This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File:                     waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier:          HpGDGBkPR2GuyqRdORXSgsbIQoxbodYWreeWLJhhgQE=
Subject key identifier:   83:CE:7D:40:38:AD:C3:7B:90:DF:5C:0A:B5:C3:CB:A2:37:8D:DB:76
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer:       /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial:       019B2BC1E2BA09919DE3C7437FD9C8107F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number:          1783
Signing time:             Wed 17 Dec 2025 10:01:25 +0000
Manifest this update:     Wed 17 Dec 2025 10:01:25 +0000
Manifest next update:     Thu 18 Dec 2025 10:01:25 +0000
Files and hashes:         1: GoKsRuNbxr5L3qFHtpnyKXAluyY.roa (hash: YvLXNuSAV/J9nOxpCJDg3XkDPCXj0rlwbWd+h+lCd+8=)
                          2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: EfN25RI4M20uZWAfvdqrPB4gpydEuh9DikQZUEHMSYE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:c1:e2:ba:09:91:9d:e3:c7:43:7f:d9:c8:10:7f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
        Validity
            Not Before: Dec 17 10:01:25 2025 GMT
            Not After : Dec 18 10:01:25 2025 GMT
        Subject: CN=83ce7d4038adc37b90df5c0ab5c3cba2378ddb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ef:86:30:41:84:08:a3:91:06:96:88:a8:47:
                    73:bb:0a:f3:f0:7e:53:44:d9:62:2a:93:11:bb:f0:
                    ef:dc:77:fb:b5:00:2f:16:ea:e8:0c:4f:6f:29:8e:
                    f9:a6:a7:eb:14:60:8b:52:d2:8a:cd:e1:04:93:12:
                    b0:3b:14:d8:ed:c7:9b:30:c6:21:65:6d:40:34:e8:
                    e8:16:f0:53:bf:30:fa:b9:70:4e:37:60:ee:85:00:
                    be:8a:6b:76:28:bd:d5:66:15:d9:3f:f1:6c:fe:13:
                    4e:f8:ca:db:79:91:35:40:60:81:f4:5b:41:f6:6b:
                    7d:94:60:0c:c0:9b:38:b0:ce:15:24:50:e9:86:fc:
                    6e:95:34:c4:02:8b:af:50:d9:eb:ab:25:64:13:cb:
                    ab:00:a2:f7:f5:78:30:9f:22:f6:7d:65:49:46:58:
                    f4:55:e2:eb:28:25:ba:81:ed:cc:85:48:7b:64:2c:
                    f2:fb:3d:d5:f7:41:34:01:c7:f2:53:1f:a8:46:a2:
                    8c:00:72:a1:8a:fd:cb:96:21:87:8c:24:12:e9:51:
                    84:e6:12:ef:d3:74:0c:d6:61:18:df:19:2c:1b:27:
                    6d:aa:5f:3a:18:55:df:3e:b1:55:cf:84:08:c4:50:
                    75:a9:75:8d:90:a0:0f:4f:65:9b:b8:fa:9d:33:ad:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:7D:40:38:AD:C3:7B:90:DF:5C:0A:B5:C3:CB:A2:37:8D:DB:76
            X509v3 Authority Key Identifier:
                keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:e6:aa:7b:e0:e3:1f:49:fb:ef:e9:45:94:c1:e7:68:02:
         d9:c8:38:68:c6:6d:1c:44:6a:9a:fc:5e:3c:04:3a:d3:10:a1:
         a8:ce:d1:3b:5e:ae:cd:ba:0f:43:40:b1:7e:11:f2:a7:16:38:
         78:ef:b3:6b:e9:ca:e5:53:35:72:11:ee:65:a4:2f:c4:24:46:
         1d:43:75:97:9d:b5:44:f5:0b:e9:20:84:24:20:34:ab:75:4e:
         62:78:18:68:95:af:f7:c8:1d:3a:b1:45:bd:1b:c1:af:24:b8:
         ac:27:81:c5:28:1e:7c:83:0d:d3:d0:5c:d7:76:89:dd:89:f2:
         73:61:e9:6b:0f:e2:b7:0f:81:8a:f5:5e:82:1a:c8:30:97:e4:
         8f:7e:c5:e1:e7:98:c1:b2:c9:cc:07:4c:f0:fe:02:4d:28:83:
         7b:27:b2:e0:f3:97:4f:a7:32:76:1c:19:32:45:0e:d9:2b:1a:
         e5:79:cb:d5:80:6f:51:7f:90:1a:6c:23:1c:0c:92:35:9f:e6:
         20:ea:7f:5f:ce:4c:ed:5d:ca:26:0f:e3:49:32:39:55:bf:96:
         b9:b8:7f:a9:92:c4:23:40:82:b4:f4:cf:4c:a8:61:38:30:5b:
         f6:8a:b0:c9:90:d0:5d:d6:4d:04:ae:d9:5e:38:1c:a2:3a:6c:
         99:64:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----