This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft File: 386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json) Hash identifier: 2uYAJpwMQziY9hGMaMjFfk+Z5XEWy87Bznw8sHUkKGA= Subject key identifier: 62:E8:F2:05:4F:AF:6E:29:1D:B5:D3:18:DE:89:4D:C8:86:F3:3B:CA Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD Certificate issuer: /CN=dfce961ae0e1618e7499c88a22559bb2025022ad Certificate serial: 019A7F3D12ACBBF14240880B56A7FDC10E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft Manifest number: 065F Signing time: Thu 13 Nov 2025 22:01:40 +0000 Manifest this update: Thu 13 Nov 2025 22:01:40 +0000 Manifest next update: Fri 14 Nov 2025 22:01:40 +0000 Files and hashes: 1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: vyC99DqBzhhR62Yx/10nwvgsMYS34BsdHEW6AMJ5FYU=) 2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:3d:12:ac:bb:f1:42:40:88:0b:56:a7:fd:c1:0e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad Validity Not Before: Nov 13 22:01:40 2025 GMT Not After : Nov 14 22:01:40 2025 GMT Subject: CN=62e8f2054faf6e291db5d318de894dc886f33bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:50:6e:3f:b8:f0:ac:4c:ca:a0:ec:7c:b0:d6: dd:ba:ae:48:f6:f9:25:6e:98:35:6f:a7:63:4a:3f: a8:ab:31:54:af:00:33:28:9d:7d:d6:b9:13:29:e6: 3b:b6:69:61:e3:0c:84:33:36:8f:55:f8:4e:f9:68: c0:e4:10:a4:43:72:96:91:54:f5:d9:f5:0d:33:ed: f3:76:d4:19:1e:4f:ab:bb:a1:01:06:b4:d7:30:d0: 7f:44:9c:33:5d:16:e2:d3:9a:9e:67:64:f0:0f:c2: 9f:0c:c2:f0:32:92:c8:01:ea:2e:74:06:fd:36:e9: 5e:c8:83:cc:7f:db:c8:75:3c:25:96:2a:d1:28:d9: 47:ab:f7:9e:52:0b:3a:b5:b1:49:91:77:f9:3c:5f: 35:03:7b:6c:75:4c:97:4b:a9:1a:a4:ed:7d:6c:2d: 08:fd:73:d3:01:1d:d2:ec:c5:60:d6:a5:16:6a:cc: 5a:f3:16:a3:4c:2a:20:b2:24:7b:75:f5:27:f1:a7: 62:d1:ef:00:30:61:5e:21:09:0d:57:5e:e0:7e:62: 89:19:36:62:2e:ad:0f:f0:e3:36:f9:30:ac:c9:95: 22:eb:57:b2:63:e5:7d:b9:b9:c2:9e:7f:f8:98:26: 5c:c3:6d:f6:e8:eb:86:27:ca:2f:a5:88:f1:6a:1a: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E8:F2:05:4F:AF:6E:29:1D:B5:D3:18:DE:89:4D:C8:86:F3:3B:CA X509v3 Authority Key Identifier: keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:40:1c:f8:94:fc:c2:db:e8:d5:5b:8d:4e:30:dc:d9:e0:65: 13:ed:d5:f6:73:e0:da:9e:00:f2:97:12:fa:a5:4e:5e:ed:94: 8c:14:f4:5a:f0:f2:75:4d:b5:69:d9:69:5c:9e:6d:cc:cd:ea: e2:09:f4:f6:3e:9d:a4:22:06:9a:7c:68:aa:87:0d:36:53:f8: 62:b3:54:26:7c:2c:78:94:19:8b:d7:a4:dd:6b:26:f2:36:4e: e7:0b:24:5b:41:4b:65:a8:50:ef:8d:19:81:a6:5d:17:3c:c3: c6:0e:98:f9:9b:58:0e:a6:5d:8e:28:30:57:d1:9c:07:1e:9e: f4:83:8a:6b:9b:30:81:09:80:a6:55:b8:8a:d4:5e:17:8e:4f: 90:c4:6f:cd:ea:bd:d9:7b:b8:b3:5f:74:5c:74:8d:3b:06:e6: ac:9e:00:64:98:64:68:bb:62:75:11:94:a8:bf:fe:98:73:d9: 13:e2:fb:5c:ab:03:4e:6e:58:2e:88:a7:f7:44:e1:ac:e7:4f: ef:43:90:ed:a9:f5:5f:3d:9e:f2:05:be:93:37:25:13:18:f0: 33:d8:cc:8e:1c:e7:fd:ae:e3:8d:43:eb:1f:e1:53:0b:c4:d1: cd:b8:fc:5c:32:06:27:bc:f9:db:75:73:c8:7b:f2:83:f9:c8: d4:cb:5a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp/PRKsu/FCQIgLVqf9wQ4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmY2U5NjFhZTBlMTYxOGU3NDk5Yzg4YTIyNTU5YmIyMDI1 MDIyYWQwHhcNMjUxMTEzMjIwMTQwWhcNMjUxMTE0MjIwMTQwWjAzMTEwLwYDVQQD Eyg2MmU4ZjIwNTRmYWY2ZTI5MWRiNWQzMThkZTg5NGRjODg2ZjMzYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81BuP7jwrEzKoOx8sNbduq5I9vkl bpg1b6djSj+oqzFUrwAzKJ191rkTKeY7tmlh4wyEMzaPVfhO+WjA5BCkQ3KWkVT1 2fUNM+3zdtQZHk+ru6EBBrTXMNB/RJwzXRbi05qeZ2TwD8KfDMLwMpLIAeoudAb9 NuleyIPMf9vIdTwllirRKNlHq/eeUgs6tbFJkXf5PF81A3tsdUyXS6kapO19bC0I /XPTAR3S7MVg1qUWasxa8xajTCogsiR7dfUn8adi0e8AMGFeIQkNV17gfmKJGTZi Lq0P8OM2+TCsyZUi61eyY+V9ubnCnn/4mCZcw2326OuGJ8ovpYjxaho7+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLo8gVPr24pHbXTGN6JTciG8zvKMB8GA1UdIwQY MBaAFN/Olhrg4WGOdJnIiiJVm7ICUCKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEt ZTMzZDYxNmYxOWU4LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEtZTMzZDYxNmYxOWU4 LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkAc+JT8 wtvo1VuNTjDc2eBlE+3V9nPg2p4A8pcS+qVOXu2UjBT0WvDydU21adlpXJ5tzM3q 4gn09j6dpCIGmnxoqocNNlP4YrNUJnwseJQZi9ek3Wsm8jZO5wskW0FLZahQ740Z gaZdFzzDxg6Y+ZtYDqZdjigwV9GcBx6e9IOKa5swgQmAplW4itReF45PkMRvzeq9 2Xu4s190XHSNOwbmrJ4AZJhkaLtidRGUqL/+mHPZE+L7XKsDTm5YLoin90ThrOdP 70OQ7an1Xz2e8gW+kzclExjwM9jMjhzn/a7jjUPrH+FTC8TRzbj8XDIGJ7z523Vz yHvyg/nI1MtaPw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:56 2025 by rpki-client