This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft File: vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft (raw, json) Hash identifier: ysTb9Rl2haLep9lfx8YPT6N9sDxkdCzRrlqSMI8oluM= Subject key identifier: 09:F4:A5:2A:05:91:33:B1:7A:AC:86:74:09:79:F6:CF:5E:94:54:8A Authority key identifier: BD:4B:D8:91:3A:6E:7F:14:8C:C3:40:60:6C:BD:4E:85:FF:A9:F1:A5 Certificate issuer: /CN=bd4bd8913a6e7f148cc340606cbd4e85ffa9f1a5 Certificate serial: 0195225F3A06085D74695ACE36C266172949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUvYkTpufxSMw0BgbL1Ohf-p8aU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft Manifest number: 16 Signing time: Thu 20 Feb 2025 08:00:20 +0000 Manifest this update: Thu 20 Feb 2025 08:00:20 +0000 Manifest next update: Fri 21 Feb 2025 08:00:20 +0000 Files and hashes: 1: vUvYkTpufxSMw0BgbL1Ohf-p8aU.crl (hash: yavs4XCX93GtDcMKlamWNu2KA9fgvL4dKLenIs8YPZs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:22:5f:3a:06:08:5d:74:69:5a:ce:36:c2:66:17:29:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4bd8913a6e7f148cc340606cbd4e85ffa9f1a5 Validity Not Before: Feb 20 08:00:20 2025 GMT Not After : Feb 21 08:00:20 2025 GMT Subject: CN=09f4a52a059133b17aac86740979f6cf5e94548a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:f9:f5:c7:c1:c1:18:d4:85:84:b9:61:ea: ad:93:ed:fd:ff:cf:9e:f5:e6:84:0c:e1:5d:68:15: f7:20:29:2f:7f:f5:21:b1:ba:bc:0a:d2:93:7b:3f: 42:65:57:89:05:31:b9:de:3c:0a:e5:a4:92:71:2b: 38:53:f7:53:05:11:e5:10:64:16:cc:b5:21:ad:2e: 5b:01:64:5e:22:16:5a:c7:9f:92:f7:34:1c:de:50: 05:90:95:ed:c7:61:dd:e3:e1:c5:b7:b4:b1:fa:49: 80:2d:27:2e:f2:46:92:2e:ef:df:cf:7b:e6:c7:9d: d2:3b:62:f8:14:a4:d5:bf:cc:33:e9:78:21:8a:97: e8:3b:7c:07:f6:97:fe:20:fa:76:42:af:64:19:c5: f5:bd:aa:f6:56:a3:56:ef:33:a5:11:eb:83:fd:fe: a4:36:fe:1b:cd:48:b4:67:8d:24:99:d8:23:d3:d7: 67:9b:43:6f:a4:41:16:6c:f5:2f:5b:42:4b:7d:88: 0b:98:e1:82:47:e3:7e:20:37:21:13:0a:cd:cd:36: 14:81:1e:5c:ce:64:0a:d3:3a:ef:da:36:94:e1:c9: 8e:f0:bd:95:31:a5:2c:b9:3b:5a:6b:85:9e:1a:00: 9d:7c:10:e5:7d:7c:1a:6a:cc:1a:36:90:12:01:c3: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:A5:2A:05:91:33:B1:7A:AC:86:74:09:79:F6:CF:5E:94:54:8A X509v3 Authority Key Identifier: keyid:BD:4B:D8:91:3A:6E:7F:14:8C:C3:40:60:6C:BD:4E:85:FF:A9:F1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUvYkTpufxSMw0BgbL1Ohf-p8aU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:70:aa:14:3b:78:5a:23:cb:36:68:00:fd:c3:0f:29:45:3d: f2:2f:86:e4:61:a4:88:75:72:91:1d:a4:57:ab:0a:e1:74:0a: de:3a:ac:c9:18:42:cd:f5:ba:b9:3c:a9:80:e3:80:47:58:de: df:5d:14:44:67:45:00:f8:5f:fc:09:9a:06:1d:f8:40:b8:ef: b3:bb:5d:4a:52:cd:a3:3d:f1:40:12:f7:9e:12:af:73:2e:bb: ad:72:fe:24:49:08:72:a9:45:67:ce:8d:56:c8:12:9f:62:a3: c8:d5:cb:d0:6d:5c:fd:2d:44:e9:13:ea:46:1a:33:db:57:3a: e7:d0:32:a1:0e:aa:ca:df:97:78:30:8a:b1:75:c9:ba:0c:67: 04:26:17:76:09:1c:a8:69:d2:c9:42:6b:ff:40:db:6c:44:a6: b6:5c:ae:02:3d:ba:56:f7:13:ad:c4:77:b3:37:50:f6:53:bf: c4:84:2a:96:2c:bf:3f:69:f8:74:ce:e2:58:78:d6:5d:7f:d1: 61:9f:d3:3c:d2:70:42:0b:3d:3c:ec:8e:75:dc:03:0e:2f:f2: 8e:0d:a0:0b:33:b1:0a:25:92:6b:bc:73:24:ce:4e:9d:b1:d3: 41:7c:b3:ec:bb:b8:e8:6a:3f:1e:76:14:50:4a:b9:12:00:bb: 92:4c:b2:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUiXzoGCF10aVrONsJmFylJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGJkODkxM2E2ZTdmMTQ4Y2MzNDA2MDZjYmQ0ZTg1ZmZh OWYxYTUwHhcNMjUwMjIwMDgwMDIwWhcNMjUwMjIxMDgwMDIwWjAzMTEwLwYDVQQD EygwOWY0YTUyYTA1OTEzM2IxN2FhYzg2NzQwOTc5ZjZjZjVlOTQ1NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyr59cfBwRjUhYS5Yeqtk+39/8+e 9eaEDOFdaBX3ICkvf/Uhsbq8CtKTez9CZVeJBTG53jwK5aSScSs4U/dTBRHlEGQW zLUhrS5bAWReIhZax5+S9zQc3lAFkJXtx2Hd4+HFt7Sx+kmALScu8kaSLu/fz3vm x53SO2L4FKTVv8wz6XghipfoO3wH9pf+IPp2Qq9kGcX1var2VqNW7zOlEeuD/f6k Nv4bzUi0Z40kmdgj09dnm0NvpEEWbPUvW0JLfYgLmOGCR+N+IDchEwrNzTYUgR5c zmQK0zrv2jaU4cmO8L2VMaUsuTtaa4WeGgCdfBDlfXwaaswaNpASAcN5TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn0pSoFkTOxeqyGdAl59s9elFSKMB8GA1UdIwQY MBaAFL1L2JE6bn8UjMNAYGy9ToX/qfGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlV2WWtUcHVmeFNNdzBCZ2JMMU9oZi1wOGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84ZGI1MzItMDk2Yy00ZWQ2LThmY2Ut NjU4NTgzZDNmNTVhLzEvdlV2WWtUcHVmeFNNdzBCZ2JMMU9oZi1wOGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS84ZGI1MzItMDk2Yy00ZWQ2LThmY2UtNjU4NTgzZDNmNTVh LzEvdlV2WWtUcHVmeFNNdzBCZ2JMMU9oZi1wOGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnCqFDt4 WiPLNmgA/cMPKUU98i+G5GGkiHVykR2kV6sK4XQK3jqsyRhCzfW6uTypgOOAR1je 310URGdFAPhf/AmaBh34QLjvs7tdSlLNoz3xQBL3nhKvcy67rXL+JEkIcqlFZ86N VsgSn2KjyNXL0G1c/S1E6RPqRhoz21c659AyoQ6qyt+XeDCKsXXJugxnBCYXdgkc qGnSyUJr/0DbbESmtlyuAj26VvcTrcR3szdQ9lO/xIQqliy/P2n4dM7iWHjWXX/R YZ/TPNJwQgs9POyOddwDDi/yjg2gCzOxCiWSa7xzJM5OnbHTQXyz7Lu46Go/HnYU UEq5EgC7kkyy9A== -----END CERTIFICATE-----Generated at Wed Dec 17 15:29:39 2025 by rpki-client