This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File:                     aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier:          dkctjnN4lOKYEGYXBwX5A3UsovJuSKDtVV8ZQT1M5cc=
Subject key identifier:   73:EE:91:9F:C5:C2:14:46:D3:C2:CC:60:40:8E:36:1A:D3:CF:F8:7F
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer:       /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial:       01995C44E375D62E0EE2949137237D7FD335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number:          148B
Signing time:             Thu 18 Sep 2025 10:00:42 +0000
Manifest this update:     Thu 18 Sep 2025 10:00:42 +0000
Manifest next update:     Fri 19 Sep 2025 10:00:42 +0000
Files and hashes:         1: aYzSzZFLqdVEPKpQk5EWoehSNEw.roa (hash: AM/5zmNZPmTunUEdZ9JbOQ5FfrgajVTJL4TG99J5meg=)
                          2: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: R2GKtLPrV9oBoa9HfV9bZryGLieXImS4uzhPhxZiKBM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5c:44:e3:75:d6:2e:0e:e2:94:91:37:23:7d:7f:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
        Validity
            Not Before: Sep 18 10:00:42 2025 GMT
            Not After : Sep 19 10:00:42 2025 GMT
        Subject: CN=73ee919fc5c21446d3c2cc60408e361ad3cff87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:09:08:e2:cb:ac:e6:d0:9e:71:37:85:af:
                    99:73:fc:33:79:ad:bf:08:69:21:08:ba:16:1f:6a:
                    a4:dd:46:60:fe:48:b7:ea:77:f9:e1:da:af:74:77:
                    80:7b:a4:78:0f:30:04:8f:57:aa:77:68:f1:5f:0b:
                    81:02:28:8d:ad:2e:b6:8d:28:32:93:0a:36:14:91:
                    a4:dd:cf:78:08:df:4b:08:f4:35:03:c6:05:cc:d0:
                    20:1b:55:af:40:42:8f:d4:f8:d0:57:ff:a4:06:59:
                    fa:a6:6c:04:c3:aa:77:90:e5:d8:ad:0e:9b:4a:6d:
                    91:60:8a:f9:02:99:48:9e:57:32:7c:f9:5b:11:d0:
                    0b:be:a8:d7:0a:c4:93:34:c0:1d:ef:cf:77:07:03:
                    da:84:a4:6e:70:8f:c3:c8:09:5e:e7:de:6e:f1:da:
                    3c:92:c6:28:26:4a:2e:67:1c:44:fc:a3:00:7b:f1:
                    87:99:e4:54:cb:a2:33:22:7b:22:00:8f:59:c4:a7:
                    5a:1c:e1:e1:63:ed:5b:c8:4a:b4:72:44:48:dd:95:
                    5c:8a:f1:0f:c2:27:7b:dd:37:e2:a8:0a:06:4f:eb:
                    12:17:24:11:f5:27:17:f2:65:6d:d8:fd:b6:c0:88:
                    bd:a2:97:94:f7:eb:10:91:09:91:1d:7a:f6:2e:a5:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:91:9F:C5:C2:14:46:D3:C2:CC:60:40:8E:36:1A:D3:CF:F8:7F
            X509v3 Authority Key Identifier:
                keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:38:e3:6b:15:b0:b3:ad:24:a0:00:98:f8:27:56:d7:47:
         87:da:39:ab:00:50:d9:ce:9d:57:46:a9:da:fd:2f:b0:d6:95:
         3b:b6:de:df:2e:e0:2c:33:ed:b5:42:ab:ec:25:76:79:0e:a7:
         4d:fc:cb:a5:20:1a:0e:d2:d2:f2:11:f1:5b:20:da:c4:9a:0a:
         15:d5:ec:76:e3:27:8c:ba:4c:d7:0e:8f:9c:fc:75:3a:ed:61:
         6d:27:13:6f:7c:41:30:88:c5:de:3c:41:fd:56:7f:56:0d:3e:
         74:ba:84:c9:07:b8:a7:51:d4:c4:09:07:c9:9a:c1:d7:68:88:
         d4:c6:ca:1c:5f:82:30:ab:59:c5:e2:84:04:53:18:43:a1:4b:
         2c:f7:06:e9:ed:42:55:5f:64:8e:6e:da:6c:67:4d:5f:02:41:
         79:0d:1b:49:67:bd:4e:49:85:74:53:a6:f9:c4:36:a6:b2:2b:
         e4:a0:a6:13:45:d4:fc:95:49:78:64:8f:86:44:29:7b:53:1f:
         60:eb:af:a6:7d:f3:9e:9e:c0:ff:44:23:44:cb:1b:76:24:b8:
         2f:27:b8:b5:2f:ba:ec:2a:f3:ce:40:60:e0:46:b6:6f:e8:37:
         ea:3b:0e:11:b1:c6:58:38:35:f1:1f:01:72:c6:d7:67:86:c8:
         95:37:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----