This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
File:                     0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft (raw, json)
Hash identifier:          zuohq5Cdn5I18WQ1S1MjTREgeAsO6wfu9AjWSl9zqTs=
Subject key identifier:   03:E2:28:76:06:60:25:5E:7E:59:56:70:E7:8C:CE:C6:AA:3A:25:4B
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Certificate issuer:       /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial:       019883F9D98D08817D6ECD3A416C516861CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
Manifest number:          159F
Signing time:             Thu 07 Aug 2025 10:00:46 +0000
Manifest this update:     Thu 07 Aug 2025 10:00:46 +0000
Manifest next update:     Fri 08 Aug 2025 10:00:46 +0000
Files and hashes:         1: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl (hash: wob6r9dzRiTIVsxWcqx/tdbZhygUX/sdl3AwUksfEmE=)
                          2: 8YEIarEZx-dYy-m-KWzFFJwMPgc.roa (hash: /Oh4KoguX/e5aBAHRSFC+nV1NgF/Rk6lBFfGk9GKTMI=)
                          3: aSUDb8sQcFUdmzbKm4gdVmu_3-w.roa (hash: 8GJtsZCv+fojGQVCn6tX0KvBg6L31AUzVNGq91VjeYY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:f9:d9:8d:08:81:7d:6e:cd:3a:41:6c:51:68:61:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
        Validity
            Not Before: Aug  7 10:00:46 2025 GMT
            Not After : Aug  8 10:00:46 2025 GMT
        Subject: CN=03e228760660255e7e595670e78ccec6aa3a254b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:f4:1f:31:e8:35:ec:7e:a1:0d:65:18:87:
                    d2:57:8e:6e:e3:30:5f:a0:b3:39:6e:43:64:bb:be:
                    39:ec:8a:5a:c4:80:d8:93:e1:c0:6f:28:55:0c:52:
                    52:f0:e7:5d:90:85:bf:f3:58:21:6c:de:cb:90:9c:
                    df:99:26:70:a7:11:7a:23:de:48:1e:8f:eb:0e:5d:
                    36:73:c3:eb:e6:f2:14:01:1d:25:23:49:b3:9f:11:
                    b1:f7:f3:81:2c:d7:d7:99:e6:c1:e0:cd:c7:74:2d:
                    ac:8b:e6:8e:cc:14:37:d4:31:0a:51:20:37:f7:41:
                    2f:5e:e6:12:c1:26:2c:e5:98:d3:98:74:88:4b:79:
                    5b:ff:74:35:36:a7:19:34:ed:ec:62:f3:a9:a2:f0:
                    6d:88:0f:98:04:7f:f1:16:8a:e1:51:da:2e:19:16:
                    45:55:7c:eb:a7:3e:92:6f:ab:46:03:ec:74:f5:ec:
                    d7:19:05:5b:92:50:83:67:40:ce:18:5a:ff:ec:30:
                    76:26:fc:80:17:4c:3b:be:17:67:94:5e:07:6d:cb:
                    ac:13:f3:56:92:85:83:cd:dd:e9:e1:d8:60:7f:26:
                    94:45:97:a5:1a:2a:0e:6b:b9:0c:d9:b3:16:96:b6:
                    ec:82:91:36:8c:92:0c:53:d2:ad:6a:c4:ce:b3:5f:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E2:28:76:06:60:25:5E:7E:59:56:70:E7:8C:CE:C6:AA:3A:25:4B
            X509v3 Authority Key Identifier:
                keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:0e:32:44:04:57:ac:d9:1a:1f:17:c7:c8:8e:64:6e:40:
         11:d5:fd:34:f8:ad:8b:b1:ce:cf:6c:90:c2:53:d5:47:75:a0:
         bd:b0:08:5e:48:73:cb:c2:4c:8d:aa:c7:a8:a2:07:4f:e8:ba:
         98:4e:82:1b:a8:42:30:fc:09:68:12:bc:71:c8:c9:cf:83:3e:
         ad:81:c3:91:7c:9e:75:60:ee:25:60:58:3e:44:b6:af:e2:01:
         5d:6f:f8:f8:1a:2a:df:6a:4d:0e:45:6e:85:18:fa:83:cd:4f:
         4b:b0:20:ec:4e:6b:e0:ac:2f:e0:8f:2e:1c:19:93:da:2c:e9:
         39:68:fd:80:78:f5:a1:09:62:ab:fe:ab:85:db:71:cb:e4:54:
         1d:5a:82:66:07:3c:e1:46:24:1a:7a:02:1c:e0:c8:a6:f1:51:
         5b:6d:21:d7:1d:df:29:99:0c:a1:cf:23:25:61:f3:0b:94:b8:
         61:08:e2:a4:c3:fd:8e:d0:4c:0c:b5:63:92:9e:31:7b:50:ce:
         8b:6e:1d:70:ac:30:bc:0d:18:f1:6f:55:2a:2f:02:45:d4:06:
         5d:a3:bd:64:a5:d7:d9:91:e5:f0:18:77:18:9d:f9:d1:b7:a9:
         bd:ca:13:94:d3:1e:bc:74:5a:bf:31:88:21:1a:44:b7:eb:24:
         2c:ad:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----