This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.mft
File:                     i3tlLy8nHja2O0EZcn241Bi4Z_k.mft (raw, json)
Hash identifier:          sitFuQu3weqr/e2+b1zPgXDQ8HG8czBgnENnFlvLRTY=
Subject key identifier:   B1:54:50:AB:19:1D:55:DE:E3:F2:F2:61:B5:56:8C:D0:35:B2:FC:21
Authority key identifier: 8B:7B:65:2F:2F:27:1E:36:B6:3B:41:19:72:7D:B8:D4:18:B8:67:F9
Certificate issuer:       /CN=8b7b652f2f271e36b63b4119727db8d418b867f9
Certificate serial:       01951C5DACB7F8EF6E962FB6687430D14FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3tlLy8nHja2O0EZcn241Bi4Z_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.mft
Manifest number:          07AE
Signing time:             Wed 19 Feb 2025 04:00:55 +0000
Manifest this update:     Wed 19 Feb 2025 04:00:55 +0000
Manifest next update:     Thu 20 Feb 2025 04:00:55 +0000
Files and hashes:         1: i3tlLy8nHja2O0EZcn241Bi4Z_k.crl (hash: FfhwNRetzNyH17zhdykn00SQjsQjpPG1JaKDL4+6UZg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1c:5d:ac:b7:f8:ef:6e:96:2f:b6:68:74:30:d1:4f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7b652f2f271e36b63b4119727db8d418b867f9
        Validity
            Not Before: Feb 19 04:00:55 2025 GMT
            Not After : Feb 20 04:00:55 2025 GMT
        Subject: CN=b15450ab191d55dee3f2f261b5568cd035b2fc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:20:41:4b:02:2d:f3:ff:64:86:6a:49:8d:
                    bf:08:99:19:2f:73:31:ec:9a:83:ed:c3:36:09:62:
                    4c:f8:81:8f:4f:a9:8a:a2:26:35:f7:b3:0c:8c:d9:
                    62:c3:a2:8b:50:cd:22:64:92:fd:0b:83:5b:0d:78:
                    dd:30:18:38:98:ca:65:03:9a:38:fb:64:cc:32:27:
                    5f:6b:c8:46:22:3c:c5:9c:97:26:5e:90:86:44:78:
                    e8:5f:c9:55:33:9e:07:d1:a2:4a:0e:1f:ed:28:91:
                    3e:32:c2:1c:c3:31:d0:ad:e5:19:56:88:ab:68:94:
                    1e:0d:26:66:55:36:bb:18:93:73:f4:3f:49:cf:7f:
                    36:19:44:e5:7c:41:40:71:3c:8a:b0:d9:03:0a:63:
                    10:ed:c9:9d:db:98:76:1e:d1:88:9f:12:f8:a6:a5:
                    de:6a:51:36:4f:1a:15:89:48:ed:94:38:4b:87:a9:
                    30:96:6e:8f:67:24:a5:0d:30:d5:ca:0b:6c:d5:d1:
                    4b:30:ea:62:ad:87:be:f5:ca:63:da:a2:30:d3:52:
                    c0:ad:47:62:f3:18:6b:ef:fb:9e:ef:d3:5a:07:ad:
                    49:c2:8a:5b:d7:00:17:9b:a3:11:3c:1b:fd:eb:33:
                    c1:48:57:a4:a6:91:ab:24:eb:49:4f:ee:73:b1:11:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:54:50:AB:19:1D:55:DE:E3:F2:F2:61:B5:56:8C:D0:35:B2:FC:21
            X509v3 Authority Key Identifier:
                keyid:8B:7B:65:2F:2F:27:1E:36:B6:3B:41:19:72:7D:B8:D4:18:B8:67:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3tlLy8nHja2O0EZcn241Bi4Z_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5f:a7:53:eb:67:4b:4d:78:a9:0b:d6:19:88:24:b7:32:98:
         de:77:9b:a4:04:0d:c4:f4:95:7d:76:55:80:02:50:fe:f9:13:
         8d:ea:e7:fd:91:a5:3e:04:34:29:c4:00:7d:33:03:d0:c4:a6:
         68:47:d1:af:7b:bb:27:58:ef:70:1b:ad:b7:8e:0e:15:cc:07:
         9c:62:b6:68:e8:9d:90:be:8c:b9:b1:ad:93:b6:53:bd:27:fc:
         80:8c:3b:94:95:46:79:89:e0:5e:d1:eb:a3:92:9b:25:fb:a5:
         54:e0:ad:b9:c7:44:f6:44:4e:7f:bf:05:81:00:65:24:41:8d:
         f4:60:eb:77:8b:f5:dc:83:71:49:65:e4:73:42:59:27:95:4a:
         1d:a9:c0:4a:d7:33:59:4a:55:bb:ec:df:77:73:7a:e5:bd:df:
         5a:ba:d3:5c:e6:ee:a2:a7:bf:17:e7:6f:2a:8c:8c:dd:32:ec:
         47:72:b3:e3:98:7f:6c:20:e4:02:8a:4b:0a:c3:8c:e8:f0:1a:
         7b:d0:08:84:fe:52:2d:2e:c5:cf:75:ab:df:da:23:4b:57:73:
         ea:48:37:36:2a:aa:e4:d4:94:23:7b:82:ae:16:c1:2f:85:c8:
         5e:5f:d5:99:c8:ac:82:f0:03:64:1d:eb:1a:aa:37:45:b0:b8:
         1f:fa:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:08:02 2025 by rpki-client