This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File:                     g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier:          r8+Q6cc433vQBt5UvxKNP/CssuOsN/BMmXLsjeDEWHg=
Subject key identifier:   1A:86:A9:E9:F6:D1:3F:87:10:B1:F5:20:20:D9:7A:3C:16:33:36:55
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer:       /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial:       01995642960E43C105F849ED0D6D4D2157A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number:          124D
Signing time:             Wed 17 Sep 2025 06:00:28 +0000
Manifest this update:     Wed 17 Sep 2025 06:00:28 +0000
Manifest next update:     Thu 18 Sep 2025 06:00:28 +0000
Files and hashes:         1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
                          2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: G1cEpILvvWY1NVU2rfoFJv4IoE5KK+P9thx89LTbk9U=)
                          3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:56:42:96:0e:43:c1:05:f8:49:ed:0d:6d:4d:21:57:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
        Validity
            Not Before: Sep 17 06:00:28 2025 GMT
            Not After : Sep 18 06:00:28 2025 GMT
        Subject: CN=1a86a9e9f6d13f8710b1f52020d97a3c16333655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:58:e3:48:fc:3c:28:7c:b1:b7:92:43:24:
                    df:9e:3a:5e:17:83:c8:d1:37:3c:f8:bd:9f:78:1a:
                    e6:da:19:8c:14:e0:cd:36:68:91:e2:4a:2e:3c:69:
                    7d:d0:6a:cd:ec:63:4b:77:65:bf:a6:06:f5:74:c2:
                    35:df:37:c1:06:9b:ac:84:86:da:a7:6a:44:13:3c:
                    fb:54:db:12:c3:35:64:1b:54:99:3b:7c:48:67:36:
                    cb:ea:81:cc:bf:c6:10:90:a9:44:13:7a:ac:b9:82:
                    e7:c4:60:f4:74:f3:26:6e:59:18:8e:23:22:2e:4f:
                    1a:96:a2:5e:cb:ec:fa:77:cc:63:c3:30:74:bd:9c:
                    26:dd:6e:c4:61:f2:6c:c8:dd:1a:2c:51:ff:31:de:
                    b6:e8:d3:58:f6:67:4a:f8:5a:1b:93:0a:fc:a0:cf:
                    ad:03:9e:ea:5d:65:c0:83:dc:fa:22:60:a8:f7:c3:
                    22:e1:76:4f:d8:b6:4b:35:16:cf:90:64:1f:30:c9:
                    5b:50:9e:9e:cf:02:b1:67:c0:63:8f:66:f2:25:ef:
                    43:70:b6:98:08:15:8b:eb:e9:db:d2:7e:07:95:b5:
                    ce:66:78:91:d5:37:60:c0:a7:f0:a5:77:3c:fc:b6:
                    54:66:77:04:3e:98:85:8e:5d:6c:78:60:dc:54:f3:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:A9:E9:F6:D1:3F:87:10:B1:F5:20:20:D9:7A:3C:16:33:36:55
            X509v3 Authority Key Identifier:
                keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:1f:42:19:d2:8b:41:2e:ce:36:b6:7a:5e:50:9a:05:43:
         5f:c7:45:cb:47:8b:a7:a0:46:8a:6a:44:2d:fa:d5:bc:49:98:
         54:35:c8:4f:da:20:a6:94:ee:f9:4b:89:72:ed:73:6c:77:12:
         32:ee:71:53:e5:e4:25:9e:b3:d1:41:5a:fd:90:d5:bc:c1:8b:
         f2:3a:14:7d:a0:8b:3a:b9:7f:ed:fd:c1:da:f5:ec:93:0a:7a:
         7f:09:6a:6e:6f:0f:cb:de:90:67:ab:8a:ec:2a:83:7f:c1:50:
         77:f4:da:8a:75:3b:31:1c:a2:fd:37:79:05:0f:b2:53:c6:15:
         58:a8:a9:30:10:cd:81:33:4e:dc:be:09:db:f1:73:ab:7c:6a:
         d4:a7:99:7b:2a:f2:0e:76:26:5c:8f:64:1f:88:61:8d:bb:44:
         df:3c:6b:70:88:11:5d:f6:be:eb:05:c3:34:84:4f:ca:2b:ed:
         41:bc:38:c6:a1:d1:94:7a:48:f3:7e:8c:6b:b9:4b:e8:d4:4b:
         4d:2c:47:72:71:70:a8:72:33:4f:24:69:58:18:33:a5:87:cf:
         33:cd:d2:45:de:2f:63:92:a6:1b:30:5c:25:cd:99:67:96:bc:
         38:9e:73:b5:af:9d:09:8e:c9:a1:26:17:76:fa:8d:8a:19:71:
         7f:22:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----