This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File:                     p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier:          8qNm4kxPBhThQXs/1Fs9dqLCrzOJYgN4enSEDvVUVQE=
Subject key identifier:   9D:71:FA:4C:16:91:53:5B:37:CD:41:C4:D2:A0:AB:C7:66:A4:7E:22
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer:       /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial:       019927EA3D89A32B08ABCE722778327EA673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number:          0AB8
Signing time:             Mon 08 Sep 2025 06:01:26 +0000
Manifest this update:     Mon 08 Sep 2025 06:01:26 +0000
Manifest next update:     Tue 09 Sep 2025 06:01:26 +0000
Files and hashes:         1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
                          2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: It7HpozwpVXUnMpShjoOX4ovOFHHKeDalyMhezNl4I8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:ea:3d:89:a3:2b:08:ab:ce:72:27:78:32:7e:a6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
        Validity
            Not Before: Sep  8 06:01:26 2025 GMT
            Not After : Sep  9 06:01:26 2025 GMT
        Subject: CN=9d71fa4c1691535b37cd41c4d2a0abc766a47e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:5a:a6:71:cd:37:cc:f7:64:a1:89:b1:56:
                    a7:2b:29:73:05:cd:35:bc:56:a9:e5:6e:7f:1b:3e:
                    02:01:5a:bf:5a:22:b0:0e:fc:54:42:a2:98:0b:c3:
                    90:4b:5e:af:f3:07:86:6a:7c:aa:09:53:39:2e:84:
                    e3:86:88:7d:db:93:35:08:08:46:60:ab:06:32:84:
                    6a:95:95:c1:07:41:04:f0:99:f0:7c:ef:b2:ce:cd:
                    52:87:b9:c6:f0:0d:5a:42:28:4d:88:7d:26:59:71:
                    8b:a5:b5:2c:88:b3:65:f9:36:89:55:d4:09:de:c8:
                    6e:0d:5a:b6:b0:b9:db:cb:85:cc:0b:39:a9:96:37:
                    a4:4b:01:45:f0:fc:2f:d8:f8:09:68:38:9f:d3:68:
                    40:7c:92:ee:3b:28:67:ae:8c:cc:a4:60:d2:13:d0:
                    ec:d6:d2:7d:96:66:6e:48:23:c0:11:36:83:8f:85:
                    6c:40:cf:fb:95:84:16:20:1c:39:47:bd:58:e2:12:
                    ac:21:0e:04:21:43:d0:6a:37:58:63:d5:9d:d2:50:
                    64:e5:93:af:8f:61:90:2e:00:df:02:30:56:08:0c:
                    b4:33:58:ef:79:a0:0a:a6:f4:89:64:0b:b0:71:d3:
                    ce:4f:96:5c:1a:9f:48:e6:5e:97:70:e7:5a:60:dc:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:FA:4C:16:91:53:5B:37:CD:41:C4:D2:A0:AB:C7:66:A4:7E:22
            X509v3 Authority Key Identifier:
                keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:01:b4:09:82:ba:6c:ad:3b:ae:ce:6f:ed:03:3b:77:8e:9c:
         af:66:ca:1e:40:17:d3:09:2c:21:db:a1:04:8a:07:d0:9d:2f:
         56:dc:87:84:c0:93:9c:f9:26:45:2e:6c:13:47:64:c9:2c:2f:
         50:f7:36:ec:bc:7d:9a:39:67:4a:6a:fd:f4:45:39:3b:5e:5f:
         be:e3:0c:c9:95:93:e1:68:db:e1:00:f0:eb:74:8d:1e:13:d5:
         db:08:22:d5:88:50:5e:bd:14:bf:5f:a6:2a:e8:5b:3e:78:89:
         85:e4:b7:44:9d:9a:34:43:0c:5a:e9:d4:a6:cd:e4:c4:9f:c4:
         35:c1:04:a4:c9:5c:fe:7c:fc:d7:c5:f9:fd:38:aa:e5:94:2b:
         20:8f:68:cd:db:2d:44:4e:d5:d6:e7:e4:41:66:77:9f:00:a7:
         fb:78:d4:ba:3d:38:de:0e:16:53:bc:00:ed:8c:e8:ff:e5:0b:
         1f:df:8b:e6:9d:83:fa:a0:c0:69:17:a0:34:aa:68:c1:e6:8f:
         35:e2:04:d9:c1:9f:64:de:63:32:a3:5d:df:4e:1f:a6:e7:bf:
         72:25:00:61:e0:eb:73:94:d1:6d:40:d1:eb:33:40:c6:7c:0b:
         87:2d:55:63:d7:63:3d:ac:51:d3:ba:6e:fe:ce:da:1b:26:0d:
         e3:b8:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----