This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
File:                     L9lxonxvwsZi8GXdi_qLihMsHq4.mft (raw, json)
Hash identifier:          NQ193zt9PxBAYhDLNh6bmNQyHJCZnYPqocw9lzbOeOY=
Subject key identifier:   64:D1:26:A7:7E:DD:EB:CD:8D:74:4F:B5:65:F3:80:A0:16:F5:DC:94
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Certificate issuer:       /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial:       019537672C2730473AEF1D5B358B3CCD5C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
Manifest number:          0C5E
Signing time:             Mon 24 Feb 2025 10:01:03 +0000
Manifest this update:     Mon 24 Feb 2025 10:01:03 +0000
Manifest next update:     Tue 25 Feb 2025 10:01:03 +0000
Files and hashes:         1: 5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa (hash: VZnp6fYvw/+BPHQQcr7mdLl9tbfRb+FY6UHV9H/juh0=)
                          2: DW0TBajIRaJNjehdF_P6lFN1E-I.roa (hash: mI7ifTl+PSXtmyQehKoi7R5vAkxLOpMKlijli+a8Hsw=)
                          3: L9lxonxvwsZi8GXdi_qLihMsHq4.crl (hash: B6rr78iiy7e6ipdc9JzkPO3hh7cy62J/Z9ybL9nfSvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:37:67:2c:27:30:47:3a:ef:1d:5b:35:8b:3c:cd:5c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
        Validity
            Not Before: Feb 24 10:01:03 2025 GMT
            Not After : Feb 25 10:01:03 2025 GMT
        Subject: CN=64d126a77eddebcd8d744fb565f380a016f5dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:bf:de:8d:23:e7:00:bd:b3:69:95:56:08:
                    ea:62:df:0c:b4:ae:00:af:dc:ef:12:3e:ca:04:b9:
                    0b:9d:ea:5d:45:1f:22:d4:e6:81:c4:0c:3a:f7:6d:
                    e9:45:fd:e6:36:09:f7:6c:f3:44:d3:eb:d9:4a:95:
                    4f:76:dd:4b:a0:92:d1:89:ba:75:4e:fd:7b:91:4e:
                    84:62:2d:78:8b:9e:31:dc:d6:0c:7c:84:ed:6f:88:
                    ca:f9:dd:df:a3:03:e7:07:bf:44:3c:c4:dd:ee:bb:
                    30:aa:50:01:95:cf:c2:75:5a:c7:3f:60:66:82:64:
                    3b:2e:51:36:b5:52:56:14:b9:78:07:5b:66:1d:6e:
                    fd:f2:58:81:14:31:fa:ed:8d:8d:f0:77:24:f8:88:
                    30:8d:da:10:67:a1:f3:be:04:15:4a:d0:cf:92:cc:
                    79:a9:b1:8f:ff:a8:35:e8:94:7e:e6:5e:94:ae:6b:
                    6f:ff:92:1f:e2:53:22:b4:2e:8f:01:40:db:b8:81:
                    69:85:97:b3:e9:94:32:56:8b:03:9a:45:6b:72:81:
                    86:62:eb:a4:91:61:92:d9:1b:1b:b4:a3:98:a3:11:
                    4b:69:97:85:4d:c7:b1:4b:85:ed:b0:52:10:c5:e9:
                    56:bd:d9:ab:d0:e0:37:02:d0:93:10:3a:6d:f7:9d:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:26:A7:7E:DD:EB:CD:8D:74:4F:B5:65:F3:80:A0:16:F5:DC:94
            X509v3 Authority Key Identifier:
                keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:4e:a8:a7:51:b5:cf:7d:7c:be:c5:48:b4:3b:16:c5:83:50:
         62:80:2f:8a:9a:26:78:0d:7d:a6:43:e0:df:d0:75:31:4e:d6:
         d2:23:9f:27:24:db:ce:b8:7e:55:8f:bc:58:2f:45:fc:8a:8c:
         ea:62:d9:a4:f0:f6:e9:81:ff:b4:5e:37:bb:1f:6e:c3:64:41:
         ea:7c:48:ce:9e:90:07:55:bc:4b:90:4a:55:97:c4:e8:f4:5c:
         a8:10:9b:97:a3:37:88:0b:9d:10:cb:8f:1f:4f:e7:54:4d:77:
         37:45:0d:2d:19:45:5e:e8:64:40:04:a5:1c:d9:0a:64:4d:66:
         1b:0d:3b:55:ce:d9:2a:87:36:ff:97:6d:33:91:f5:1d:0f:e1:
         4d:cf:90:82:4d:87:23:d2:05:a8:73:e5:2d:05:01:bf:30:a1:
         89:9e:bf:53:59:9d:e1:68:d2:7b:3b:c5:0e:4e:0a:1d:73:d5:
         63:8a:77:c5:39:f9:18:14:c9:ec:fc:6f:58:42:66:3f:e7:89:
         60:49:9a:c9:68:a6:54:b3:49:b7:b7:7a:4a:50:8e:52:e9:f1:
         27:4f:8c:16:39:c5:33:fa:8d:15:fd:e1:a2:c4:69:29:5d:d2:
         48:2b:cb:de:48:40:d5:30:16:62:2d:15:04:63:a6:18:b5:fa:
         6c:87:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----