This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File:                     2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier:          wYT73dAJIqh4FQIR4hVjbbGRmomRYtnQ13u0Fojwnck=
Subject key identifier:   3B:42:49:7F:45:EC:D3:4E:A4:2C:2A:D4:72:9E:BB:E1:F5:C5:6B:6D
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer:       /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial:       0195E1225DF79AFB11C88DB76861E31013B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number:          07E0
Signing time:             Sat 29 Mar 2025 09:01:20 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:20 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:20 +0000
Files and hashes:         1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: 4J0LSQf89xW2AlmsXKZc2sIttxKk+8/BHSEKAac+8fk=)
                          2: bhwBYoazvA5A_Z_cE9R34ToOWGg.roa (hash: sma7MnYwGc+h3WkyXXW6543+L5js/BDpTSkKMtbWDZw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:5d:f7:9a:fb:11:c8:8d:b7:68:61:e3:10:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
        Validity
            Not Before: Mar 29 09:01:20 2025 GMT
            Not After : Mar 30 09:01:20 2025 GMT
        Subject: CN=3b42497f45ecd34ea42c2ad4729ebbe1f5c56b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:87:94:65:9c:20:0b:10:b4:24:ec:fc:61:
                    7d:2c:04:e8:16:0c:88:01:02:75:9c:90:d5:cf:70:
                    6a:b8:6d:30:8c:ac:58:89:34:6b:4c:e1:df:14:06:
                    ae:82:ab:8c:a6:64:72:ce:1e:ad:21:5e:ea:92:74:
                    8d:dd:d7:42:c3:05:0b:ab:89:50:05:4b:09:4f:bf:
                    81:42:c7:45:b2:36:f5:0d:fc:a9:07:32:21:04:f0:
                    f7:3c:0e:a4:69:aa:ed:d9:fe:ae:ae:7f:ac:33:db:
                    64:d1:36:fd:6f:97:4b:4d:6d:9a:85:cb:b2:68:4b:
                    e6:26:e6:b6:e6:e1:9e:a8:f4:2c:f0:5c:3f:32:ac:
                    32:0a:93:28:29:ab:57:d5:7e:0f:23:2a:33:88:f6:
                    f5:11:6c:b2:47:7b:b3:50:b3:13:20:7d:7f:7e:62:
                    c5:85:f8:26:51:11:15:c1:d6:85:ae:4c:38:5e:c3:
                    6b:9b:f2:f6:c2:77:fc:45:b2:ab:5a:5a:b7:55:54:
                    1a:a9:d4:54:44:ee:b6:63:90:81:2e:50:0a:1a:f3:
                    e3:ca:05:33:ae:56:9c:ba:68:e8:b7:c1:1b:bd:7e:
                    a4:ab:88:73:c0:a5:50:78:c7:3a:1b:66:d1:c4:9a:
                    7f:81:68:4f:bf:34:25:28:a9:41:ff:38:26:97:b8:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:49:7F:45:EC:D3:4E:A4:2C:2A:D4:72:9E:BB:E1:F5:C5:6B:6D
            X509v3 Authority Key Identifier:
                keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8e:bb:76:2d:46:7a:ff:53:dc:30:9b:cc:ac:c7:1a:2e:e7:
         00:85:80:2d:ff:75:78:21:82:16:80:74:28:b4:d3:67:9b:13:
         7b:5f:fe:53:89:09:43:f2:d8:11:1a:f8:de:48:13:ea:bc:88:
         dc:9a:1f:a2:13:59:82:13:14:a0:e3:c4:6c:bc:eb:20:60:ad:
         29:53:90:aa:81:23:35:80:17:f2:0c:2f:c5:b2:15:7b:dc:5c:
         3a:93:f6:af:fd:66:ab:b9:60:56:1d:a3:d7:7f:39:32:c0:45:
         5e:23:77:3e:a7:9a:01:9a:5a:96:cd:32:7f:c1:b1:15:97:c8:
         c1:7a:cc:5f:d8:4e:35:41:6f:22:51:4d:d9:ad:c2:ed:60:09:
         74:0a:59:b9:ac:26:53:9d:c1:60:2f:f9:78:bf:fa:76:eb:4b:
         a6:20:36:38:43:d3:0a:75:8c:b2:0c:59:74:b0:64:2f:d2:fd:
         0c:7c:d3:90:91:77:3e:dd:aa:34:39:29:b5:5f:ab:38:87:a6:
         91:8f:cc:24:4c:f9:44:f6:32:3b:53:8b:b2:56:88:51:5f:c8:
         d0:58:47:48:ed:8a:fb:b8:2f:d5:9c:5e:61:2e:0d:11:f0:ac:
         7a:fd:7d:0e:8f:6e:65:97:62:0f:dd:c9:c5:cd:d5:80:3a:23:
         90:34:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----