This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File:                     L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier:          Pqn3g2iTgj1cyITYb9AO6SC53ZXUitJVaygAUwZGK/s=
Subject key identifier:   58:ED:83:00:53:C5:06:0D:CD:4A:D4:61:7D:13:50:02:90:B1:41:B0
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer:       /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial:       019A75960C55D9BB361F845F23CFEDA7C691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number:          1720
Signing time:             Wed 12 Nov 2025 01:02:38 +0000
Manifest this update:     Wed 12 Nov 2025 01:02:38 +0000
Manifest next update:     Thu 13 Nov 2025 01:02:38 +0000
Files and hashes:         1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: drAkLuWTJki4bDRfcl+AIUjoWlXLgskkkyGU7zVL+Kg=)
                          2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:75:96:0c:55:d9:bb:36:1f:84:5f:23:cf:ed:a7:c6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
        Validity
            Not Before: Nov 12 01:02:38 2025 GMT
            Not After : Nov 13 01:02:38 2025 GMT
        Subject: CN=58ed830053c5060dcd4ad4617d13500290b141b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:85:65:47:4d:19:ee:b1:ce:48:3e:3d:31:
                    67:88:3c:36:28:b1:77:5e:d4:af:ef:ac:ad:2c:00:
                    1d:68:08:ee:0f:c9:3d:46:83:b1:2c:c5:09:c3:7a:
                    86:52:ac:bb:6f:f0:17:3c:6d:60:2b:e7:df:29:37:
                    c0:ca:29:2d:91:61:88:49:8a:69:7d:1e:68:7d:23:
                    cf:5a:09:db:9f:81:46:c1:74:73:b7:e5:04:3a:03:
                    7f:5a:df:f0:db:20:cb:d6:af:8f:a6:6a:cb:0c:f6:
                    ff:77:77:20:66:77:32:ea:ea:f9:47:62:23:a2:ee:
                    c2:90:cd:07:ef:e5:d1:d4:2a:14:da:66:4a:57:ed:
                    f3:4e:ef:de:74:08:88:12:6a:5a:33:b3:18:f4:fa:
                    fb:33:c0:9d:15:bb:58:c0:46:05:8d:4e:4b:98:3a:
                    0e:71:a2:e6:2d:57:03:9e:31:e8:1f:d7:80:7c:04:
                    1c:43:bc:49:ad:99:f8:e2:3f:33:02:f8:6c:ce:29:
                    f7:fe:9b:a2:d5:d0:98:a2:ff:25:70:28:a4:0a:3b:
                    4e:4c:04:ea:9c:01:af:da:46:d6:84:28:5f:e5:03:
                    bf:9d:1f:b6:9f:0c:ef:0a:25:29:d1:c9:46:2e:b6:
                    91:a3:a6:a0:ee:85:c8:39:e7:7b:c2:b9:45:8b:71:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:83:00:53:C5:06:0D:CD:4A:D4:61:7D:13:50:02:90:B1:41:B0
            X509v3 Authority Key Identifier:
                keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d9:c6:51:65:e9:94:7f:e6:a1:e4:c4:45:db:d3:7b:62:65:
         8e:87:02:14:09:0d:a5:27:9d:28:7f:25:a7:e6:9c:d3:33:1c:
         91:3b:58:c8:2e:b7:3d:60:ad:a3:20:82:ac:97:fc:90:11:f1:
         44:43:76:ec:32:26:63:e5:8a:5f:18:c1:55:7e:6a:dd:8e:58:
         0a:b1:b9:45:1d:9a:53:6e:cb:17:1e:d5:de:8b:a4:d5:70:70:
         42:f3:a7:76:37:c8:44:f5:9a:f7:83:4e:79:23:4b:79:c0:c9:
         e7:ca:4c:0f:8f:e2:a9:b2:5f:a7:a8:ba:b7:dd:b0:a0:19:7e:
         bb:37:99:f2:50:56:f7:e2:86:ab:98:3f:df:6a:01:4c:b6:6e:
         f5:3e:3f:b3:d1:16:6d:c8:27:91:b1:f0:52:5e:cb:d1:6e:e5:
         72:c2:2a:96:47:c1:d6:4d:62:35:6c:9b:4e:9f:f0:a8:44:b2:
         04:79:9e:72:74:89:e5:64:e0:54:38:05:a1:b3:2a:6e:1d:a4:
         f6:7f:db:ca:5c:9e:b0:82:c4:58:61:88:9e:37:1d:82:a4:3b:
         43:eb:e0:43:aa:19:64:1c:7d:7d:05:1f:7b:8f:e3:ac:58:e2:
         48:53:ba:1a:dc:ab:3c:4e:0d:19:d1:96:2e:30:b0:45:06:99:
         a0:fa:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----