This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File:                     Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier:          SVJA9/9AgaCRk0dPnnPF7FSW+WDM6mbIb+8Ew27y5Ig=
Subject key identifier:   67:21:F7:85:2B:08:BB:CF:48:AA:F9:8B:86:7B:1F:A0:96:48:F8:02
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer:       /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial:       019A52D1CA0BAA220F18F782182710A2ECA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number:          1710
Signing time:             Wed 05 Nov 2025 07:01:11 +0000
Manifest this update:     Wed 05 Nov 2025 07:01:11 +0000
Manifest next update:     Thu 06 Nov 2025 07:01:11 +0000
Files and hashes:         1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
                          2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: 8mBuNX11pQib6QERO6IZ/jI0p0My8Ndn43/URF40Al0=)
                          3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:ca:0b:aa:22:0f:18:f7:82:18:27:10:a2:ec:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
        Validity
            Not Before: Nov  5 07:01:11 2025 GMT
            Not After : Nov  6 07:01:11 2025 GMT
        Subject: CN=6721f7852b08bbcf48aaf98b867b1fa09648f802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:10:cd:68:bf:33:c8:9e:9f:a4:ac:6c:e3:
                    c6:3d:60:28:72:7f:a0:b3:ea:9a:41:62:1b:a2:b3:
                    64:22:db:ee:f5:25:ed:9f:48:a6:37:c1:52:fb:39:
                    74:a2:cf:74:0a:a5:89:68:02:ba:17:d8:e9:9c:a7:
                    54:fb:8b:ee:5e:fb:ed:15:1e:e4:99:7b:59:4d:e9:
                    06:7e:f1:f9:36:a4:46:76:02:7e:b6:fa:aa:8d:c7:
                    6e:78:b8:af:3e:1d:a9:b1:00:7b:36:7e:09:d3:80:
                    0f:ab:0d:f0:55:f8:67:7c:f1:6a:28:6b:23:6e:65:
                    12:db:90:cf:53:70:98:4f:61:f5:0c:9d:16:09:79:
                    e3:58:23:b2:18:ae:ad:fd:72:bc:22:10:2a:b5:d8:
                    e6:ed:57:96:9b:a7:a1:9a:70:23:c0:b3:8a:30:84:
                    a3:d8:de:45:4d:1f:79:5e:1e:93:24:99:fb:7b:24:
                    7b:3f:58:b0:4e:d6:c8:53:df:45:4b:30:fa:01:a7:
                    b5:eb:ff:cf:a0:b6:0a:e7:2c:fe:ce:b7:ef:f0:a8:
                    16:9a:46:e9:58:c7:4a:30:ca:ab:a4:d6:18:e7:4b:
                    3f:59:74:8b:eb:da:7b:59:23:b5:d3:db:8b:68:f9:
                    cb:75:65:38:06:c3:07:b0:9b:f9:39:e8:ec:8f:83:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:F7:85:2B:08:BB:CF:48:AA:F9:8B:86:7B:1F:A0:96:48:F8:02
            X509v3 Authority Key Identifier:
                keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:be:c4:fa:ad:1c:25:2d:56:c7:13:31:bd:d1:84:f9:a4:61:
         be:da:66:11:5a:81:52:21:b2:5e:e1:f9:dc:64:71:4f:06:e4:
         97:35:62:1d:0b:c2:33:92:3e:1a:d4:b1:52:04:ac:44:c8:05:
         69:51:c4:5c:3b:03:d2:de:c4:d5:11:b9:15:c7:15:a4:25:ed:
         3e:c9:75:64:02:fe:18:c8:9c:81:9d:ab:10:c2:37:06:b4:11:
         e6:1b:57:de:40:ec:1c:93:22:20:69:3a:33:6e:0a:67:b7:fc:
         65:bc:34:3c:1c:61:c1:c7:07:06:a4:bf:73:63:e5:37:6f:72:
         d6:37:44:c7:2d:d1:e7:1b:6c:4a:df:65:b9:1a:8c:07:a1:fb:
         19:84:e3:57:e3:63:e7:20:0a:26:da:41:87:12:c4:c1:7e:08:
         fa:a5:3b:ac:20:92:70:1a:82:fa:43:5a:de:dc:c4:a7:b9:44:
         69:25:6f:dc:53:0f:d0:ae:4f:83:44:06:e5:c1:b4:9f:71:ea:
         55:3f:05:39:5b:a0:07:0e:65:a2:e8:2c:ca:10:d5:99:b3:1f:
         00:7b:fc:56:e4:2d:0d:41:30:c0:10:24:5a:1e:c6:91:5c:6e:
         4e:e0:1f:b4:26:a0:c1:e4:9c:f9:cd:de:e6:4e:47:c3:e3:51:
         cc:d6:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----