This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          sGLuQItHdbKy91R1p4Xa7f1dUjEod9i5PUX/06Z9q7Q=
Subject key identifier:   88:FF:96:93:DF:CF:35:54:EA:C9:AD:5E:BA:31:47:97:7C:58:F4:C1
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       019AC90DE942E2FA6F681F36D6BD9B2D3B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          1769
Signing time:             Fri 28 Nov 2025 06:02:03 +0000
Manifest this update:     Fri 28 Nov 2025 06:02:03 +0000
Manifest next update:     Sat 29 Nov 2025 06:02:03 +0000
Files and hashes:         1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=)
                          2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=)
                          3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=)
                          4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=)
                          5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=)
                          6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=)
                          7: H_e5gChyceWzNz7BJUeEFM73ZPY.roa (hash: Jkf1NjL3milSxMuppCF0PCIXWUTGD3eNyMTU3IOP0as=)
                          8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=)
                          9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=)
                          10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=)
                          11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=)
                          12: Xd_8P49TFZdJAZa6r0g8aHlB83M.roa (hash: EZwG/9+pFx+ntZrUzCFyWFtpH78z7DhQv6+GIcUg07k=)
                          13: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=)
                          14: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=)
                          15: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: xJlYNuqJkQ3MzByCXVLMQUokd3UC5HGBna3SogPxSWE=)
                          16: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c9:0d:e9:42:e2:fa:6f:68:1f:36:d6:bd:9b:2d:3b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: Nov 28 06:02:03 2025 GMT
            Not After : Nov 29 06:02:03 2025 GMT
        Subject: CN=88ff9693dfcf3554eac9ad5eba3147977c58f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:6a:8b:e9:97:19:8d:08:21:66:cd:c8:38:
                    65:83:70:53:53:c6:78:77:31:ea:09:75:77:29:e5:
                    06:cc:ca:75:c8:16:ba:b6:aa:05:32:12:6d:45:2d:
                    92:55:03:a3:7b:25:26:6f:b4:e6:d3:c4:62:f0:32:
                    0a:fc:2a:01:5f:fc:b8:6c:69:4e:d7:80:9b:8e:04:
                    d9:1a:79:1d:2c:cd:ec:d7:aa:ee:f0:5d:ad:35:61:
                    46:4e:69:13:8c:fd:ea:50:90:37:e8:7f:f0:4b:d7:
                    42:fc:02:0e:21:ac:21:df:c8:72:ee:9f:1e:03:3f:
                    ba:64:9c:28:ea:c1:69:66:51:65:c8:64:e0:4d:68:
                    14:f0:c0:73:f2:00:d8:77:24:c0:5b:88:27:d6:20:
                    19:12:2b:87:c2:f0:f5:bc:80:6b:2f:2d:70:e9:65:
                    b3:1f:6f:81:01:47:d3:c4:e7:ac:e9:b5:9c:a5:9c:
                    36:70:b7:dd:6c:c5:f3:9a:25:3a:12:6a:9c:68:ac:
                    cb:b1:f9:d5:d1:f5:32:f8:92:8e:de:fd:f6:ec:38:
                    ce:db:f3:fe:c8:23:2f:52:aa:53:61:70:60:fb:68:
                    13:cc:7f:33:96:93:6e:bd:d1:a0:75:96:99:58:b7:
                    b8:8e:76:0a:d8:9c:89:3c:b3:f9:9e:dc:55:e7:b6:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FF:96:93:DF:CF:35:54:EA:C9:AD:5E:BA:31:47:97:7C:58:F4:C1
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:50:3e:84:49:49:10:b5:14:d8:d8:2f:ab:b9:15:d1:b8:
         06:9c:5d:a9:fe:09:a7:d2:91:d8:af:4b:c9:f2:b2:74:51:02:
         74:3c:dd:80:15:22:b7:7d:a9:4f:e7:5e:5e:ee:f7:02:ed:41:
         d7:79:3a:e7:de:f6:30:91:52:56:35:0e:25:88:8b:95:c4:88:
         a6:f3:fc:17:5f:89:26:a6:db:a5:61:47:27:31:d7:0d:0c:93:
         16:dd:18:c9:5c:b1:d5:b0:13:1c:19:9c:0e:99:3c:6a:6a:a6:
         55:2e:2b:51:6a:f8:70:7d:ce:18:23:80:68:03:7d:ee:a1:3d:
         0b:02:86:67:bb:1e:0a:dd:92:be:a0:2a:87:2b:77:f3:c7:0f:
         bf:77:36:97:81:1f:08:5c:41:49:c4:16:77:c4:f1:5e:7a:09:
         8b:bb:1d:62:86:16:18:27:c0:9b:a2:5f:35:ab:1d:c9:43:8e:
         c0:88:98:73:07:3d:bd:3a:61:06:31:db:18:6d:79:8b:8a:60:
         01:20:85:3f:95:7d:16:7c:67:ff:c4:91:5d:4b:ac:c0:73:8e:
         60:43:62:b8:cc:02:06:12:9d:59:73:0c:d1:e3:33:15:f2:ba:
         4f:c4:f2:2e:fa:9b:e9:ba:f8:14:da:b1:85:44:ee:0b:84:52:
         c3:5f:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:51:16 2025 by rpki-client