This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
File:                     rO9NpWy5QNny99Ahryph-9OxTqg.mft (raw, json)
Hash identifier:          HTJK9qhV7+5oIrBW4gC2BLPbpWCtJmqiioDtD/gtDrY=
Subject key identifier:   3F:68:34:19:AF:B3:25:3F:3B:99:BC:34:38:B9:E1:25:23:0B:C1:0A
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Certificate issuer:       /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial:       01979B288CEAE0F2E253D7B4DD74F8674400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
Manifest number:          0BAF
Signing time:             Mon 23 Jun 2025 05:00:15 +0000
Manifest this update:     Mon 23 Jun 2025 05:00:15 +0000
Manifest next update:     Tue 24 Jun 2025 05:00:15 +0000
Files and hashes:         1: csc62_075z-O1jbjAbm_rCnKZRc.roa (hash: Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=)
                          2: rO9NpWy5QNny99Ahryph-9OxTqg.crl (hash: Fr/iPMBDElpS/Nk1sSReNp6Qj1VOJL0rnEWPOOM3gbA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:28:8c:ea:e0:f2:e2:53:d7:b4:dd:74:f8:67:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
        Validity
            Not Before: Jun 23 05:00:15 2025 GMT
            Not After : Jun 24 05:00:15 2025 GMT
        Subject: CN=3f683419afb3253f3b99bc3438b9e125230bc10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:61:75:5b:1c:77:52:f4:ff:ff:f5:3b:f0:2a:
                    80:3e:21:26:0a:5c:e2:93:de:a6:63:f9:0b:74:4f:
                    bb:fc:28:48:83:ff:db:47:88:85:aa:67:8e:8a:cc:
                    a0:b5:4f:de:30:57:37:35:16:a7:c2:1a:65:7c:20:
                    8b:06:fc:71:a5:81:f4:8a:18:83:69:b8:bf:69:9f:
                    ac:2d:aa:08:0e:63:6e:6b:95:33:f0:36:1d:c0:bb:
                    1f:e5:28:d9:94:97:80:8a:54:75:32:7d:ae:4b:83:
                    25:a8:6d:3d:9c:5e:b6:af:c4:36:31:30:3f:17:a5:
                    bf:92:58:51:7c:15:6a:81:dc:2e:95:cc:84:bf:22:
                    39:1c:66:4b:25:a1:32:31:fd:6e:9f:b1:b1:59:75:
                    cd:2e:5a:80:c6:ba:22:23:0f:6b:18:36:a7:55:74:
                    cb:63:3d:42:02:da:24:ef:87:7f:79:46:c3:ce:52:
                    08:0f:34:36:ef:79:ff:f7:0e:22:8b:83:82:73:45:
                    3a:9f:b6:9f:ad:66:ad:3a:e0:83:8c:40:3b:f1:d4:
                    88:f2:7e:e2:b9:c2:18:ad:e5:c1:97:e0:07:6b:ce:
                    a1:75:b3:da:85:f5:49:8b:5e:ee:b3:9d:d6:4e:f7:
                    46:5f:d4:4f:d9:95:dc:5f:15:99:3d:15:6b:3b:47:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:34:19:AF:B3:25:3F:3B:99:BC:34:38:B9:E1:25:23:0B:C1:0A
            X509v3 Authority Key Identifier:
                keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:de:78:08:d9:9a:07:c2:4d:09:c5:ad:5f:25:dc:94:19:
         86:0c:ac:b2:95:4e:08:54:0e:29:e5:cf:eb:5d:c7:80:33:15:
         53:90:75:72:9d:6f:09:f2:2c:13:fd:28:77:bd:a5:0d:94:aa:
         21:bc:fb:07:40:29:98:1f:1d:4d:ee:22:8c:86:7c:39:10:40:
         1c:f1:ea:aa:c3:5b:32:f7:56:77:96:42:29:86:f2:7e:b9:16:
         e1:6e:25:d5:55:40:3d:1e:64:66:ea:0f:b3:13:94:18:eb:cc:
         c8:aa:ad:74:3f:96:e3:c2:eb:0e:2b:9a:e0:9c:dc:c6:af:b6:
         eb:cc:61:70:4c:4a:fe:9a:c4:c1:71:1f:32:f4:bd:d1:31:8c:
         34:ce:5f:fe:96:1e:ff:00:41:f6:34:b0:dd:6c:f9:f9:ea:00:
         2a:b1:ba:bb:ce:cc:8a:d8:03:78:d3:f1:91:95:60:d9:aa:32:
         0b:2e:4b:70:19:87:b9:21:bf:9d:02:10:35:e6:92:86:d1:55:
         ab:d5:32:b8:f2:88:d2:8e:ae:eb:52:e9:f4:ad:36:40:5e:0a:
         52:cb:63:f5:15:1d:74:d0:4e:a6:a4:44:d8:8d:36:23:d3:69:
         8b:1c:ca:39:d2:4e:14:cd:19:68:ec:a5:b3:10:a6:7d:59:37:
         29:ad:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----