This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File:                     cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier:          lsTSgNRuVx5t9GgPYAV5pvgARSS540hyzm0AXH4ni/g=
Subject key identifier:   C3:50:6E:60:01:EB:65:8A:E5:56:F0:32:CE:FD:7F:41:CD:85:1A:30
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer:       /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial:       0198C4FF521BC6B56BAC0FD25685B2FF5943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number:          0497
Signing time:             Wed 20 Aug 2025 01:02:03 +0000
Manifest this update:     Wed 20 Aug 2025 01:02:03 +0000
Manifest next update:     Thu 21 Aug 2025 01:02:03 +0000
Files and hashes:         1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: r7CbFq//QIJQAlAbkZg9PCfcNsFC2pryrv+IizrLBHQ=)
                          2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c4:ff:52:1b:c6:b5:6b:ac:0f:d2:56:85:b2:ff:59:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
        Validity
            Not Before: Aug 20 01:02:03 2025 GMT
            Not After : Aug 21 01:02:03 2025 GMT
        Subject: CN=c3506e6001eb658ae556f032cefd7f41cd851a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:15:b2:db:13:cf:50:4c:fd:a1:d3:73:e5:
                    1e:0f:6c:35:8a:9d:05:c2:26:bc:7b:ff:85:8a:e0:
                    ea:b2:33:de:fb:ae:ae:80:4b:1b:d8:aa:b0:e1:36:
                    0a:92:2c:1a:f1:c4:66:c2:85:b2:eb:1f:e5:13:77:
                    53:0a:68:18:18:03:4a:c6:d8:5f:f3:c3:14:15:80:
                    ea:77:24:f0:31:47:8f:86:32:be:82:f6:91:96:66:
                    00:57:8e:ff:76:ae:b3:a0:ca:64:fe:d6:d7:36:ff:
                    49:d6:3c:69:85:bd:70:37:f8:56:37:99:fd:90:46:
                    9f:69:b8:48:94:ea:a3:7b:28:97:bd:35:8e:cc:c3:
                    d9:6d:be:0d:44:d3:5d:a6:3f:8c:f0:85:35:2a:7c:
                    f3:39:c9:13:45:0d:e8:42:08:5b:12:6e:f1:2c:65:
                    49:57:79:6e:ef:f8:e2:ad:c0:cc:f4:cb:85:89:41:
                    57:70:cd:1c:a1:3b:35:17:05:ec:19:53:33:7a:bd:
                    b9:6e:65:f6:01:62:55:e1:50:2f:c5:95:7f:e9:d1:
                    1a:4c:30:23:fe:ff:58:8d:e2:da:54:0b:22:89:28:
                    ff:30:96:05:d9:8a:d3:e5:cd:64:3e:ba:f3:13:ce:
                    c1:b7:8d:53:7d:19:9b:7a:38:a5:a6:e3:4c:f5:0d:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:6E:60:01:EB:65:8A:E5:56:F0:32:CE:FD:7F:41:CD:85:1A:30
            X509v3 Authority Key Identifier:
                keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:69:fd:d9:f2:cd:08:14:69:3c:b6:b2:51:9a:65:95:ad:
         f9:dd:bf:c7:15:19:04:c6:ea:c1:2d:5d:98:de:29:4c:71:e7:
         cc:27:ea:7d:0f:da:8c:08:89:06:b1:9f:41:a2:eb:16:d2:56:
         14:49:4a:29:31:dc:bc:2e:c3:68:91:b3:28:3d:be:f2:fe:f0:
         4e:66:ca:f5:68:54:fb:0f:80:e6:b1:94:03:27:15:7d:43:77:
         c7:42:eb:79:9b:84:c6:ab:4a:0b:fc:85:24:02:71:fa:e2:40:
         a6:44:9b:d7:f1:9b:15:22:db:0a:c4:e3:34:cf:dd:82:24:9a:
         21:29:c9:4e:b8:19:c8:b8:c0:ec:8a:f8:fb:2e:87:57:b3:a0:
         99:fa:34:cc:d2:06:07:c7:a8:ee:d7:00:31:10:c9:e3:33:03:
         39:73:4a:3b:9b:95:ba:39:87:54:2b:c5:c4:0f:a6:a2:29:ed:
         48:ed:79:b6:e9:13:93:9c:f1:7a:18:4d:b7:e2:5a:75:7a:83:
         bd:1b:4f:be:9e:ba:55:cd:5f:5b:77:42:2e:0c:4a:43:84:d2:
         e1:b7:c2:a9:8c:0f:f8:39:ca:67:b1:91:ba:32:66:e4:a9:56:
         8a:12:ad:d2:04:da:d2:b8:34:66:a3:ca:28:dd:26:20:a1:4d:
         6a:3d:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----