This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
File:                     qSjaimFsusTJQnRmk6Fh5JjEYs8.mft (raw, json)
Hash identifier:          Xgdz700GhxlU6OXUtrZf0eZ6Kuzn0YHT9vCK1s4lhUM=
Subject key identifier:   52:45:9E:15:9B:DB:BB:AC:55:C3:2E:9B:41:D6:88:BE:D0:B9:75:3F
Authority key identifier: A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
Certificate issuer:       /CN=a928da8a616cbac4c942746693a161e498c462cf
Certificate serial:       0197771C7F2CEA42D82BE12A8E80845F910D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
Manifest number:          92
Signing time:             Mon 16 Jun 2025 05:00:45 +0000
Manifest this update:     Mon 16 Jun 2025 05:00:45 +0000
Manifest next update:     Tue 17 Jun 2025 05:00:45 +0000
Files and hashes:         1: 65PIAiCfgfiAH-DOFMDqdYi7-v0.roa (hash: vrMIR5GbnN7NVc0BGSN7sHPt5ir6Ncr78mtDLJprPDY=)
                          2: qSjaimFsusTJQnRmk6Fh5JjEYs8.crl (hash: 4Gn6CItSqeBB1phvr74AQTUua1y1kw1R7loWjMG9xb4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:1c:7f:2c:ea:42:d8:2b:e1:2a:8e:80:84:5f:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928da8a616cbac4c942746693a161e498c462cf
        Validity
            Not Before: Jun 16 05:00:45 2025 GMT
            Not After : Jun 17 05:00:45 2025 GMT
        Subject: CN=52459e159bdbbbac55c32e9b41d688bed0b9753f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:03:1a:23:36:b6:f6:f6:32:43:6e:7e:d7:
                    f9:84:5c:27:9d:66:36:37:da:a2:7d:11:a7:39:9d:
                    5a:d8:74:6b:87:e8:74:c0:36:a7:23:51:9c:20:c4:
                    b3:2d:44:8e:d9:ab:dc:36:70:ed:40:23:84:e5:66:
                    24:b6:40:ed:e9:28:d9:71:0a:d3:eb:6b:0b:21:a9:
                    65:01:8f:62:6c:6c:dc:09:fe:94:65:36:df:30:d0:
                    39:f4:43:b9:3c:ef:0c:2c:7d:af:44:aa:b9:d5:8f:
                    4b:f0:ca:1c:79:12:76:0a:cd:65:72:6f:74:21:79:
                    d4:de:01:29:48:4c:87:73:cc:ff:ef:4f:35:ea:7d:
                    18:b4:e0:50:ff:da:61:24:5e:94:88:58:83:b0:84:
                    a7:63:b7:5d:86:e7:0c:33:7d:13:73:88:d3:83:26:
                    1b:8e:32:ca:a2:9f:8f:04:84:37:0d:9e:c6:c6:2a:
                    5a:bc:d6:ef:36:d3:f3:b6:1d:f1:c3:12:24:2b:dd:
                    b5:67:07:3d:91:40:49:4e:fa:09:0f:03:96:56:2d:
                    e7:73:47:31:2f:0f:0c:3e:86:65:8c:9a:1a:3c:71:
                    78:53:43:91:5a:e5:e2:7e:43:aa:41:2d:11:37:63:
                    87:8c:76:83:62:8a:7b:d8:bc:1c:c6:b7:98:00:fb:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:45:9E:15:9B:DB:BB:AC:55:C3:2E:9B:41:D6:88:BE:D0:B9:75:3F
            X509v3 Authority Key Identifier:
                keyid:A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2d:f7:fb:10:56:af:b1:d3:4a:5a:f1:fc:e8:eb:96:fb:b2:
         3f:fb:15:21:ee:6d:bd:a1:fc:b1:64:9e:2e:02:3d:c5:14:c1:
         b2:ae:e5:d4:59:b2:d5:5d:6a:54:02:33:f4:7a:ee:6b:fb:44:
         29:57:ee:e4:4e:c5:79:be:1e:8e:da:c0:be:21:01:47:27:ab:
         6b:1e:ee:d8:84:28:ce:03:dc:79:fb:09:c6:78:5f:8a:a0:5a:
         d6:d8:00:70:88:c9:4a:a4:27:3f:e8:94:b5:5f:20:88:51:8d:
         00:cb:a5:a3:52:d2:0b:94:06:a6:a1:70:d1:88:5e:f8:ae:c3:
         d4:c6:da:00:b4:f9:b4:79:d2:77:50:54:5e:06:48:62:2f:f6:
         7f:8c:29:73:b8:4c:ca:c0:d9:bc:23:1f:b8:a7:a9:1f:0b:61:
         d8:13:a0:0a:78:cf:89:40:c8:46:2f:b3:a7:dd:71:ba:4f:0e:
         44:5c:b0:76:8e:08:4b:ff:18:b9:25:59:08:73:76:e4:49:88:
         72:13:10:4e:43:f1:63:2e:e6:e5:5e:c9:36:39:27:68:87:19:
         dd:8c:13:21:3e:ec:54:a1:e0:0a:f1:e2:cc:e9:02:a5:31:69:
         26:9c:1a:af:16:78:8d:76:e1:ed:02:a3:20:7d:3a:a4:fa:b4:
         60:d2:3b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3HH8s6kLYK+EqjoCEX5ENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MjhkYThhNjE2Y2JhYzRjOTQyNzQ2NjkzYTE2MWU0OThj
NDYyY2YwHhcNMjUwNjE2MDUwMDQ1WhcNMjUwNjE3MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg1MjQ1OWUxNTliZGJiYmFjNTVjMzJlOWI0MWQ2ODhiZWQwYjk3NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VUDGiM2tvb2MkNuftf5hFwnnWY2
N9qifRGnOZ1a2HRrh+h0wDanI1GcIMSzLUSO2avcNnDtQCOE5WYktkDt6SjZcQrT
62sLIallAY9ibGzcCf6UZTbfMNA59EO5PO8MLH2vRKq51Y9L8MoceRJ2Cs1lcm90
IXnU3gEpSEyHc8z/70816n0YtOBQ/9phJF6UiFiDsISnY7ddhucMM30Tc4jTgyYb
jjLKop+PBIQ3DZ7GxipavNbvNtPzth3xwxIkK921Zwc9kUBJTvoJDwOWVi3nc0cx
Lw8MPoZljJoaPHF4U0ORWuXifkOqQS0RN2OHjHaDYop72LwcxreYAPsgeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJFnhWb27usVcMum0HWiL7QuXU/MB8GA1UdIwQY
MBaAFKko2ophbLrEyUJ0ZpOhYeSYxGLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVNqYWltRnN1c1RKUW5SbWs2Rmg1SmpFWXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MGI0NzItZGFkYS00MmU2LTlmMzQt
MjRiZjMwZWRkYmUxLzEvcVNqYWltRnN1c1RKUW5SbWs2Rmg1SmpFWXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82MGI0NzItZGFkYS00MmU2LTlmMzQtMjRiZjMwZWRkYmUx
LzEvcVNqYWltRnN1c1RKUW5SbWs2Rmg1SmpFWXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC33+xBW
r7HTSlrx/OjrlvuyP/sVIe5tvaH8sWSeLgI9xRTBsq7l1Fmy1V1qVAIz9Hrua/tE
KVfu5E7Feb4ejtrAviEBRyerax7u2IQozgPcefsJxnhfiqBa1tgAcIjJSqQnP+iU
tV8giFGNAMulo1LSC5QGpqFw0Yhe+K7D1MbaALT5tHnSd1BUXgZIYi/2f4wpc7hM
ysDZvCMfuKepHwth2BOgCnjPiUDIRi+zp91xuk8ORFywdo4IS/8YuSVZCHN25EmI
chMQTkPxYy7m5V7JNjknaIcZ3YwTIT7sVKHgCvHizOkCpTFpJpwarxZ4jXbh7QKj
IH06pPq0YNI7gw==
-----END CERTIFICATE-----