This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File:                     K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier:          fpUFjxZaoKMoWzS5xiQrwxwguzpqRdTO67Qb6BqVbho=
Subject key identifier:   1A:73:30:93:01:32:B5:B9:99:2C:5F:4D:DE:6E:5A:56:0A:73:EA:AD
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer:       /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial:       019B0CDBBE7EEBB9D4DE0FDD97E937139E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number:          071A
Signing time:             Thu 11 Dec 2025 10:01:26 +0000
Manifest this update:     Thu 11 Dec 2025 10:01:26 +0000
Manifest next update:     Fri 12 Dec 2025 10:01:26 +0000
Files and hashes:         1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: 3RIiMMb+jnaLurteN0TQ6Tu6Mp7lMuruPXqpCSJ0WYU=)
                          2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:db:be:7e:eb:b9:d4:de:0f:dd:97:e9:37:13:9e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
        Validity
            Not Before: Dec 11 10:01:26 2025 GMT
            Not After : Dec 12 10:01:26 2025 GMT
        Subject: CN=1a7330930132b5b9992c5f4dde6e5a560a73eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:dd:3e:72:4c:d8:50:73:c2:a4:97:58:44:
                    4d:69:95:d9:e5:ba:9b:5a:34:1f:14:f2:a1:03:a7:
                    e1:31:ce:30:cb:b7:57:1c:01:fb:4e:8c:85:a6:1c:
                    bd:ea:8d:67:ee:2e:61:4c:d4:a3:4e:c9:88:43:bb:
                    e4:59:0c:26:ba:00:cd:05:33:fd:f7:30:71:18:8f:
                    cf:ad:d6:6b:b1:87:fa:27:56:54:55:73:e9:cc:8f:
                    8b:5e:fb:0f:97:bb:2d:59:36:80:25:5f:35:cb:89:
                    f8:2c:2b:01:6c:1d:9e:50:4e:14:45:05:3b:08:dd:
                    ac:4b:b9:be:fc:25:a6:77:c3:ae:de:eb:cc:90:d4:
                    c1:c8:f1:be:45:11:96:1d:16:3f:2b:32:8f:f4:d2:
                    81:5d:2c:37:60:a4:6a:a0:f5:c3:68:bf:f7:70:e0:
                    90:0f:fe:a9:6f:92:a6:30:4a:e3:e7:02:6c:a5:2c:
                    40:4a:7b:88:90:9f:56:4d:a2:7a:15:c0:9c:0e:56:
                    3c:46:83:e5:bd:22:14:dc:34:d8:b8:76:0f:8b:13:
                    5b:23:22:bc:c3:19:0e:23:5a:99:1b:b7:15:af:ba:
                    df:b5:4c:e5:0a:f6:da:d8:56:5c:49:ff:7f:22:79:
                    cc:e3:3f:53:a9:8b:5e:7c:6e:5a:4b:ee:39:04:8b:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:73:30:93:01:32:B5:B9:99:2C:5F:4D:DE:6E:5A:56:0A:73:EA:AD
            X509v3 Authority Key Identifier:
                keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:60:e7:d2:c9:f2:04:b7:64:4f:49:37:64:7b:03:0e:cb:4b:
         63:9d:05:a0:8d:cb:7f:cd:af:99:77:07:42:e1:f8:d4:48:30:
         d8:5c:69:22:04:c5:28:40:92:91:cc:83:d1:23:3d:53:56:57:
         6a:27:1c:31:25:8a:e8:56:37:57:22:1f:1f:3c:53:11:64:52:
         1a:45:8c:54:39:68:86:6a:16:e5:e9:2e:93:5c:a7:33:a3:79:
         b1:aa:61:d3:22:ed:d9:12:a7:cc:cd:ab:a8:96:1b:22:05:be:
         7e:8c:fc:c8:cd:a8:5a:ed:b5:05:20:2d:8c:63:d5:b2:b4:9c:
         02:1f:1a:cf:03:88:42:cf:80:58:22:7e:06:5a:03:a1:31:73:
         cf:48:5e:4e:4f:45:c7:ee:77:54:48:60:23:2e:4c:01:69:b4:
         02:23:39:43:b8:ff:f0:90:0a:87:4d:5b:1d:47:b8:72:aa:5f:
         3a:83:67:bd:e7:f8:fb:e5:b6:2d:d3:df:d0:c1:4f:6e:7a:83:
         5b:4c:29:87:d5:ed:57:69:b7:d9:3e:bd:6d:90:de:dc:e7:dd:
         41:35:82:1a:9b:f7:2a:0c:72:6e:73:8c:0d:1e:1f:43:89:d0:
         5d:87:1c:e6:27:8f:b2:b3:90:cf:f6:9a:0b:14:ab:df:09:4a:
         50:50:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----