This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft
File:                     Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft (raw, json)
Hash identifier:          lPD+3YPNCoTzARNGlYzHqsngJWKPQrW0xRPHGKMclZc=
Subject key identifier:   17:B6:68:CA:9A:5A:18:21:1E:B5:D4:65:D3:89:E6:DE:32:C7:97:0C
Authority key identifier: 0E:79:F4:7E:FF:1A:FA:1B:23:B6:23:81:38:40:F6:CE:BF:57:79:A4
Certificate issuer:       /CN=0e79f47eff1afa1b23b623813840f6cebf5779a4
Certificate serial:       019B01EA0A923BEE740F6371F42DF32C2261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft
Manifest number:          28
Signing time:             Tue 09 Dec 2025 07:01:13 +0000
Manifest this update:     Tue 09 Dec 2025 07:01:13 +0000
Manifest next update:     Wed 10 Dec 2025 07:01:13 +0000
Files and hashes:         1: Dnn0fv8a-hsjtiOBOED2zr9XeaQ.crl (hash: SytsRdHYdHU7Jscm3jc+M/c6ldwdsmLRHf0ar30Cp3M=)
                          2: mvG3YWdgme5kDL899liGGrl6AXw.roa (hash: RhjOG7ei+0jF0h6xgfCw7yY1D/pCi55eBTTmGtVMc0M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:01:ea:0a:92:3b:ee:74:0f:63:71:f4:2d:f3:2c:22:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e79f47eff1afa1b23b623813840f6cebf5779a4
        Validity
            Not Before: Dec  9 07:01:13 2025 GMT
            Not After : Dec 10 07:01:13 2025 GMT
        Subject: CN=17b668ca9a5a18211eb5d465d389e6de32c7970c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:f9:4d:09:26:c3:d2:b7:76:2e:3b:66:77:
                    11:5e:46:e4:93:6e:e1:73:6a:d7:0a:28:68:ee:a0:
                    21:97:ae:f4:f3:c3:dd:56:d8:f9:3e:3e:a3:a4:54:
                    83:e4:72:cb:d8:c6:80:44:a9:03:be:e4:68:d6:2d:
                    ff:27:53:4b:86:b6:e0:71:f5:60:2e:81:a0:b9:24:
                    d3:90:54:16:21:19:43:5a:f0:57:28:ba:bb:c3:0f:
                    02:24:de:70:1d:2f:c6:69:2e:ab:f1:d5:9d:16:78:
                    36:31:c5:f4:de:37:f4:fc:ec:2d:b8:e2:2a:cf:6e:
                    2a:ea:56:b1:00:63:08:c6:da:4d:3a:33:6a:a3:13:
                    d2:a5:70:7d:58:b3:e5:d2:ef:34:9e:8c:b7:7d:6c:
                    a9:f0:03:c4:c1:be:ad:6c:bb:32:0c:6e:9e:a0:e6:
                    05:f1:9e:7c:d4:b3:bd:c9:85:36:25:88:e7:1f:d2:
                    c5:24:b5:9b:ba:9f:be:82:82:0b:a5:be:2c:77:a1:
                    bb:10:21:29:be:e2:c3:78:15:2a:ef:cb:85:f8:3d:
                    aa:5c:4a:d5:e9:e6:36:04:f7:d7:a1:b6:74:dd:d6:
                    06:a3:2b:5e:03:0d:e1:4b:b6:0e:46:42:1b:9d:4c:
                    c0:65:5c:20:20:b3:9f:df:5f:03:f3:9b:d9:1c:70:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:68:CA:9A:5A:18:21:1E:B5:D4:65:D3:89:E6:DE:32:C7:97:0C
            X509v3 Authority Key Identifier:
                keyid:0E:79:F4:7E:FF:1A:FA:1B:23:B6:23:81:38:40:F6:CE:BF:57:79:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:22:b5:46:19:01:26:67:31:3c:28:22:95:4a:0c:b2:20:3d:
         b9:bd:63:06:c9:a4:02:b7:7c:02:4a:63:41:d7:ba:25:e3:fc:
         68:c5:79:45:ed:34:ef:99:11:ec:39:9e:e9:15:b1:ce:a7:33:
         14:64:24:dc:68:93:9c:1f:19:39:ea:5d:d3:8d:dc:dc:7b:d4:
         81:11:6f:43:a9:28:52:29:66:1e:0d:4a:17:cd:fa:9d:70:63:
         71:c0:b4:4d:ed:2e:73:3a:33:29:8a:d7:44:09:b6:32:d6:6d:
         a5:77:3b:ac:2e:2a:40:1d:a0:ce:1f:98:59:30:22:b0:81:45:
         fe:a7:52:2a:f1:bc:36:f6:34:7a:97:b5:72:f4:af:3c:45:3f:
         7a:71:07:2a:9a:71:93:9e:d1:b7:f4:2e:60:5d:b7:51:9d:1c:
         e4:00:5b:e0:da:d7:f6:fb:d0:84:de:09:59:61:85:b1:f7:1c:
         5a:f6:bf:a6:dc:c1:b5:98:e2:ee:fc:ab:d1:2c:e5:4a:d7:29:
         9e:9e:29:d0:5a:28:f6:2e:1e:b6:1e:21:22:55:9c:f9:17:0b:
         6b:8c:09:13:03:5c:6d:a3:c9:d5:ff:cd:96:37:e4:f7:a7:24:
         4a:85:9f:96:24:a8:0a:c6:45:aa:d8:4a:79:49:8e:d3:d1:93:
         88:34:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----