This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json) Hash identifier: IfO5rYUsGxNkAOaT5zLfrk0CyExEZzDg6qZEPtukp+M= Subject key identifier: 2D:38:4D:89:EB:17:C2:C7:60:0D:C3:42:6F:DC:69:38:56:34:3D:55 Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51 Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51 Certificate serial: 019A5CE7855A8EB5AB77D61A15385CAE28DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft Manifest number: 115C Signing time: Fri 07 Nov 2025 06:01:08 +0000 Manifest this update: Fri 07 Nov 2025 06:01:08 +0000 Manifest next update: Sat 08 Nov 2025 06:01:08 +0000 Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: YyQ+bLHOBy4cj1LYCz2eyxmrfYXwdzFA6S9xnaYUdo8=) 2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5c:e7:85:5a:8e:b5:ab:77:d6:1a:15:38:5c:ae:28:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51 Validity Not Before: Nov 7 06:01:08 2025 GMT Not After : Nov 8 06:01:08 2025 GMT Subject: CN=2d384d89eb17c2c7600dc3426fdc693856343d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:c8:e9:2a:10:3f:94:37:b7:48:6c:1b:60: 17:e7:56:67:57:cd:69:de:59:10:3d:60:e6:09:aa: 8d:22:d9:bf:a7:eb:1b:50:5a:ee:94:98:ae:24:18: 93:34:aa:97:4b:08:d4:11:b5:94:d9:df:31:a7:d5: ca:ad:42:75:e4:cf:89:66:25:28:55:6f:26:ac:18: 68:77:4c:4f:62:64:1d:69:02:e6:fd:9d:fa:c9:18: a4:69:f5:c1:41:b3:6a:63:07:9d:52:8e:63:43:f6: 16:e3:93:cd:bb:16:07:24:ff:35:cb:37:47:40:ab: cb:f4:7f:ec:88:3b:f4:8a:55:42:31:cb:c8:59:65: 53:ea:78:0f:a8:c7:61:26:bf:11:26:f4:e8:f5:d8: 2e:e1:93:3d:c5:ae:be:39:a6:79:39:0e:e6:2a:5b: 50:df:4f:a8:f6:74:ca:99:f4:57:98:3f:cb:90:7a: 78:5d:2b:86:f7:b0:72:43:63:85:79:2a:46:f7:c3: d0:6d:d0:ce:c1:3e:2b:bb:8a:d0:98:20:b3:71:af: c6:dc:e3:96:14:82:8b:dc:d2:76:08:e8:45:03:65: 43:51:e8:30:09:b5:31:97:27:a9:37:7e:57:0b:54: c8:e4:85:8f:b3:d1:da:fc:f6:4e:4f:21:f2:e4:d4: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:38:4D:89:EB:17:C2:C7:60:0D:C3:42:6F:DC:69:38:56:34:3D:55 X509v3 Authority Key Identifier: keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:6e:34:59:f0:fe:a8:54:3a:38:58:4a:61:44:ef:41:b6: b5:28:2d:6d:f5:6b:79:4a:52:03:16:c1:ad:75:2b:78:03:5d: f3:75:c2:e2:9b:77:b3:d5:9a:7b:3b:b4:a5:1a:ba:4d:c5:dc: 62:0d:11:13:43:76:4d:67:13:6a:49:40:39:b5:c2:56:17:41: 14:97:fd:e4:62:9a:82:53:4d:0e:b8:13:38:cc:9f:b9:44:00: 32:a5:55:38:e3:b0:59:8f:14:ce:78:e6:a9:1e:b4:1d:f4:e1: dd:3b:c7:a4:58:de:21:b7:97:66:2c:dc:cc:c7:ec:c2:35:25: c7:69:65:6e:be:10:2b:24:6a:13:00:b9:74:6d:2b:8d:8e:74: 50:98:da:a8:c4:34:2b:7b:cf:0b:11:74:10:d7:13:90:1e:e1: 56:f8:b7:3d:27:ae:ee:31:fa:bd:d2:bb:32:cf:d0:89:53:8e: be:74:c7:53:8b:0a:bf:d3:2a:15:fc:0e:91:2a:b1:b9:af:72: 36:93:5e:c9:51:43:a4:6f:ce:47:f0:bd:8a:48:7b:ed:7c:d2: 2a:58:48:fb:9c:e9:3c:da:95:a6:47:69:b1:af:b7:e9:15:87: 07:e4:d2:f0:ea:1c:cc:b0:df:c4:4b:33:f8:06:a6:f4:7e:d2: a4:d0:75:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpc54VajrWrd9YaFThcrijdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYTllOTgzMmVkMjVkZTc4YzNjZTA1MDEyMDgyNjEwNjYy ODFmNTEwHhcNMjUxMTA3MDYwMTA4WhcNMjUxMTA4MDYwMTA4WjAzMTEwLwYDVQQD EygyZDM4NGQ4OWViMTdjMmM3NjAwZGMzNDI2ZmRjNjkzODU2MzQzZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYHI6SoQP5Q3t0hsG2AX51ZnV81p 3lkQPWDmCaqNItm/p+sbUFrulJiuJBiTNKqXSwjUEbWU2d8xp9XKrUJ15M+JZiUo VW8mrBhod0xPYmQdaQLm/Z36yRikafXBQbNqYwedUo5jQ/YW45PNuxYHJP81yzdH QKvL9H/siDv0ilVCMcvIWWVT6ngPqMdhJr8RJvTo9dgu4ZM9xa6+OaZ5OQ7mKltQ 30+o9nTKmfRXmD/LkHp4XSuG97ByQ2OFeSpG98PQbdDOwT4ru4rQmCCzca/G3OOW FIKL3NJ2COhFA2VDUegwCbUxlyepN35XC1TI5IWPs9Ha/PZOTyHy5NReoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC04TYnrF8LHYA3DQm/caThWND1VMB8GA1UdIwQY MBaAFDqp6YMu0l3njDzgUBIIJhBmKB9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZmQyNzMtZjNhOS00NzU1LWIyM2Et M2JiZDg4N2QwNWMyLzEvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81ZmQyNzMtZjNhOS00NzU1LWIyM2EtM2JiZDg4N2QwNWMy LzEvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGtuNFnw /qhUOjhYSmFE70G2tSgtbfVreUpSAxbBrXUreANd83XC4pt3s9Waezu0pRq6TcXc Yg0RE0N2TWcTaklAObXCVhdBFJf95GKaglNNDrgTOMyfuUQAMqVVOOOwWY8Uznjm qR60HfTh3TvHpFjeIbeXZizczMfswjUlx2llbr4QKyRqEwC5dG0rjY50UJjaqMQ0 K3vPCxF0ENcTkB7hVvi3PSeu7jH6vdK7Ms/QiVOOvnTHU4sKv9MqFfwOkSqxua9y NpNeyVFDpG/OR/C9ikh77XzSKlhI+5zpPNqVpkdpsa+36RWHB+TS8OoczLDfxEsz +Aam9H7SpNB1ew== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:18 2025 by rpki-client