This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
File:                     es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft (raw, json)
Hash identifier:          HeiTKRIMkAtnf1L+WwcqDDc+mh+QR44izPVkyxs3umE=
Subject key identifier:   5F:92:B0:45:FA:10:02:7C:B8:E3:54:08:28:88:C2:74:0F:1E:02:BE
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01975D6BD85116BF9D99DB0517762E367708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
Manifest number:          0CA8
Signing time:             Wed 11 Jun 2025 05:17:17 +0000
Manifest this update:     Wed 11 Jun 2025 05:17:17 +0000
Manifest next update:     Thu 12 Jun 2025 05:17:17 +0000
Files and hashes:         1: UmeH7HPiC83x6IxA4p_rLjsiy2k.roa (hash: N2QdxBA4x2LqQKwTW09bY+4+ufn0+UXIt7X9iw1XF84=)
                          2: ZpHfWVjuEOKskBrtwaYIwjI0Guo.roa (hash: Wbu0UAoyfqfRNfVd83E/JzBGqxjkg6na3mvNKvAeptw=)
                          3: es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl (hash: Rx3nIFh5mIT/N4WQsKNwxfVXn69cRplK0Xbjx/PP9Ag=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:6b:d8:51:16:bf:9d:99:db:05:17:76:2e:36:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Jun 11 05:17:17 2025 GMT
            Not After : Jun 12 05:17:17 2025 GMT
        Subject: CN=5f92b045fa10027cb8e354082888c2740f1e02be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:9c:7e:e7:5f:ed:91:da:49:8c:ac:b3:94:
                    6a:dc:aa:ce:53:ea:2c:99:80:72:7c:68:42:f2:aa:
                    92:40:50:a0:f8:85:e8:4e:80:6d:34:61:88:c4:0e:
                    8f:83:07:df:85:ea:35:79:61:64:f4:d5:04:4b:8f:
                    a6:53:57:7f:dc:3a:ac:da:f4:5a:57:2b:db:67:6c:
                    ff:c0:ee:eb:68:64:e6:71:13:cb:56:36:22:10:89:
                    a4:f0:1c:a3:5c:55:09:94:bf:41:3b:c9:6f:36:64:
                    48:9a:55:7d:39:66:4f:73:c6:1e:66:59:23:67:28:
                    cf:06:72:1c:36:a5:eb:d0:18:8a:eb:cd:a4:9f:75:
                    44:09:97:bc:24:48:e4:1c:44:06:ab:c0:7a:62:9a:
                    1a:39:07:75:31:07:3a:52:c5:4f:e0:f4:78:f6:b4:
                    ef:ca:4b:c8:4b:4d:8b:30:7c:f7:a4:0d:61:a3:42:
                    5c:d4:ba:a9:bd:24:e7:6d:09:5e:5a:fc:c6:14:69:
                    e6:0a:63:bd:83:9f:e0:20:3d:b2:bf:e8:b3:2f:f3:
                    d4:ed:7d:20:a1:0b:7e:1c:3d:24:0c:ce:ac:e8:0c:
                    74:ed:35:49:43:7e:10:aa:b4:f6:1c:69:21:51:7e:
                    1e:0a:d3:4c:06:87:2b:7f:da:59:8e:00:58:fd:89:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:92:B0:45:FA:10:02:7C:B8:E3:54:08:28:88:C2:74:0F:1E:02:BE
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:56:03:ec:e8:8b:da:75:66:3c:cb:58:2e:e4:13:36:4b:
         32:53:c0:36:8a:21:c1:f9:71:fe:37:25:46:a2:f5:91:6b:a8:
         b1:69:9d:84:cb:8d:5b:a7:e4:f0:68:75:cb:af:5c:11:94:52:
         0e:53:cf:66:30:f8:56:42:2d:aa:d6:dc:28:27:84:0a:f3:dc:
         26:c3:f8:47:69:06:5f:f4:a2:26:5d:bd:b7:8e:68:04:19:87:
         6f:f1:cd:9e:62:88:19:9a:25:cf:62:87:21:38:b3:f2:43:9c:
         65:5e:66:e6:91:3a:df:88:67:45:09:f6:4a:f0:68:66:14:b9:
         e4:27:ae:62:78:5c:ce:90:85:15:1a:ee:96:fe:13:72:7d:eb:
         e2:dc:32:6a:88:78:6a:0a:61:8f:e2:d1:bd:23:99:48:ed:d2:
         fa:40:19:9d:5b:1d:7f:2e:20:3b:a8:e7:04:46:e4:af:cf:cc:
         3e:90:45:1d:17:fe:d5:63:43:13:c4:9c:fe:d3:af:9f:2f:3a:
         1f:21:26:b8:fa:ad:8f:e2:76:a4:e2:ec:38:e7:83:30:0c:ff:
         93:b6:46:f4:37:8b:fe:39:ca:72:f0:fb:f5:d3:e4:c5:30:62:
         1a:06:a1:dc:c2:ee:c3:27:f8:de:d2:35:02:2d:a0:2b:44:d7:
         b6:8e:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----