This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
File:                     8Mx6RHSC5XsGBLq7gqUkCc3js20.mft (raw, json)
Hash identifier:          L4AWtRnsuzyeIamWB8m4nDTzUGwokglmj6h627Sw9rE=
Subject key identifier:   C9:59:AA:A2:AB:41:CE:51:CE:BD:19:C0:F9:32:6C:B0:1A:4F:FB:A2
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       019A38DA5A28CB15D9FCB4616BFAA14E1C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
Manifest number:          11C4
Signing time:             Fri 31 Oct 2025 06:00:25 +0000
Manifest this update:     Fri 31 Oct 2025 06:00:25 +0000
Manifest next update:     Sat 01 Nov 2025 06:00:25 +0000
Files and hashes:         1: 1nkbAUyMBTqm0zrFDH2BJFInn74.roa (hash: kSALWUCmn9r8Fvws/ekGIMLGIzxTE3Z8oBdBGKZ1vV8=)
                          2: 4Z1qIWMwOAMlHFP-sDeKn3ncv68.roa (hash: Cc/ITPpY5ZCl6cqqvemf3EU8EuTldz4M89wdeUZEEs4=)
                          3: 8Mx6RHSC5XsGBLq7gqUkCc3js20.crl (hash: z6g/xqjE9w9KKA5ay7ypby6n3gdo0pNp57zUnINKMng=)
                          4: TQH-UqpdFcQPQJ_O-mPcMaxRh5Y.roa (hash: 5UUSbkoNXYWS7SIZNqMfY5y6jLKaLP3pTD8kSnX3ZQY=)
                          5: cmgXNMaAC5g-hi6_5ineFSX4mNo.roa (hash: tT0BFRcW7aTCxqYrpbIrMjQ3QMu6zsEXBG/3mWT8HAA=)
                          6: vYR5ABwtJ7q6oSyxxElARDk7dqw.roa (hash: obrOWN19xkWreFh1sEBEYAaVII0u+vgvq2GtQ4FWPEo=)
                          7: zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa (hash: RxerbYPvQlg/5QiApArrLAGt6msA3uH/fhheHO7fcUs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:38:da:5a:28:cb:15:d9:fc:b4:61:6b:fa:a1:4e:1c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: Oct 31 06:00:25 2025 GMT
            Not After : Nov  1 06:00:25 2025 GMT
        Subject: CN=c959aaa2ab41ce51cebd19c0f9326cb01a4ffba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:84:5a:74:61:f3:11:f2:22:60:77:fa:f0:
                    08:e9:6e:25:0e:2b:29:6b:b2:ec:56:06:7e:bd:19:
                    5d:01:d3:90:43:bd:64:d0:da:e2:85:20:53:fb:69:
                    e6:84:15:27:9e:c6:bd:3e:34:4e:aa:73:ef:95:00:
                    c0:f0:79:da:c2:f2:63:84:ef:58:78:d4:45:98:56:
                    a2:45:23:bf:cc:32:44:60:32:a7:10:66:00:28:2f:
                    2b:56:0a:64:c0:ad:b4:d5:63:9a:74:f5:ac:5b:38:
                    6f:c2:e0:e8:20:9e:d9:ad:5f:83:8a:a6:00:e7:40:
                    03:ee:66:61:35:51:ec:d7:36:e1:c8:90:65:df:24:
                    d1:36:72:d2:b3:78:3c:51:16:4c:59:78:fa:31:4e:
                    2f:60:09:2a:f0:5d:9a:0e:5e:7c:3e:53:95:03:6d:
                    09:da:9a:03:7b:4a:11:e8:68:15:4e:9b:7e:5b:55:
                    62:6a:e8:54:ee:05:77:33:9c:b5:91:e0:7e:8e:2f:
                    de:a1:96:41:86:c4:90:cc:f5:60:ba:2d:48:dd:d0:
                    4a:c5:d9:83:1a:6c:65:a5:5c:97:c6:b0:91:48:b4:
                    49:b9:24:ee:6e:09:96:d8:38:94:95:0b:a5:f6:1f:
                    a4:79:6a:4d:30:b7:11:f0:04:18:24:05:5b:82:17:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:AA:A2:AB:41:CE:51:CE:BD:19:C0:F9:32:6C:B0:1A:4F:FB:A2
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:b8:6e:45:2c:e3:bd:e0:7c:98:af:f4:b3:b2:77:ba:25:
         8d:69:82:89:bf:50:c0:e0:d6:34:c4:8e:9a:85:e2:39:5e:0c:
         12:2c:e5:1f:3f:3a:82:89:59:3a:df:10:01:8d:1d:fe:6b:0a:
         a8:9f:30:df:a8:e1:c7:f8:26:66:80:a6:e4:a0:52:5f:89:73:
         5b:11:8d:69:5d:7d:38:14:b8:42:40:3f:50:aa:d1:a3:dc:81:
         6c:d4:fd:d1:77:ae:34:83:5c:d6:22:f4:db:14:ba:cf:cf:f5:
         b9:c4:a8:22:24:22:03:ea:7e:fe:5f:92:9b:ce:a3:40:a6:f4:
         dc:4d:27:46:6f:23:cb:9d:36:61:d5:ab:43:de:8b:6a:74:b5:
         e1:8e:78:1c:9c:cd:42:4a:37:db:13:1c:19:af:0e:1a:96:db:
         20:89:bf:54:81:bb:62:bf:31:20:94:b0:c4:e9:b3:bd:94:74:
         db:a8:93:4d:ed:71:90:db:d3:e5:4e:f5:8e:44:5b:5d:4e:77:
         78:74:51:39:41:32:fc:36:dc:11:87:3e:d0:b3:18:70:2a:2a:
         c7:d7:a1:56:26:31:a6:1d:45:f5:9d:60:50:27:49:9e:ba:93:
         e6:25:1a:6f:c1:be:2a:94:7d:88:ca:0b:22:66:72:1f:50:c8:
         4e:c4:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----