This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
File:                     IGcM4wRP1TINnHYtX5viba8wI-w.mft (raw, json)
Hash identifier:          Wh1Gn9hEdGHuL+KOXpP4EFrh5m+mLvg/J4dwXsr4gy8=
Subject key identifier:   20:AC:44:91:FE:61:0A:D3:98:A0:A6:79:22:88:39:D0:D7:64:8B:41
Authority key identifier: 20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
Certificate issuer:       /CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Certificate serial:       0197790B02A50201C74B0765FBC25D99E095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
Manifest number:          012A
Signing time:             Mon 16 Jun 2025 14:00:53 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:53 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:53 +0000
Files and hashes:         1: BtHL3XHEieb1gWKcjsadU5qjZac.roa (hash: 1jFZs/t3ujMVEG8CZ4mhr6EfSszS7y3HVxTcxs6WBzE=)
                          2: IGcM4wRP1TINnHYtX5viba8wI-w.crl (hash: 9xwD5g6jIs5gUAXoga1KFwonJ3tnqO1TrUNF9nVLEbY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0b:02:a5:02:01:c7:4b:07:65:fb:c2:5d:99:e0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
        Validity
            Not Before: Jun 16 14:00:53 2025 GMT
            Not After : Jun 17 14:00:53 2025 GMT
        Subject: CN=20ac4491fe610ad398a0a679228839d0d7648b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:b2:b6:6e:6d:07:75:d8:df:4a:d6:77:ab:
                    f0:8f:d3:33:f1:7f:e6:37:f6:ad:8b:49:58:ca:7a:
                    1f:13:8a:a3:6c:e4:9b:39:ef:53:86:4c:72:1d:8b:
                    24:07:cf:d6:e9:31:72:35:05:59:41:77:8c:fe:81:
                    85:fc:c0:83:6d:38:11:7d:f4:33:72:02:d2:fa:7c:
                    c6:cf:ac:46:a4:cb:be:1c:63:8a:84:a9:6f:58:f4:
                    65:69:38:47:a4:0f:e1:ca:59:46:df:9a:0a:61:18:
                    39:84:83:8a:32:da:89:74:3a:3b:f5:61:5c:f5:72:
                    6f:2f:7e:34:2d:03:6e:eb:31:d6:5e:ac:25:23:30:
                    28:7c:9f:37:5c:83:ac:f3:83:b7:3e:e6:33:7a:11:
                    98:4c:6e:59:d6:d6:08:8b:0f:4a:5a:fd:e2:4e:d3:
                    24:d6:45:af:66:aa:00:82:b1:1b:2c:8a:9d:19:2a:
                    af:bd:63:16:df:a4:3b:48:a2:a2:16:31:54:bf:d7:
                    40:a2:4a:b8:59:4a:f1:7e:91:90:c6:90:0a:06:09:
                    c9:73:8d:b0:f7:ce:03:ea:ee:7d:af:5e:5d:9a:01:
                    dd:96:49:2d:62:b8:41:b5:c7:86:6b:c6:21:2e:a4:
                    8e:2d:83:71:e9:bc:d3:9e:2c:a8:01:a9:6f:8b:4b:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:44:91:FE:61:0A:D3:98:A0:A6:79:22:88:39:D0:D7:64:8B:41
            X509v3 Authority Key Identifier:
                keyid:20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:ab:e1:91:6e:09:d5:ad:3e:e1:1c:91:b3:6d:1a:1a:4d:
         db:5d:18:c7:82:8d:bb:75:59:c0:30:d1:ab:d2:4e:2c:2e:ca:
         94:fc:11:ca:bb:b2:dd:b7:cd:3a:87:b3:30:34:2a:f7:fd:63:
         86:dd:67:5e:64:f5:98:2b:73:05:bc:df:3a:83:8b:b9:84:33:
         bb:95:ce:45:7e:00:fe:1d:7f:d9:c9:3c:0b:d1:1a:4f:aa:78:
         c7:f6:11:32:d1:24:da:86:5c:a5:00:fd:d0:da:49:8f:48:27:
         44:ae:d5:1e:e0:2e:84:ab:f4:79:9b:d5:38:bf:ac:8e:2a:d1:
         7b:2b:9b:cc:68:5a:fe:fb:1c:66:e9:d0:64:8e:08:e6:08:cf:
         4e:6c:ac:79:40:d3:d2:d3:d7:6d:20:1e:76:ae:7a:e5:09:13:
         8a:7b:2b:e2:67:23:b4:17:11:87:fc:e4:6d:90:f7:b3:40:15:
         fd:f0:03:2a:9c:25:c7:ac:f0:bc:e5:0a:0c:0b:de:02:ef:0b:
         ad:25:fb:0e:7d:7e:88:d6:8f:a6:3c:5d:a8:1f:f3:ce:2b:95:
         a7:12:a7:18:9c:68:a6:11:a2:d9:f7:6d:52:78:7b:93:1f:71:
         04:94:6d:44:25:d3:33:a6:23:43:e9:54:8c:1a:e0:36:e6:4b:
         35:f4:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----