This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
File:                     bzycduKvxzzO28ngKS_7mfZec1I.mft (raw, json)
Hash identifier:          2jn1XltUHqTL3PgUe/q6SQtxuUljxOeR7ogFV8HnaqU=
Subject key identifier:   F7:07:4B:B6:B3:5A:20:53:D5:83:62:32:F5:F4:3C:4F:ED:6D:3D:90
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Certificate issuer:       /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial:       01979A84227A50578E8BF707D04FE46F1B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
Manifest number:          0D03
Signing time:             Mon 23 Jun 2025 02:00:40 +0000
Manifest this update:     Mon 23 Jun 2025 02:00:40 +0000
Manifest next update:     Tue 24 Jun 2025 02:00:40 +0000
Files and hashes:         1: 0uWLA5mOdiy3OLJeZ1Ov94IOtqs.roa (hash: buxeJp/x66aw9yBb+1kLLqoKDBL9w3efxSEQZ/YnH08=)
                          2: bzycduKvxzzO28ngKS_7mfZec1I.crl (hash: /zOEn5eobA8m5q2Ff/3wJyIWlu4awpgD87eJq08/3Ws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9a:84:22:7a:50:57:8e:8b:f7:07:d0:4f:e4:6f:1b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
        Validity
            Not Before: Jun 23 02:00:40 2025 GMT
            Not After : Jun 24 02:00:40 2025 GMT
        Subject: CN=f7074bb6b35a2053d5836232f5f43c4fed6d3d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:9f:bb:d5:4d:88:87:0e:fb:27:bf:a0:45:
                    09:7c:ed:ea:85:3a:38:c6:39:a1:c3:3c:c4:68:36:
                    cc:25:51:eb:e1:0f:56:b0:dd:4c:57:98:1f:b9:cb:
                    03:6b:af:f1:41:92:ec:40:0d:1d:da:b1:f1:19:a5:
                    a9:aa:8e:44:57:c8:d7:7b:c2:40:1e:22:19:c2:2c:
                    40:41:26:29:86:75:ac:94:e8:10:04:3a:da:b5:94:
                    90:02:1c:b3:cb:d9:85:ba:02:11:8f:dc:94:2a:ec:
                    da:8c:42:f3:e7:7b:74:7c:c3:35:ba:e7:94:4e:ee:
                    2e:90:b7:17:5d:df:94:13:78:9e:4e:22:37:74:c7:
                    92:47:0a:a2:cd:91:d8:d4:67:ca:65:9d:d8:a7:8c:
                    33:90:be:71:cc:1a:ae:70:39:97:bb:2b:b4:08:20:
                    55:3d:7e:57:f2:cf:25:93:c8:6b:4a:8c:fc:5a:6a:
                    9b:47:1a:29:83:5c:81:9d:d3:cf:22:07:f3:ac:17:
                    9a:04:57:76:e8:7f:d0:4f:6c:18:79:6b:b1:60:62:
                    6a:93:77:70:9e:aa:f2:9e:b8:7b:b0:86:99:10:ed:
                    af:29:c8:2a:a1:6f:e0:fe:61:d8:82:d8:25:98:fd:
                    89:b3:50:86:89:70:80:87:aa:79:33:4c:33:15:b5:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:4B:B6:B3:5A:20:53:D5:83:62:32:F5:F4:3C:4F:ED:6D:3D:90
            X509v3 Authority Key Identifier:
                keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:8a:fe:4a:55:ad:0b:54:b2:f1:31:e7:ba:83:c9:40:57:
         71:d8:a8:dd:f5:e4:fc:2c:2c:4d:13:1b:76:1d:5a:fe:b5:d9:
         fc:6f:a1:3e:64:32:01:f4:90:b3:3a:ba:f8:c0:6c:c3:a9:34:
         fd:b6:e2:52:f4:5e:b7:d2:03:9c:ef:0f:11:79:49:f9:28:db:
         63:ea:de:b7:9f:1e:05:78:71:20:c1:47:93:06:9d:00:8e:ae:
         a4:df:18:f5:d0:e8:10:79:2e:bf:5b:ae:f5:83:72:06:78:6f:
         13:ad:7d:61:2a:58:05:38:59:9d:c3:17:26:22:09:e1:4b:a0:
         6f:24:0c:e1:a8:c2:41:43:1e:cb:22:54:2e:1e:9a:d4:75:b4:
         86:8f:a2:45:67:2e:56:6c:3b:4f:e5:f3:90:b2:e9:3f:33:3c:
         4e:e7:ca:59:71:65:08:7e:80:bb:c0:64:3a:d9:77:6c:8e:e9:
         30:24:c0:9f:3a:83:9c:c3:0f:0a:49:b6:5c:86:13:16:b7:7b:
         c3:8c:bb:1d:d0:17:74:5a:cd:e2:52:ad:d0:3d:17:57:32:d5:
         87:b4:4c:1a:d4:18:7d:ca:99:9a:9e:be:21:0f:88:5d:15:ba:
         bf:e0:e9:a2:eb:00:d9:0f:50:c1:b6:18:2f:59:e9:fb:ba:db:
         81:7a:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 22:20:30 2025 by rpki-client