This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.mft
File:                     OciAWFNoXJlfPnXnf3-7NzQd4V8.mft (raw, json)
Hash identifier:          qL12jjsohcVHWhwEN3jscc6Ci3GlBzFcJi09OhC/eMU=
Subject key identifier:   46:98:06:2C:F6:68:57:51:79:94:D9:9A:6A:E8:62:C8:CE:1E:84:6A
Authority key identifier: 39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F
Certificate issuer:       /CN=39c8805853685c995f3e75e77f7fbb37341de15f
Certificate serial:       018BD75D1E80AA49F0A115B97FF37CA08CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.mft
Manifest number:          0853
Signing time:             Thu 16 Nov 2023 09:01:25 +0000
Manifest this update:     Thu 16 Nov 2023 09:01:25 +0000
Manifest next update:     Fri 17 Nov 2023 09:01:25 +0000
Files and hashes:         1: OciAWFNoXJlfPnXnf3-7NzQd4V8.crl (hash: WCwGpSWRL0WrlhT6FIEhnhGeEtGqQs+WXkGYV+wZeK8=)
                          2: o_PDqx7QIEcR1rC9hPkeQTmcwrY.roa (hash: GNxjwGQ5Nvm/UFG6pZgPnzbnbekUAO/mUcFmfE7f5bY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d7:5d:1e:80:aa:49:f0:a1:15:b9:7f:f3:7c:a0:8c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c8805853685c995f3e75e77f7fbb37341de15f
        Validity
            Not Before: Nov 16 09:01:25 2023 GMT
            Not After : Nov 17 09:01:25 2023 GMT
        Subject: CN=4698062cf66857517994d99a6ae862c8ce1e846a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:c1:46:b4:08:c8:d6:13:22:53:5a:00:88:
                    e8:2a:6a:d4:73:46:82:60:4c:c8:69:50:d2:89:83:
                    40:50:52:85:3b:01:b2:39:69:00:02:da:49:e6:61:
                    93:65:51:1b:28:90:b4:07:6e:b1:08:41:ed:ec:9c:
                    9c:c3:48:c9:36:05:db:28:29:de:ee:61:77:ee:00:
                    78:e1:91:9f:80:87:e3:92:ba:89:e7:09:93:d2:43:
                    65:b6:39:dc:e0:c9:69:4b:be:83:9d:ab:3f:e1:11:
                    39:35:c6:f6:44:ed:38:87:26:88:14:63:d3:32:23:
                    cd:03:51:e5:c0:db:99:77:5b:b7:64:c6:d4:64:8f:
                    6c:fb:f4:ee:7e:8c:88:6b:06:4a:c9:e0:c4:43:ce:
                    17:05:0f:ba:16:66:d2:28:a2:dc:73:1d:40:b1:2f:
                    78:8f:39:3a:d3:4c:18:99:b4:6e:af:dc:c7:9b:4a:
                    a6:7b:96:9a:94:2f:27:11:53:0b:c6:30:de:6e:0d:
                    f4:95:4f:45:31:11:30:15:60:1a:6f:b1:c9:fd:83:
                    1d:59:b2:ef:45:17:96:64:84:3c:73:c9:0e:37:4e:
                    52:80:f0:8a:3c:c3:81:e8:2f:8f:9f:1e:5b:79:6e:
                    8b:0a:fe:1b:68:06:44:54:38:57:df:c7:20:5d:14:
                    b4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:98:06:2C:F6:68:57:51:79:94:D9:9A:6A:E8:62:C8:CE:1E:84:6A
            X509v3 Authority Key Identifier:
                keyid:39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:30:6d:d2:21:44:0a:b7:65:92:f0:00:ce:8c:b1:8d:d3:1a:
         6e:1d:48:a6:94:7a:8b:2d:50:18:a9:8a:94:88:e6:0e:6d:39:
         68:53:36:42:a3:e2:91:3e:99:f9:e2:73:e3:60:b2:1f:d8:af:
         af:34:5f:27:ef:ec:d9:17:7b:f6:d3:22:2f:32:63:1d:b3:dd:
         18:ff:8c:23:e4:37:e0:a3:ca:a0:b8:d9:77:97:6f:21:7c:ef:
         2c:d5:39:9f:5a:41:7b:c6:9c:13:f7:60:19:3e:44:cc:86:f9:
         db:d7:37:87:a2:80:79:1b:d7:21:94:9f:0a:5c:ac:28:f5:ee:
         ab:89:7a:13:fd:c7:69:05:27:a6:e1:07:73:5f:7c:a8:99:81:
         67:17:5e:e6:41:ab:c9:97:d6:0c:d5:ab:28:59:78:3c:e2:5a:
         77:01:77:bd:2e:60:af:5d:cd:be:19:ad:b9:a7:1e:91:a6:12:
         d3:74:c8:da:da:c3:85:1e:06:70:a8:11:b0:08:bf:ed:27:bc:
         39:2a:11:2f:16:d1:64:d9:4a:e3:68:ca:16:ee:5a:74:c8:55:
         f4:2f:fd:c9:e7:dd:f0:4b:58:16:34:b6:d7:fc:1b:1f:f2:80:
         1f:bf:78:c6:ba:43:2c:64:37:fd:59:2c:17:73:48:3e:55:ae:
         c0:39:6f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvXXR6AqknwoRW5f/N8oIyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Yzg4MDU4NTM2ODVjOTk1ZjNlNzVlNzdmN2ZiYjM3MzQx
ZGUxNWYwHhcNMjMxMTE2MDkwMTI1WhcNMjMxMTE3MDkwMTI1WjAzMTEwLwYDVQQD
Eyg0Njk4MDYyY2Y2Njg1NzUxNzk5NGQ5OWE2YWU4NjJjOGNlMWU4NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiITBRrQIyNYTIlNaAIjoKmrUc0aC
YEzIaVDSiYNAUFKFOwGyOWkAAtpJ5mGTZVEbKJC0B26xCEHt7Jycw0jJNgXbKCne
7mF37gB44ZGfgIfjkrqJ5wmT0kNltjnc4MlpS76Dnas/4RE5Ncb2RO04hyaIFGPT
MiPNA1HlwNuZd1u3ZMbUZI9s+/TufoyIawZKyeDEQ84XBQ+6FmbSKKLccx1AsS94
jzk600wYmbRur9zHm0qme5aalC8nEVMLxjDebg30lU9FMREwFWAab7HJ/YMdWbLv
RReWZIQ8c8kON05SgPCKPMOB6C+Pnx5beW6LCv4baAZEVDhX38cgXRS0hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaYBiz2aFdReZTZmmroYsjOHoRqMB8GA1UdIwQY
MBaAFDnIgFhTaFyZXz51539/uzc0HeFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NpQVdGTm9YSmxmUG5YbmYzLTdOelFkNFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NTNiODctZmFhMS00OWE1LWFjMWYt
YmE1ZDViY2M5YWUxLzEvT2NpQVdGTm9YSmxmUG5YbmYzLTdOelFkNFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NTNiODctZmFhMS00OWE1LWFjMWYtYmE1ZDViY2M5YWUx
LzEvT2NpQVdGTm9YSmxmUG5YbmYzLTdOelFkNFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDBt0iFE
CrdlkvAAzoyxjdMabh1IppR6iy1QGKmKlIjmDm05aFM2QqPikT6Z+eJz42CyH9iv
rzRfJ+/s2Rd79tMiLzJjHbPdGP+MI+Q34KPKoLjZd5dvIXzvLNU5n1pBe8acE/dg
GT5EzIb529c3h6KAeRvXIZSfClysKPXuq4l6E/3HaQUnpuEHc198qJmBZxde5kGr
yZfWDNWrKFl4POJadwF3vS5gr13NvhmtuacekaYS03TI2trDhR4GcKgRsAi/7Se8
OSoRLxbRZNlK42jKFu5adMhV9C/9yefd8EtYFjS21/wbH/KAH794xrpDLGQ3/Vks
F3NIPlWuwDlvaA==
-----END CERTIFICATE-----