This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json) Hash identifier: 5pUkqpGP+BQd6YHUMKUc9u79838k5I6l2LmaGYgz8sM= Subject key identifier: 48:C8:32:90:9D:D3:98:03:02:D1:59:8E:04:C1:FF:26:46:E4:CA:29 Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41 Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241 Certificate serial: 019A9066BADFE4560E92838F07B6B058B7A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft Manifest number: 1031 Signing time: Mon 17 Nov 2025 06:00:42 +0000 Manifest this update: Mon 17 Nov 2025 06:00:42 +0000 Manifest next update: Tue 18 Nov 2025 06:00:42 +0000 Files and hashes: 1: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: PoL5wrpdIniEPzbUIIMoHiTt2w5OsNHUdo8iot4uhM0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:66:ba:df:e4:56:0e:92:83:8f:07:b6:b0:58:b7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241 Validity Not Before: Nov 17 06:00:42 2025 GMT Not After : Nov 18 06:00:42 2025 GMT Subject: CN=48c832909dd3980302d1598e04c1ff2646e4ca29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:dc:e1:80:7b:38:73:d6:67:ea:6d:24:12: fa:46:19:84:a0:98:09:af:7b:2f:73:7c:85:36:d3: 5b:67:52:40:4c:5a:dc:b7:47:3e:c5:73:cc:72:69: 0c:cb:6d:5e:eb:7c:75:e0:42:9c:5f:5e:bf:14:44: 28:f1:e5:05:4f:fd:42:fe:aa:7b:ce:8c:f7:44:42: 5f:0f:40:2f:24:ad:fa:d2:64:5a:52:7e:16:ec:98: 82:dc:91:84:4f:43:f4:0d:29:eb:9d:8d:8f:f3:d5: 89:52:08:19:11:21:60:8f:5c:e7:f9:49:f5:e9:0c: 07:41:17:6b:ce:a9:cf:96:e4:46:fe:f4:f6:48:73: 07:bd:1a:6c:67:ee:31:98:ae:6e:d4:f0:17:5a:ce: c8:ce:4d:ad:b0:ea:19:d7:30:92:bb:9d:5a:52:14: 6c:f6:94:d6:db:20:78:93:57:a3:0a:91:76:5f:25: 65:a5:67:b7:1a:07:7b:ed:7b:c9:a0:07:d2:16:d2: 92:43:8c:77:b6:9e:b1:0f:ca:dc:80:c6:44:1a:22: 67:ed:3c:fa:f4:eb:3f:4b:da:34:da:c5:d5:25:3b: 34:df:c4:fa:1d:cc:51:58:cd:d7:7c:6c:07:14:66: e4:f4:c0:fc:b2:cd:15:6d:53:af:06:07:e1:9e:55: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:32:90:9D:D3:98:03:02:D1:59:8E:04:C1:FF:26:46:E4:CA:29 X509v3 Authority Key Identifier: keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:3d:b9:95:bd:13:1e:9b:c9:60:fa:a9:6f:ac:cd:f7:70: 97:4c:37:4c:10:bf:6f:5f:48:76:b7:93:14:87:99:fb:e0:c7: 4b:f5:ac:d8:54:45:11:2e:69:2b:fa:39:36:2c:89:bf:2b:e4: 18:21:06:4d:88:08:cc:b1:17:42:ea:4e:1f:e2:20:0d:95:a6: 99:21:b8:9f:4c:35:98:0d:72:2c:55:c3:f9:14:31:65:bc:4a: 32:9e:a8:ce:1d:54:a8:8b:26:09:88:6e:34:54:f5:98:3e:ea: 72:a3:8c:07:c6:e8:c7:b2:13:bd:1a:36:57:38:0c:ae:48:95: 7e:2b:44:ae:4e:cc:fe:7f:a5:1e:10:27:a0:c1:3b:bc:1c:d0: 43:e2:d8:90:50:e6:c3:65:a3:f0:6a:cd:a9:69:81:5b:d3:99: bb:7d:6d:c6:cd:22:02:eb:74:1d:d7:53:2b:18:3d:33:2d:13: cb:14:df:ae:d2:bf:a1:8e:6a:a7:e6:9b:eb:77:1f:0f:fb:31: 9c:d4:e8:8a:67:3e:45:68:6a:6b:82:92:37:e9:8e:9c:c2:5e: 5b:af:71:65:0e:2c:87:cf:d0:92:5c:88:0d:d2:8c:49:dc:63: e5:0f:c7:c7:36:56:69:f5:f0:07:0b:d7:c1:a2:c2:15:6c:86: b7:fc:ca:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqQZrrf5FYOkoOPB7awWLemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWJlNzRkMDlkOWIwNTI1MWRhZDJjOTY5Njc5M2MwNGI0 MGYyNDEwHhcNMjUxMTE3MDYwMDQyWhcNMjUxMTE4MDYwMDQyWjAzMTEwLwYDVQQD Eyg0OGM4MzI5MDlkZDM5ODAzMDJkMTU5OGUwNGMxZmYyNjQ2ZTRjYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr//c4YB7OHPWZ+ptJBL6RhmEoJgJ r3svc3yFNtNbZ1JATFrct0c+xXPMcmkMy21e63x14EKcX16/FEQo8eUFT/1C/qp7 zoz3REJfD0AvJK360mRaUn4W7JiC3JGET0P0DSnrnY2P89WJUggZESFgj1zn+Un1 6QwHQRdrzqnPluRG/vT2SHMHvRpsZ+4xmK5u1PAXWs7Izk2tsOoZ1zCSu51aUhRs 9pTW2yB4k1ejCpF2XyVlpWe3Ggd77XvJoAfSFtKSQ4x3tp6xD8rcgMZEGiJn7Tz6 9Os/S9o02sXVJTs038T6HcxRWM3XfGwHFGbk9MD8ss0VbVOvBgfhnlXsfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjIMpCd05gDAtFZjgTB/yZG5MopMB8GA1UdIwQY MBaAFIVb500J2bBSUdrSyWlnk8BLQPJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80OGQwOTItYTc2Yy00YzI4LWI4NGIt MzlhZDgwZjU0MmEwLzEvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC80OGQwOTItYTc2Yy00YzI4LWI4NGItMzlhZDgwZjU0MmEw LzEvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjg9uZW9 Ex6byWD6qW+szfdwl0w3TBC/b19IdreTFIeZ++DHS/Ws2FRFES5pK/o5NiyJvyvk GCEGTYgIzLEXQupOH+IgDZWmmSG4n0w1mA1yLFXD+RQxZbxKMp6ozh1UqIsmCYhu NFT1mD7qcqOMB8box7ITvRo2VzgMrkiVfitErk7M/n+lHhAnoME7vBzQQ+LYkFDm w2Wj8GrNqWmBW9OZu31txs0iAut0HddTKxg9My0TyxTfrtK/oY5qp+ab63cfD/sx nNToimc+RWhqa4KSN+mOnMJeW69xZQ4sh8/QklyIDdKMSdxj5Q/HxzZWafXwBwvX waLCFWyGt/zKWw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:31 2025 by rpki-client