This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
File:                     D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft (raw, json)
Hash identifier:          2CIY0rxdPsTfnxsvCxeAs20swAbZf+vOK8gaAlpht6o=
Subject key identifier:   B3:51:92:89:1F:8B:28:65:23:6D:E9:0C:9A:B3:72:26:1D:91:58:39
Authority key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Certificate issuer:       /CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Certificate serial:       019535AF323A618A7A0C4B1186B77CCAEDF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
Manifest number:          146D
Signing time:             Mon 24 Feb 2025 02:00:28 +0000
Manifest this update:     Mon 24 Feb 2025 02:00:28 +0000
Manifest next update:     Tue 25 Feb 2025 02:00:28 +0000
Files and hashes:         1: D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl (hash: g4+cwp8Nd4lgD4GMCwvgH4z9sRZoPSNtWopNxOlHeho=)
                          2: PuHdQeDappRzDRm2Yyr-4eDAbVk.roa (hash: KGFP0rzHxbDYdX45bSQF+vCgYcGUoxOEmhLFhQ5K8ZI=)
                          3: VUuhainjhcYV5YRCiyXmkzZq9Bw.roa (hash: sqr3lmMmKZCw5Sb02g6kZwXmBiAXlMXLjjLm6QDb9BM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:35:af:32:3a:61:8a:7a:0c:4b:11:86:b7:7c:ca:ed:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
        Validity
            Not Before: Feb 24 02:00:28 2025 GMT
            Not After : Feb 25 02:00:28 2025 GMT
        Subject: CN=b35192891f8b2865236de90c9ab372261d915839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:2b:be:99:f6:b1:b0:ec:c8:e1:f8:b6:aa:
                    aa:0c:dd:dd:c9:4f:93:55:eb:13:79:1b:d3:e0:c3:
                    e9:06:cd:61:10:3f:f9:ed:72:fe:c9:1c:ff:50:53:
                    68:3c:90:02:0c:9e:f8:a2:0f:89:fe:ac:6d:46:59:
                    02:4c:f1:7b:55:c3:a5:b3:22:76:eb:04:ab:b1:5e:
                    1a:9b:ed:cc:eb:84:a2:f2:bc:03:4f:be:49:f3:df:
                    d2:b8:a5:3e:30:ad:ac:53:68:dd:b0:a6:9e:01:e6:
                    09:1d:1b:52:e2:d4:19:3e:72:47:68:1d:81:84:66:
                    28:68:a0:a4:68:df:4f:0f:67:a5:96:82:4a:a1:99:
                    0e:59:cf:cd:31:f7:3f:54:2c:6c:03:b0:8f:ec:67:
                    67:e8:cb:f6:45:f1:b8:5f:ae:4c:0a:c2:46:25:17:
                    d7:d3:26:f0:08:ce:d5:93:2d:cf:d8:c7:d0:25:36:
                    28:41:00:fd:98:5a:33:71:00:fc:d5:7f:06:2f:7e:
                    e8:6c:52:81:eb:98:e0:f8:77:f1:2e:00:ea:77:32:
                    83:ae:00:48:43:a7:12:db:5a:01:6a:29:b9:d8:40:
                    66:9d:ec:71:08:d0:ac:90:d5:42:ab:e6:61:00:23:
                    72:b7:08:a2:c8:76:50:80:22:cf:7e:83:67:fd:15:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:51:92:89:1F:8B:28:65:23:6D:E9:0C:9A:B3:72:26:1D:91:58:39
            X509v3 Authority Key Identifier:
                keyid:0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:5f:a7:e6:74:5a:b0:43:d1:cf:48:88:8c:5a:a5:62:e3:
         92:0c:f5:5a:07:d6:96:d6:03:a1:30:84:fb:85:31:de:d5:bd:
         53:81:34:a0:e3:52:f4:69:bf:e4:ee:ec:13:f6:90:ec:b9:d4:
         ca:46:49:4e:07:eb:2b:da:83:a0:6b:a3:38:d3:7e:73:c8:99:
         f4:94:f7:cb:82:0d:76:c5:87:c6:c8:da:3a:49:26:bd:46:4a:
         ba:1a:89:59:eb:5b:5f:b3:70:36:10:9e:81:03:a9:11:12:43:
         8d:73:fd:a9:70:94:09:c7:a6:1d:9c:42:63:4b:be:13:25:ad:
         49:df:45:88:c2:3a:3a:3b:e9:ce:27:36:b4:41:ca:a1:3c:89:
         1a:93:c5:19:28:61:a8:2f:24:91:e3:d8:ef:e4:f7:b9:43:0a:
         01:d9:35:37:fe:52:f9:1d:66:45:e6:7d:9f:db:62:f2:55:5e:
         39:2a:9d:90:eb:7b:8a:d0:64:35:75:14:8e:41:7d:2f:12:1a:
         07:9b:e2:d2:20:3a:5e:66:93:49:0e:b4:2b:62:c0:82:99:51:
         1c:df:84:fb:0b:3c:6a:67:a4:35:ed:51:10:28:0d:73:2a:5e:
         55:8e:58:bf:fc:10:9f:7a:8c:53:a6:48:1d:ce:0a:20:e8:ab:
         78:98:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----