This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File:                     Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier:          Z0nm+wzoBrISCfqnSNXMi25+TFJfzRIMkHdoCaPtupI=
Subject key identifier:   50:D3:27:9C:EA:18:F7:C2:5E:9D:BC:93:83:38:F9:17:ED:C0:18:4C
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer:       /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial:       0199842E66FEA60E442F1D947BBBCC032F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number:          12CB
Signing time:             Fri 26 Sep 2025 04:00:57 +0000
Manifest this update:     Fri 26 Sep 2025 04:00:57 +0000
Manifest next update:     Sat 27 Sep 2025 04:00:57 +0000
Files and hashes:         1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: 8l+J3RvR4uIHRmViIrhwO5ZorLyz3up8moCcHSO+qeE=)
                          2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:84:2e:66:fe:a6:0e:44:2f:1d:94:7b:bb:cc:03:2f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
        Validity
            Not Before: Sep 26 04:00:57 2025 GMT
            Not After : Sep 27 04:00:57 2025 GMT
        Subject: CN=50d3279cea18f7c25e9dbc938338f917edc0184c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:1f:43:3d:3c:36:5b:c0:93:cc:b5:0c:3c:
                    79:a6:84:6d:c9:90:03:49:59:d5:15:89:37:79:26:
                    b3:f1:2e:a3:1d:ff:43:78:8a:63:f5:89:a7:b6:21:
                    92:ba:f1:18:e0:03:64:14:66:73:13:29:13:19:c5:
                    25:02:55:ab:f2:a3:57:f1:0d:de:97:4d:2b:ed:da:
                    33:99:81:ac:e2:3c:f9:bd:64:a0:b9:53:74:80:0b:
                    83:f7:0e:f6:b3:12:ea:48:8d:bc:08:db:5c:01:2b:
                    d6:0f:de:f9:69:8e:d4:b6:87:05:22:96:3b:ce:c1:
                    9d:f7:95:b8:92:f9:32:ed:6a:4c:86:51:2f:7a:18:
                    a3:34:c0:88:56:ee:ab:73:d4:f2:89:71:26:d4:a6:
                    bd:3b:8f:55:1b:b5:99:7b:8d:77:7d:1a:b0:77:48:
                    73:35:e1:85:88:22:d0:de:a5:40:a4:ec:7c:f1:01:
                    63:62:3a:da:29:dd:2b:00:08:0e:a4:9c:39:73:86:
                    f2:7f:cf:2f:8e:30:0f:5e:73:67:20:99:2c:74:14:
                    cf:95:e9:c0:12:b6:fc:02:da:54:bd:63:ea:90:12:
                    a8:7b:ec:58:27:be:17:0a:2b:ac:0b:67:25:86:dc:
                    c4:d1:cb:2f:a8:d2:e4:ff:f8:72:92:fa:fa:78:94:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:27:9C:EA:18:F7:C2:5E:9D:BC:93:83:38:F9:17:ED:C0:18:4C
            X509v3 Authority Key Identifier:
                keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c4:ad:54:8d:5b:05:3e:cf:1a:89:3c:c0:52:f4:b3:c1:26:
         35:aa:a8:b9:82:35:90:d6:39:b9:aa:9c:4e:bc:96:5d:b6:2d:
         0f:e5:cc:c3:15:77:ff:ee:e2:04:90:49:02:46:9e:49:2c:ba:
         0a:74:c1:a4:55:32:de:79:ae:57:24:30:eb:50:67:83:0d:7e:
         7e:c9:bc:03:25:52:d7:60:ea:ab:9f:5e:f3:4d:14:27:6f:10:
         a8:a6:7e:54:7f:d1:60:24:9a:0a:42:a0:9b:61:2b:6d:7c:c0:
         b7:91:3d:50:8b:4c:5b:6a:58:32:71:f9:9a:ea:dc:4b:77:2e:
         bb:38:42:a4:55:46:cc:54:6a:11:47:9e:ef:48:d6:84:e9:8e:
         73:9e:72:51:01:1a:96:cc:0e:6a:db:d8:a2:eb:b4:b5:8f:88:
         d6:c7:84:d9:01:90:be:db:1e:80:3a:09:17:85:54:ac:9b:ba:
         76:50:6e:80:34:76:84:b5:50:89:42:ed:79:31:74:30:c5:93:
         36:60:50:ff:86:87:e4:f2:e3:aa:9a:55:e3:fb:cd:46:37:fe:
         37:48:64:16:c5:c1:09:15:9d:d8:19:66:cd:e3:c3:da:3f:fa:
         6a:a8:a8:53:7b:1a:2f:e8:35:e3:af:88:a6:83:b5:a9:48:db:
         73:dd:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----