This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/kI5TcvgFKjQ9SZLbJCjELzQSgpM.mft
File:                     kI5TcvgFKjQ9SZLbJCjELzQSgpM.mft (raw, json)
Hash identifier:          vOoUSbVi5fOAT9Dr4VaAncLUSPmOu1FoBTTU6cSsX9A=
Subject key identifier:   1E:E7:7D:BC:B6:DC:91:A7:40:FD:2A:31:90:34:07:E8:48:87:72:64
Authority key identifier: 90:8E:53:72:F8:05:2A:34:3D:49:92:DB:24:28:C4:2F:34:12:82:93
Certificate issuer:       /CN=908e5372f8052a343d4992db2428c42f34128293
Certificate serial:       0190BE3609A4C4947617EC492C771E7F67C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kI5TcvgFKjQ9SZLbJCjELzQSgpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/kI5TcvgFKjQ9SZLbJCjELzQSgpM.mft
Manifest number:          050A
Signing time:             Wed 17 Jul 2024 01:02:10 +0000
Manifest this update:     Wed 17 Jul 2024 01:02:10 +0000
Manifest next update:     Thu 18 Jul 2024 01:02:10 +0000
Files and hashes:         1: 31-Zz7gFg_6pUAueQz8njzxflp8.roa (hash: m86pi2TT+N/DkW7x+z9JVxtgXHA5/Ocvdr7S+CSWsH8=)
                          2: kI5TcvgFKjQ9SZLbJCjELzQSgpM.crl (hash: eAzip9128JE6LerF4MFbVzE6SxCQFcaRGhOWPxf4LfQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:be:36:09:a4:c4:94:76:17:ec:49:2c:77:1e:7f:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908e5372f8052a343d4992db2428c42f34128293
        Validity
            Not Before: Jul 17 01:02:10 2024 GMT
            Not After : Jul 18 01:02:10 2024 GMT
        Subject: CN=1ee77dbcb6dc91a740fd2a31903407e848877264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:84:3c:6c:a0:91:0f:38:27:9b:b5:f7:1e:
                    ff:23:fb:f0:03:af:6f:6f:b4:df:7e:5a:f8:86:c4:
                    95:11:e5:8b:ee:e0:13:a0:4f:7e:4a:30:9d:11:53:
                    7f:43:2e:4f:2c:15:29:ca:bf:81:48:dd:3a:ab:64:
                    28:7f:3f:d1:5a:c5:79:60:a9:63:3b:39:10:48:09:
                    fe:b8:4e:0a:46:bb:ef:f2:4b:70:7e:d9:c8:7c:00:
                    ee:16:a1:dd:52:ed:79:ec:09:54:84:b4:91:2f:ee:
                    c3:aa:95:83:c2:1a:4c:40:c9:10:64:22:91:5c:2a:
                    92:c2:c9:c8:ed:76:d1:5b:e1:a8:02:7e:4a:b5:fa:
                    3b:af:50:18:66:77:6a:ee:31:c5:98:6c:ff:4b:47:
                    7e:5f:15:31:8d:9e:8d:47:fe:ce:d3:2d:bd:f3:a9:
                    be:40:44:40:49:b3:6e:12:dd:c3:19:74:7b:3f:19:
                    3e:a6:f8:23:e9:93:ec:5d:4b:71:c1:67:8c:69:b3:
                    b9:a4:39:45:93:57:57:4a:f6:3d:a3:cc:c6:c5:22:
                    0a:d1:7a:58:84:cf:32:61:c9:f1:fe:f2:42:e5:e7:
                    d4:4f:52:45:60:28:01:12:4f:9e:1f:19:15:25:b5:
                    f3:80:78:68:80:f6:b6:8c:df:2c:02:63:db:ef:fe:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E7:7D:BC:B6:DC:91:A7:40:FD:2A:31:90:34:07:E8:48:87:72:64
            X509v3 Authority Key Identifier:
                keyid:90:8E:53:72:F8:05:2A:34:3D:49:92:DB:24:28:C4:2F:34:12:82:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI5TcvgFKjQ9SZLbJCjELzQSgpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/kI5TcvgFKjQ9SZLbJCjELzQSgpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/kI5TcvgFKjQ9SZLbJCjELzQSgpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:42:45:40:7b:54:05:01:e8:f7:71:94:64:ae:50:9d:6a:1c:
         8e:e4:b9:58:6d:c3:f9:83:33:da:3d:7f:17:3f:49:03:82:46:
         5b:74:fc:fb:8e:a5:95:a0:b2:3d:ed:12:67:bd:5b:b7:97:d0:
         cb:33:68:05:55:98:65:4e:32:40:2e:ef:91:e9:b0:9f:30:1e:
         cf:ba:13:f2:d6:f0:fa:79:4d:3a:4e:dc:67:f0:34:95:f8:70:
         fc:85:56:eb:7d:b4:7d:8b:38:ba:4e:b3:a3:20:48:16:7e:fd:
         f5:cc:91:af:da:90:c9:a8:42:f5:8c:6f:ef:d3:c1:9f:d0:df:
         f3:28:f6:3a:1a:32:4f:02:4a:c0:89:2a:b9:3a:34:52:fc:fb:
         7a:a8:43:6b:43:b9:ff:14:96:a3:5b:c5:ec:70:81:2c:a7:dc:
         d5:5a:af:0d:80:04:fa:6d:04:71:07:ac:e0:20:49:0a:f7:54:
         b6:24:78:18:31:c5:9c:c7:47:12:b8:c5:02:f1:22:5e:bc:40:
         b0:2d:53:55:d0:fe:49:eb:a9:9c:7d:aa:55:b9:0b:1a:c8:76:
         52:32:0f:20:1f:d7:1f:b4:a1:62:76:88:eb:27:5b:ac:ae:ec:
         52:e0:fe:09:61:90:0b:13:18:22:23:f4:07:d5:32:f3:fc:9d:
         02:d1:b5:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZC+NgmkxJR2F+xJLHcef2fDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGU1MzcyZjgwNTJhMzQzZDQ5OTJkYjI0MjhjNDJmMzQx
MjgyOTMwHhcNMjQwNzE3MDEwMjEwWhcNMjQwNzE4MDEwMjEwWjAzMTEwLwYDVQQD
EygxZWU3N2RiY2I2ZGM5MWE3NDBmZDJhMzE5MDM0MDdlODQ4ODc3MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqEPGygkQ84J5u19x7/I/vwA69v
b7Tfflr4hsSVEeWL7uAToE9+SjCdEVN/Qy5PLBUpyr+BSN06q2Qofz/RWsV5YKlj
OzkQSAn+uE4KRrvv8ktwftnIfADuFqHdUu157AlUhLSRL+7DqpWDwhpMQMkQZCKR
XCqSwsnI7XbRW+GoAn5Ktfo7r1AYZndq7jHFmGz/S0d+XxUxjZ6NR/7O0y2986m+
QERASbNuEt3DGXR7Pxk+pvgj6ZPsXUtxwWeMabO5pDlFk1dXSvY9o8zGxSIK0XpY
hM8yYcnx/vJC5efUT1JFYCgBEk+eHxkVJbXzgHhogPa2jN8sAmPb7/4c/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7nfby23JGnQP0qMZA0B+hIh3JkMB8GA1UdIwQY
MBaAFJCOU3L4BSo0PUmS2yQoxC80EoKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0k1VGN2Z0ZLalE5U1pMYkpDakVMelFTZ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hOTlhZmEtNzYzNC00MjQ3LWE3YTIt
ZTdmYjM4ZWU2YzMwLzEva0k1VGN2Z0ZLalE5U1pMYkpDakVMelFTZ3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hOTlhZmEtNzYzNC00MjQ3LWE3YTItZTdmYjM4ZWU2YzMw
LzEva0k1VGN2Z0ZLalE5U1pMYkpDakVMelFTZ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0JFQHtU
BQHo93GUZK5QnWocjuS5WG3D+YMz2j1/Fz9JA4JGW3T8+46llaCyPe0SZ71bt5fQ
yzNoBVWYZU4yQC7vkemwnzAez7oT8tbw+nlNOk7cZ/A0lfhw/IVW6320fYs4uk6z
oyBIFn799cyRr9qQyahC9Yxv79PBn9Df8yj2OhoyTwJKwIkquTo0Uvz7eqhDa0O5
/xSWo1vF7HCBLKfc1VqvDYAE+m0EcQes4CBJCvdUtiR4GDHFnMdHErjFAvEiXrxA
sC1TVdD+SeupnH2qVbkLGsh2UjIPIB/XH7ShYnaI6ydbrK7sUuD+CWGQCxMYIiP0
B9Uy8/ydAtG1lA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:14:24 2025 by rpki-client