This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          5jYTJ2xXxqfXZ5/DK+Sj/SxdyuB53x4DswYba77T9Z4=
Subject key identifier:   21:F3:30:E2:E5:16:0B:49:E5:01:A4:0B:76:08:A8:33:2D:EC:E1:EB
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       019ACAFC51C60D8410D40524E6F9E92EE556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          176A
Signing time:             Fri 28 Nov 2025 15:02:04 +0000
Manifest this update:     Fri 28 Nov 2025 15:02:04 +0000
Manifest next update:     Sat 29 Nov 2025 15:02:04 +0000
Files and hashes:         1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=)
                          2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=)
                          3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=)
                          4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=)
                          5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=)
                          6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=)
                          7: H_e5gChyceWzNz7BJUeEFM73ZPY.roa (hash: Jkf1NjL3milSxMuppCF0PCIXWUTGD3eNyMTU3IOP0as=)
                          8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=)
                          9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=)
                          10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=)
                          11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=)
                          12: Xd_8P49TFZdJAZa6r0g8aHlB83M.roa (hash: EZwG/9+pFx+ntZrUzCFyWFtpH78z7DhQv6+GIcUg07k=)
                          13: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=)
                          14: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=)
                          15: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: fsOA/2185tk84HmshuHemZZPoH48XHDAg1kepGmIIRI=)
                          16: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:fc:51:c6:0d:84:10:d4:05:24:e6:f9:e9:2e:e5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: Nov 28 15:02:04 2025 GMT
            Not After : Nov 29 15:02:04 2025 GMT
        Subject: CN=21f330e2e5160b49e501a40b7608a8332dece1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:c6:52:1c:3c:51:cf:e7:d5:55:ac:42:16:
                    d6:16:56:5e:23:da:91:f9:6f:43:2f:63:04:11:2e:
                    27:32:40:6c:72:ba:f7:0f:17:d3:95:4a:65:e3:59:
                    b3:ed:05:65:29:25:7e:f9:57:8d:e6:ec:d8:09:f7:
                    ab:4e:e4:12:38:e8:8f:8e:76:fb:af:95:f3:de:30:
                    3c:e6:cd:3d:ba:7b:93:2e:ab:34:1c:43:76:ff:1d:
                    03:3b:a3:20:94:00:88:f5:61:82:4c:18:9b:47:45:
                    e7:ff:ba:82:d9:52:f2:a3:96:29:8d:1d:6d:a5:2a:
                    7a:70:03:04:53:eb:c7:00:fb:0a:22:07:2f:75:20:
                    d0:27:70:ba:f2:08:eb:6e:6a:51:12:04:d2:bb:fe:
                    5a:57:5c:e3:7e:bd:31:f5:c4:f4:0e:56:27:ea:af:
                    6a:d2:0e:1b:56:2a:df:cf:f0:44:6f:8b:08:27:05:
                    8a:67:f3:4a:50:e7:0c:74:b5:2d:eb:72:97:b9:5f:
                    f5:c4:b3:82:f4:9f:8b:f2:01:06:93:68:1d:94:c5:
                    d6:43:ff:23:d2:2b:94:c4:38:52:ab:ae:ce:30:69:
                    eb:c5:f5:16:19:73:e8:e6:36:4c:c3:be:30:67:6c:
                    de:b8:c5:5f:67:3c:cd:ea:09:3c:d1:55:7a:9b:fb:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:30:E2:E5:16:0B:49:E5:01:A4:0B:76:08:A8:33:2D:EC:E1:EB
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:ce:5a:e8:49:51:1d:e8:8a:00:8e:49:27:f8:ff:d7:34:
         65:3b:89:23:c8:d6:22:a2:5e:f5:c2:f3:d5:de:35:2f:23:09:
         b9:f4:22:46:4d:db:73:f0:e9:5a:ad:03:7f:22:74:a7:06:ce:
         fe:dd:86:b3:39:b5:35:8c:7d:08:17:b6:ff:ad:f3:62:4b:ce:
         b5:55:3f:18:37:04:56:0d:e3:f2:ae:60:44:63:c2:c3:1b:ad:
         fb:b9:9a:49:90:ec:97:3a:a4:b1:7b:cd:d6:d6:7d:74:1d:bc:
         ed:52:c1:1d:3e:d4:0d:b2:cb:85:ee:a5:28:ee:5f:6d:98:8d:
         b0:36:f9:bb:a9:1d:b3:d9:15:df:c0:4c:d9:cc:a6:02:20:8f:
         69:09:e5:50:6b:bb:54:71:4a:e5:80:e9:bb:af:f4:18:98:0d:
         77:3f:3d:15:2f:64:1f:b0:07:15:37:0f:47:6a:85:5a:0f:0e:
         6c:fd:02:d3:26:4e:9f:53:e6:20:47:54:1c:eb:03:bf:3d:a6:
         58:48:cc:38:9c:40:50:d7:5a:4e:dd:87:22:6c:e5:e7:01:13:
         53:ab:54:d0:6c:ba:00:84:e4:db:c4:c4:1b:2f:c2:55:d1:f4:
         26:08:18:24:75:80:e6:e7:17:b0:94:8b:97:b2:6d:0f:fa:7d:
         8c:1c:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----