This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
File:                     l2aFR6QzND3em7NllbyQO08UlgQ.mft (raw, json)
Hash identifier:          vEVzCdLDNNHv05ty+ARZwT32D9llwwn8lWJ911qbF6Q=
Subject key identifier:   42:64:7A:D5:80:19:E4:32:FA:C5:C8:A0:87:5C:7C:2E:86:CE:4C:D9
Authority key identifier: 97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
Certificate issuer:       /CN=97668547a433343dde9bb36595bc903b4f149604
Certificate serial:       0198C5DBADA4ADDD91EADABC497F1B484FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
Manifest number:          1646
Signing time:             Wed 20 Aug 2025 05:02:45 +0000
Manifest this update:     Wed 20 Aug 2025 05:02:45 +0000
Manifest next update:     Thu 21 Aug 2025 05:02:45 +0000
Files and hashes:         1: 4iS4euTiQtItVR9HBATrZ2d1jzs.roa (hash: Nz/wJMhE4IZvQI592qdr0LdN9YN/43igAFLk6lhCh5w=)
                          2: l2aFR6QzND3em7NllbyQO08UlgQ.crl (hash: 6NuvSLSqwWSi/RE41OZIymG5kdKQljE706H3zXdsCtM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c5:db:ad:a4:ad:dd:91:ea:da:bc:49:7f:1b:48:4f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97668547a433343dde9bb36595bc903b4f149604
        Validity
            Not Before: Aug 20 05:02:45 2025 GMT
            Not After : Aug 21 05:02:45 2025 GMT
        Subject: CN=42647ad58019e432fac5c8a0875c7c2e86ce4cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:01:16:b2:80:e4:80:59:69:f1:11:4a:18:
                    a2:98:fc:d9:fb:e7:5b:5e:12:77:e5:82:aa:f1:eb:
                    9f:56:6e:72:2e:81:d6:a7:03:34:82:d6:f4:6a:a2:
                    a3:80:bd:16:84:9f:50:9f:08:8e:0a:42:19:8f:cd:
                    e3:3e:df:a6:7d:be:11:bd:ed:47:44:02:9d:3e:52:
                    be:d9:75:fc:16:7f:87:e2:e6:87:11:fb:d7:d2:77:
                    b2:50:29:29:ba:7f:7a:8a:74:e0:d2:d5:03:fc:5a:
                    29:3e:6e:70:86:3f:2c:83:70:ee:27:ad:6f:d5:af:
                    3b:8b:d3:b4:20:d7:86:9b:bd:ba:38:ab:fc:99:b2:
                    56:14:b6:56:33:cf:85:08:56:f6:9f:d8:99:b4:dd:
                    00:51:0d:74:90:31:2a:f3:5f:00:bf:06:01:d4:fc:
                    ac:1f:a9:79:9d:75:6c:c9:93:12:34:c5:d2:f9:da:
                    45:59:31:4a:c0:fe:41:94:91:85:f0:9e:32:22:8e:
                    20:0f:c4:5f:7b:3c:83:8e:4d:60:8a:46:8c:0e:1c:
                    5d:0a:8b:c0:0f:38:cb:d5:bd:c8:4d:a8:1b:97:cb:
                    e6:03:b2:40:fb:52:5b:98:f5:c3:3d:fa:81:49:66:
                    5e:9d:c2:f9:76:9c:3d:ad:39:29:95:79:db:09:3f:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:64:7A:D5:80:19:E4:32:FA:C5:C8:A0:87:5C:7C:2E:86:CE:4C:D9
            X509v3 Authority Key Identifier:
                keyid:97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:ba:72:ba:cf:9d:da:25:46:88:d4:91:e3:c1:51:c5:5b:
         84:81:29:ad:78:a0:1e:f3:47:eb:7b:79:30:f7:74:1e:18:b3:
         96:35:19:64:30:87:ef:76:6c:5e:35:8e:03:56:00:65:0b:e0:
         aa:63:16:e7:2e:c3:a9:34:a0:a4:7a:13:7e:73:ec:23:9e:7d:
         a5:58:f5:f3:c0:0b:81:dd:83:a7:e7:f0:4a:71:74:4b:ec:db:
         83:5c:7a:e8:a9:6a:d8:73:81:08:3c:eb:c9:c2:90:1d:61:a0:
         b9:41:87:28:89:57:90:6f:65:37:ec:f2:e7:73:4e:2b:12:8c:
         03:b6:6c:c6:12:e2:70:c1:a3:55:f7:d3:16:9a:ab:05:15:11:
         ff:4c:f8:39:18:9b:4d:7a:4e:ca:63:6a:82:da:5d:74:b9:d3:
         b4:2e:c9:34:5e:75:8f:fc:36:df:74:e6:be:96:c1:85:f8:c2:
         55:f5:80:c5:6c:e7:00:67:cd:c7:8e:c3:6c:9f:35:9d:51:54:
         69:01:71:ca:5b:0f:84:41:89:c0:02:6a:b2:c4:b9:f6:ba:77:
         c6:37:3f:ae:cc:fc:ca:27:f6:7d:0e:b0:ac:a5:e9:aa:35:6e:
         6a:88:f5:b3:c6:b6:60:07:b0:bc:e8:81:f6:b9:b2:d7:17:15:
         46:5e:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----