This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File:                     UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier:          yqDwxkIgbAWiMdZ5VVHNVqpa5BchzgUQaNyOqRKqzPc=
Subject key identifier:   59:D4:EC:78:FE:44:26:71:1B:1B:75:C9:1A:75:F8:09:7C:37:6F:99
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer:       /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial:       019A397F048828493F08F566FA9897A2A48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number:          1701
Signing time:             Fri 31 Oct 2025 09:00:16 +0000
Manifest this update:     Fri 31 Oct 2025 09:00:16 +0000
Manifest next update:     Sat 01 Nov 2025 09:00:16 +0000
Files and hashes:         1: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (hash: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=)
                          2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: JGGHuEUFfCLMH+26v/PW4NzGqtZHPe7kfqzCBYPtu7I=)
                          3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:39:7f:04:88:28:49:3f:08:f5:66:fa:98:97:a2:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
        Validity
            Not Before: Oct 31 09:00:16 2025 GMT
            Not After : Nov  1 09:00:16 2025 GMT
        Subject: CN=59d4ec78fe4426711b1b75c91a75f8097c376f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:be:6c:eb:26:61:05:c8:fa:80:01:c5:e3:
                    c0:fe:63:7e:b2:88:46:95:87:99:92:dd:0c:ff:11:
                    b8:64:61:a3:79:8b:9f:15:05:1c:94:b2:5f:47:19:
                    d5:d4:5c:54:b8:dd:03:0a:4f:4c:eb:a1:04:0e:af:
                    d1:75:ee:52:ad:12:53:3b:73:24:44:7f:5e:1a:5b:
                    c8:a3:db:a7:f0:ca:c6:d1:5b:19:fd:d8:ff:0e:30:
                    50:9e:f9:96:d7:4f:04:57:a7:af:6b:7d:fa:b2:c8:
                    fa:b2:de:4e:ca:a0:5d:db:ad:58:fe:f8:7e:39:0a:
                    76:44:7d:c2:e1:09:f3:ab:69:56:f3:9f:93:05:d1:
                    bd:94:43:1f:b9:25:cd:7b:3c:4f:b9:d2:74:67:83:
                    af:0b:90:ca:65:df:12:a5:41:97:d4:2d:04:c0:ab:
                    80:cc:14:3a:4d:1b:b0:c1:a4:e0:54:66:3f:72:3a:
                    e3:26:80:4d:12:ae:f9:a3:13:79:6a:a1:df:85:32:
                    b2:52:b8:4b:6d:47:32:61:8e:4d:87:0f:46:d6:2d:
                    a4:7f:f5:13:9f:ac:d4:a1:7e:f9:58:48:c8:2d:e2:
                    f2:f2:96:d1:cc:d4:90:ff:88:e1:bc:43:d7:da:52:
                    fa:5d:dd:3d:6e:8e:ca:89:78:73:03:a1:a2:68:7f:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:EC:78:FE:44:26:71:1B:1B:75:C9:1A:75:F8:09:7C:37:6F:99
            X509v3 Authority Key Identifier:
                keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:97:04:0d:dc:ad:76:95:8d:29:3e:64:36:f8:2e:8c:4a:
         a5:8f:b2:a2:69:7d:1c:90:30:5e:b0:83:39:a2:14:cc:76:a4:
         46:48:b8:06:e7:d1:3d:8a:7a:5d:0f:e9:09:be:1d:3c:d6:17:
         27:66:2a:e7:3d:d7:07:40:52:2a:74:25:f8:7b:cc:e8:1f:02:
         c0:6d:38:2e:08:f1:6e:a3:fe:06:2c:e0:30:3c:9f:49:9a:3b:
         45:dc:95:23:ad:4a:67:ad:9c:48:6c:0d:a0:6b:bb:d2:c7:45:
         4a:5e:e6:80:50:88:2d:c7:36:b3:d9:55:36:ed:7a:9f:fd:b7:
         09:89:73:b6:f9:0a:56:f1:01:41:c6:42:e4:f5:76:98:2f:7d:
         2f:04:82:5d:75:fb:c3:23:33:23:5a:bd:79:f9:47:3d:27:11:
         6b:ea:80:2b:af:6c:d2:4d:a7:0d:7c:57:5c:32:07:ae:5b:97:
         89:00:fc:c1:e9:b7:0d:39:05:42:6a:51:b9:84:53:a4:e1:60:
         85:c5:43:f1:c0:06:1e:db:9b:04:8b:94:bb:b7:65:87:c5:62:
         36:03:5f:70:f0:6c:7e:43:5c:4e:fe:4b:56:ce:61:b3:4a:06:
         77:15:1a:09:4d:49:6c:72:36:57:31:d9:b3:85:7d:4a:07:20:
         6f:eb:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----