This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
File:                     DoNbiW2nHS2q3_E51ltymPhBJBc.mft (raw, json)
Hash identifier:          JUvbtnfU27BBWOknjqeCdmdOuILdVReVkYL8QpEo+uI=
Subject key identifier:   B3:AD:14:1D:C5:17:00:37:0C:84:D7:86:2E:EE:AA:FF:C6:9D:68:C3
Authority key identifier: 0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
Certificate issuer:       /CN=0e835b896da71d2daadff139d65b7298f8412417
Certificate serial:       0195E0463B716E538D85ED36F860EDC99E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 05:00:53 +0000
Manifest this update:     Sat 29 Mar 2025 05:00:53 +0000
Manifest next update:     Sun 30 Mar 2025 05:00:53 +0000
Files and hashes:         1: DoNbiW2nHS2q3_E51ltymPhBJBc.crl (hash: 0YgPp31sY4FmBhJ5zYy+N17imYV4JRLfgi7FJqmQWog=)
                          2: jBckqPQFaXVG0d-H_hcaAGH7CKM.roa (hash: +uEvgPae+lRjbvXvv3CmkwknC6+ftUjZQH4oSS8SHfc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:3b:71:6e:53:8d:85:ed:36:f8:60:ed:c9:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e835b896da71d2daadff139d65b7298f8412417
        Validity
            Not Before: Mar 29 05:00:53 2025 GMT
            Not After : Mar 30 05:00:53 2025 GMT
        Subject: CN=b3ad141dc51700370c84d7862eeeaaffc69d68c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:4c:51:9a:a7:cb:57:41:22:01:0a:e7:e7:
                    25:72:8e:e7:7c:fb:15:03:d4:15:5e:6d:f6:35:35:
                    2d:d6:df:4d:84:ee:a1:dc:06:30:02:c3:bd:83:a7:
                    dd:e7:d5:44:c5:7e:0c:08:ab:8f:37:74:fd:3e:07:
                    1a:bd:3b:39:59:d4:46:6b:f1:d3:4c:73:23:8c:c8:
                    1b:93:2b:47:e8:2f:66:27:bd:5a:95:32:b3:b9:ad:
                    74:e2:ef:d8:d3:12:bb:8d:04:76:a4:57:1b:8e:83:
                    de:8e:b9:75:90:fe:69:0a:7d:a3:9a:b1:9c:5f:56:
                    59:db:4f:00:f6:ec:df:8e:b1:d3:83:00:e9:27:0e:
                    43:40:c6:c6:6e:0b:b1:65:1e:79:c3:f2:28:9f:07:
                    d0:30:ac:5a:ac:53:d0:3a:7f:f1:8c:39:31:0d:95:
                    bf:fe:21:76:ca:fa:11:25:1a:dc:df:65:c9:4b:f2:
                    d6:2e:a2:b8:b1:b9:91:01:cd:7c:7b:d7:03:c1:49:
                    50:8b:6e:81:c6:7a:8d:81:91:8c:fa:7b:44:c8:55:
                    3a:c6:ea:76:49:f7:93:08:38:0e:21:ab:ac:50:35:
                    64:44:12:97:d3:02:af:da:01:93:6c:6e:cb:1f:91:
                    3d:e1:f4:f6:c1:2c:fe:a2:c2:4e:94:30:e0:89:ab:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:14:1D:C5:17:00:37:0C:84:D7:86:2E:EE:AA:FF:C6:9D:68:C3
            X509v3 Authority Key Identifier:
                keyid:0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3d:fa:3b:e1:b5:c1:0c:97:7e:04:06:ec:7a:61:e9:b9:24:
         8f:7d:d3:80:0d:8a:ff:5c:27:94:15:fe:d6:23:ac:3a:82:f3:
         42:7e:be:9d:e8:61:22:0d:f0:b6:0c:c6:39:67:ac:e9:6d:cf:
         cb:e9:3c:35:7d:50:08:d8:92:2e:21:0b:8d:3b:72:3f:c9:34:
         c9:9b:b2:45:04:9f:ca:bd:f4:ff:a2:eb:b9:1b:24:79:07:27:
         b0:3c:2b:00:e7:49:bc:89:ce:08:4d:23:0d:6d:72:5f:d9:40:
         b7:8c:05:dd:eb:13:6f:8e:1e:40:cd:66:4c:2a:a0:02:61:b0:
         e7:d1:fb:2c:5e:83:7b:27:48:5c:71:78:32:33:d0:a7:b0:42:
         dc:2d:29:52:32:3c:a7:f9:d3:67:de:7f:a2:8a:c0:ce:fa:33:
         2d:31:60:6d:5e:75:85:6b:12:12:83:47:93:d5:b2:10:91:da:
         dc:fc:5f:26:65:d3:c5:41:b8:d4:dc:15:26:c5:e8:46:bd:3d:
         5d:32:13:2e:7b:ff:c7:85:f5:71:1e:09:07:a4:10:41:c2:a8:
         5a:57:d2:16:0c:7f:6d:21:f7:b0:74:43:7d:7e:e0:47:43:a1:
         d1:af:30:c7:43:a9:6c:d1:ed:80:ca:cb:ea:90:bc:9a:e9:37:
         cd:d7:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----