:
                    4d:26:6c:c1:ca:48:22:d3:4f:07:58:25:63:20:d9:
                    51:3a:a7:9d:9e:f8:0f:f1:2b:b2:72:e0:07:e7:0b:
                    7f:73:0c:30:26:95:35:36:fb:6d:ce:2e:0e:fc:c4:
                    7f:23:a8:15:e9:58:72:c3:41:39:14:b1:8c:17:ef:
                    96:5b:92:71:85:63:6d:d8:79:2d:d9:c7:69:ea:c3:
                    33:1e:28:18:f1:e9:e7:f9:58:d5:23:6d:df:45:96:
                    a6:b5:04:96:dc:e0:86:45:c0:4b:f3:2e:97:d4:12:
                    70:13:1b:ce:28:00:bc:73:ff:43:e4:09:87:90:3d:
                    2b:19:b3:04:67:e9:59:f8:e7:35:09:cd:e5:07:3f:
                    76:72:3a:a7:17:62:9f:1f:89:fe:c4:61:36:4d:68:
                    8e:34:81:af:53:5f:c8:c3:77:a2:21:89:b5:2e:37:
                    bf:30:d9:56:42:0b:1a:23:d8:93:df:87:21:1e:11:
                    6f:af:81:ec:c1:e4:3f:65:20:91:0d:1a:e3:6e:83:
                    97:39:c5:b4:2a:c6:54:94:6d:ec:2c:1a:15:e5:dd:
                    c7:11:74:45:1b:61:b2:a2:9d:1c:31:7d:d5:d1:18:
                    72:17:ff:60:62:8c:64:09:b6:4b:16:0e:47:c4:9b:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:C1:98:E5:75:B9:78:73:F3:E6:4F:11:9C:18:75:E8:BE:17:8E
            X509v3 Authority Key Identifier:
                keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:1c:ee:b3:34:96:ad:87:8c:ba:d0:11:e6:38:45:9e:d5:
         d9:98:fc:28:4c:b1:c7:5b:2f:f4:7b:2c:43:17:f2:0f:4e:2f:
         f6:f0:24:b8:72:9c:10:bf:2a:e0:5d:0c:7a:fc:b1:16:aa:97:
         9c:61:1b:40:c4:8e:ef:24:df:b9:b6:f9:21:b7:13:4e:ce:3f:
         ba:cf:23:dc:50:93:6a:08:0c:68:6e:a8:4c:f6:3a:4d:22:9e:
         eb:a7:5a:c4:b1:48:cb:d2:4a:dd:e7:84:e1:ea:23:69:b7:08:
         66:e1:5b:a1:39:eb:88:25:f4:18:64:22:92:a3:7d:7f:b3:5b:
         c7:fb:d8:91:42:b3:e2:e3:d6:95:fb:3f:89:4a:62:ba:51:c6:
         5c:76:7c:77:57:32:1c:dd:1f:47:24:86:42:ff:a0:a0:8e:b4:
         0d:6e:52:70:fc:dc:2d:2e:e4:b9:b7:fc:2f:9f:09:e0:ea:82:
         73:14:77:ec:d0:07:57:04:77:d9:39:63:4a:de:00:7c:38:5b:
         74:a4:bd:9b:df:a6:28:c7:b4:db:f7:a4:1e:3c:5c:3d:d6:4d:
         63:15:17:f7:80:21:b2:31:f9:cf:1b:83:be:1c:7a:a8:05:e8:
         3d:7a:49:2e:24:00:ec:d1:33:95:bf:1a:06:e5:b4:e1:da:ee:
         76:be:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----