This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File:                     h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier:          QKOapR1NThcDUVYoGIa8KrADPNbhidYNpGJFpFY1B+M=
Subject key identifier:   F3:F4:F5:23:75:B9:45:C7:48:EE:7C:E6:23:AB:B5:52:6B:D7:34:80
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer:       /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial:       019714D6A78D1235479C66365732A441CB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number:          04CD
Signing time:             Wed 28 May 2025 03:01:41 +0000
Manifest this update:     Wed 28 May 2025 03:01:41 +0000
Manifest next update:     Thu 29 May 2025 03:01:41 +0000
Files and hashes:         1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: UAvZxgIHKpn2BwsL8iTNERqaZZeR9EhH767QOFRBVEY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:14:d6:a7:8d:12:35:47:9c:66:36:57:32:a4:41:cb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
        Validity
            Not Before: May 28 03:01:41 2025 GMT
            Not After : May 29 03:01:41 2025 GMT
        Subject: CN=f3f4f52375b945c748ee7ce623abb5526bd73480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:3a:9e:8f:e2:48:87:0d:9b:3f:69:2a:3f:
                    01:6e:96:98:d1:51:fc:b1:af:8a:19:02:5c:40:36:
                    a6:1a:7e:cf:a2:6e:43:cf:92:13:41:2b:f0:00:c8:
                    bd:14:a6:2f:23:14:6c:5e:6a:7c:c3:80:a6:b0:4c:
                    96:2e:5e:0c:03:2b:8e:71:23:8d:9a:64:be:2a:60:
                    24:99:d1:23:1a:3c:e5:4b:dc:03:68:2c:b5:00:87:
                    78:b0:45:13:c8:11:5f:dd:35:d4:e4:f9:86:91:92:
                    dc:1e:a0:71:24:35:46:3f:0e:9f:70:c5:d0:01:73:
                    6d:bd:91:2d:7a:03:3b:f1:08:50:84:d2:55:ee:b5:
                    83:d1:a2:03:5c:89:2a:97:03:a6:b2:92:93:0c:2c:
                    1b:bc:ed:aa:f9:90:04:6c:29:ec:fa:48:83:a8:b1:
                    bc:81:3c:ac:dd:bf:7c:b0:37:ba:b2:70:79:b8:79:
                    a5:2f:af:c0:97:c5:a3:dc:05:86:37:88:b2:ea:46:
                    3b:5f:8a:80:36:f3:65:66:f6:1a:c4:a4:ac:f0:ca:
                    7c:57:6b:ee:0e:cd:ad:07:5d:1b:e3:75:20:64:7e:
                    e1:74:98:ad:dc:3d:91:5b:7e:2a:a2:46:39:7c:ae:
                    ce:70:04:80:6a:fd:09:6c:0e:d9:b1:57:11:e3:a5:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F4:F5:23:75:B9:45:C7:48:EE:7C:E6:23:AB:B5:52:6B:D7:34:80
            X509v3 Authority Key Identifier:
                keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:c4:34:24:01:07:27:8c:45:f8:11:77:ea:2d:bc:be:53:
         00:bf:9b:0f:0a:b9:b0:30:23:4d:f3:9b:1c:97:4d:c0:64:12:
         43:3b:4f:7e:2c:38:42:f6:18:8c:d5:0c:7f:d3:14:c3:be:fe:
         cc:58:1b:1d:fa:d7:d8:3b:0a:e1:22:34:0e:5e:f3:75:a2:64:
         56:e4:e1:59:24:6d:7e:cb:61:f9:4a:6b:0a:f5:e5:e6:5d:0c:
         6c:6a:36:47:0d:6f:e0:a6:80:e1:00:ae:cf:74:40:ae:49:c0:
         2e:a5:5b:07:25:64:6d:b4:4b:02:f1:c5:52:eb:90:08:f4:47:
         6f:43:b9:d2:ba:9d:f8:7a:13:93:dd:28:12:0c:4e:7c:43:17:
         fa:73:de:8d:08:f1:ca:ab:b7:55:c6:69:78:1c:ea:87:cb:e6:
         28:f8:13:89:de:14:a0:44:e4:0a:f0:5b:26:db:e4:ae:bf:31:
         dd:c7:ff:0b:7f:c6:35:6d:e3:28:de:87:9e:5b:07:2b:96:cb:
         1c:33:d3:01:c6:05:80:41:b1:f2:ed:d6:97:86:c1:4e:e9:ff:
         c0:ad:cc:78:34:14:87:0d:72:1c:c7:aa:19:45:7f:23:6d:69:
         e5:e2:06:2a:83:f4:64:1a:28:1c:3f:0d:c2:a3:a5:bc:e7:49:
         1b:e6:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:46:09 2025 by rpki-client