This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
File:                     m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft (raw, json)
Hash identifier:          6Q9GcjV5cIWZHWIGgSDWQOKopkslnokXd1J/rPTve2Q=
Subject key identifier:   33:F3:97:5F:E9:AD:56:19:D2:B7:43:47:D7:5E:CE:89:32:6C:2E:E8
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Certificate issuer:       /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial:       019A9F6BF53C28CF17F92203908F926D3421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
Manifest number:          0ACF
Signing time:             Thu 20 Nov 2025 04:00:43 +0000
Manifest this update:     Thu 20 Nov 2025 04:00:43 +0000
Manifest next update:     Fri 21 Nov 2025 04:00:43 +0000
Files and hashes:         1: 7dGZOPsa1FU0C36WBDwIw7gL1Bo.roa (hash: 5etpC4MaJX7LndBCS5De3y9ecFGJX8+EfQl3ZBJ8rb8=)
                          2: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl (hash: 93X1Gfd8tkSxOA/K0Aigu83KvbnXQlRiSu9wZlPPG0Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:9f:6b:f5:3c:28:cf:17:f9:22:03:90:8f:92:6d:34:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
        Validity
            Not Before: Nov 20 04:00:43 2025 GMT
            Not After : Nov 21 04:00:43 2025 GMT
        Subject: CN=33f3975fe9ad5619d2b74347d75ece89326c2ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:b7:62:16:8d:6b:16:44:1f:49:12:f8:91:
                    4f:cb:10:56:07:d7:6e:b7:00:89:93:47:81:85:39:
                    5a:f6:47:99:c1:40:2b:81:83:7c:b8:e7:76:4a:c2:
                    72:5f:9b:7f:a8:bd:9a:35:b6:1e:82:90:f3:70:0f:
                    7c:76:97:ed:be:a5:14:91:c2:d3:e1:c0:ae:c0:a6:
                    22:52:70:8e:2f:b4:ad:cb:24:1c:a0:cc:bc:c8:1c:
                    49:1b:6d:e6:35:2a:72:75:90:5c:8b:d5:dc:71:29:
                    cf:92:0f:70:21:51:f7:44:93:b2:d0:8b:6e:f4:1d:
                    d6:20:94:e9:87:bb:af:8d:be:a8:27:7d:0e:b6:22:
                    c3:aa:3e:98:42:e7:bf:ab:0d:b1:59:00:83:4f:3c:
                    a3:8b:49:5d:f7:a4:85:6a:0f:5c:64:e1:55:eb:d4:
                    7d:c7:c3:75:67:e2:bb:19:4e:36:7e:e4:72:b3:ee:
                    e8:7c:43:69:4f:59:79:90:89:0d:6b:d6:84:0f:d7:
                    aa:a5:67:09:9a:03:91:ea:19:1b:9b:72:12:ff:23:
                    b6:43:11:f1:e6:5d:35:43:7b:26:e1:4a:62:dd:ed:
                    ae:d9:ef:af:31:b9:86:e3:1e:f5:38:19:3b:3c:76:
                    ec:ef:e9:4e:b1:8b:82:33:87:72:1f:41:78:9f:c5:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F3:97:5F:E9:AD:56:19:D2:B7:43:47:D7:5E:CE:89:32:6C:2E:E8
            X509v3 Authority Key Identifier:
                keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:83:bc:b9:15:57:45:91:b2:63:b5:10:4f:6b:da:3c:20:85:
         60:9a:db:2c:ff:56:10:d2:f5:ba:5c:dd:8c:af:a3:29:2e:b3:
         ea:c9:b9:8a:ea:12:31:28:fd:72:5f:f9:5c:c3:d6:aa:99:8b:
         92:09:bc:47:02:62:6c:5e:4f:d0:e9:15:37:71:34:cb:c5:e0:
         02:5e:84:ca:1b:f4:d7:6a:a9:0c:fd:61:e4:03:ae:bd:50:a2:
         f2:5b:36:e4:4b:7b:fe:b0:de:05:bd:2c:98:49:57:0e:6d:bd:
         db:dc:50:90:d8:ba:c1:11:13:c4:da:aa:3d:84:76:ad:8c:99:
         52:90:f1:fd:ef:f4:c0:22:a7:f1:7e:4c:63:d8:a1:74:0f:e0:
         e3:2c:3a:3a:5c:06:ce:ff:66:2a:87:8f:4d:38:b9:e6:71:84:
         3a:2c:ca:56:b4:ee:c5:bf:8b:f6:00:7b:0f:a3:a6:cc:53:ce:
         4b:1e:06:ce:10:60:4f:af:f9:17:a5:01:b6:b7:04:56:6d:de:
         dc:a3:e0:b9:d2:26:53:99:f1:f7:b6:17:d8:48:bc:05:4e:66:
         a8:1e:61:ee:e6:92:ed:59:b3:7c:bb:ff:ce:59:2e:57:31:92:
         ed:ae:79:fe:ff:4e:b5:01:36:79:55:7c:77:f5:23:4a:4a:07:
         1b:8b:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----