This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft File: cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft (raw, json) Hash identifier: IFacGGcMG2ib18mSWM/1TKqAjYaLQ0Fo2Tp8Dj1aaSU= Subject key identifier: B0:AE:07:D5:60:30:E7:7D:EA:95:4A:EF:DC:90:C0:24:2F:B6:A4:40 Authority key identifier: 72:A9:AB:13:A4:60:92:5E:B3:B2:36:D3:F4:F3:67:00:AB:80:98:0B Certificate issuer: /CN=72a9ab13a460925eb3b236d3f4f36700ab80980b Certificate serial: 0194252CE55FB0DE7FC0696D0CDE2654D875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft Manifest number: 0D0D Signing time: Thu 02 Jan 2025 04:01:26 +0000 Manifest this update: Thu 02 Jan 2025 04:01:26 +0000 Manifest next update: Fri 03 Jan 2025 04:01:26 +0000 Files and hashes: 1: cqmrE6Rgkl6zsjbT9PNnAKuAmAs.crl (hash: /qD9/CG8s5K4gZt+Jomu3umm/sMbd4uMDJFdHLxABgY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:25:2c:e5:5f:b0:de:7f:c0:69:6d:0c:de:26:54:d8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a9ab13a460925eb3b236d3f4f36700ab80980b Validity Not Before: Jan 2 04:01:26 2025 GMT Not After : Jan 3 04:01:26 2025 GMT Subject: CN=b0ae07d56030e77dea954aefdc90c0242fb6a440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:8d:5a:41:b0:29:8a:0b:35:d2:93:bd:5f: 74:07:68:24:6e:e6:a3:5f:42:54:33:ef:02:8f:c8: f0:60:73:e6:e4:f7:1a:17:a2:47:1a:24:24:b3:d7: f0:1c:b6:ee:75:86:a4:3d:58:35:53:b0:ce:0b:78: 2c:10:9c:20:07:77:54:55:2d:7d:6a:66:85:f2:fe: 39:d0:29:80:ca:27:93:3b:1b:2b:56:22:4d:51:d7: a5:41:db:fa:55:29:47:a6:57:3e:7e:f6:34:82:40: 32:60:d2:99:3b:a2:7a:3b:2c:e0:f1:d4:d1:de:37: 11:b9:09:43:32:49:a1:82:51:a4:ce:8c:15:4f:c1: 21:a5:11:70:88:5a:27:34:d7:f1:be:71:32:92:6b: 8c:10:d0:0f:5e:20:41:cc:0b:ac:51:0d:96:02:64: 8b:fd:05:a7:b8:86:ef:7b:1a:d7:e7:2e:8f:81:9d: a4:1a:a1:e3:90:65:a6:97:d8:7f:49:01:87:17:9d: b1:ea:06:42:37:07:5f:e3:32:e9:de:f8:61:29:cb: db:a2:7d:9d:46:6b:14:62:c8:16:63:b1:18:f3:c0: 79:8c:6d:7f:a1:b7:a7:49:dd:4f:35:74:6d:7b:50: a0:78:c9:ae:bb:b4:a6:b6:20:61:46:d3:06:97:7e: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:07:D5:60:30:E7:7D:EA:95:4A:EF:DC:90:C0:24:2F:B6:A4:40 X509v3 Authority Key Identifier: keyid:72:A9:AB:13:A4:60:92:5E:B3:B2:36:D3:F4:F3:67:00:AB:80:98:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e9:3e:66:15:7b:8f:82:6e:a4:95:b0:cb:1d:2c:0f:86:79: 00:b1:19:a4:bd:6d:5b:22:1c:e5:36:14:a4:14:0d:57:dd:93: cd:35:98:31:73:f0:c7:b3:1d:5e:14:39:eb:da:e7:a6:38:bf: a7:48:77:22:c2:f3:e6:cd:9d:1e:08:20:59:57:97:6d:b3:ed: 7c:e5:c6:b5:1b:e4:5b:56:31:dd:7f:17:ba:51:27:b3:c2:30: 79:7b:d3:9b:2a:1d:e0:71:93:8f:c4:85:43:9a:2c:af:02:ac: 80:8f:53:0e:d5:d2:fd:25:d3:df:d4:e3:d2:1b:a0:95:10:7e: 08:5b:55:64:58:8f:5f:4c:b4:9f:a9:ba:61:73:4e:97:b3:81: 22:01:d6:73:78:22:75:e0:ae:c2:6e:99:2e:ef:52:b1:91:a6: 74:5b:d2:84:df:c6:c0:49:e7:08:21:1c:e9:64:0c:46:80:33: 86:60:06:d5:6d:2f:99:8d:64:53:2b:4c:7d:3d:16:87:bf:2e: dd:7c:f3:58:61:a7:f2:98:df:34:59:47:47:0b:b6:c2:00:2c: 38:80:e3:4a:7d:0a:d3:1a:c7:ee:c6:b4:8c:bf:21:8f:f7:13: a7:7a:76:84:95:b3:71:a0:1b:44:a0:8d:8e:4d:df:6a:70:19: 90:55:73:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZQlLOVfsN5/wGltDN4mVNh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYTlhYjEzYTQ2MDkyNWViM2IyMzZkM2Y0ZjM2NzAwYWI4 MDk4MGIwHhcNMjUwMTAyMDQwMTI2WhcNMjUwMTAzMDQwMTI2WjAzMTEwLwYDVQQD EyhiMGFlMDdkNTYwMzBlNzdkZWE5NTRhZWZkYzkwYzAyNDJmYjZhNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04qNWkGwKYoLNdKTvV90B2gkbuaj X0JUM+8Cj8jwYHPm5PcaF6JHGiQks9fwHLbudYakPVg1U7DOC3gsEJwgB3dUVS19 amaF8v450CmAyieTOxsrViJNUdelQdv6VSlHplc+fvY0gkAyYNKZO6J6Oyzg8dTR 3jcRuQlDMkmhglGkzowVT8EhpRFwiFonNNfxvnEykmuMENAPXiBBzAusUQ2WAmSL /QWnuIbvexrX5y6PgZ2kGqHjkGWml9h/SQGHF52x6gZCNwdf4zLp3vhhKcvbon2d RmsUYsgWY7EY88B5jG1/obenSd1PNXRte1CgeMmuu7SmtiBhRtMGl37C0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCuB9VgMOd96pVK79yQwCQvtqRAMB8GA1UdIwQY MBaAFHKpqxOkYJJes7I20/TzZwCrgJgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3FtckU2UmdrbDZ6c2piVDlQTm5BS3VBbUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83ZmMyMGUtZDgwYy00YjNlLWI0MTIt ZTNhNDg3OGNkNjMxLzEvY3FtckU2UmdrbDZ6c2piVDlQTm5BS3VBbUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83ZmMyMGUtZDgwYy00YjNlLWI0MTItZTNhNDg3OGNkNjMx LzEvY3FtckU2UmdrbDZ6c2piVDlQTm5BS3VBbUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+k+ZhV7 j4JupJWwyx0sD4Z5ALEZpL1tWyIc5TYUpBQNV92TzTWYMXPwx7MdXhQ569rnpji/ p0h3IsLz5s2dHgggWVeXbbPtfOXGtRvkW1Yx3X8XulEns8IweXvTmyod4HGTj8SF Q5osrwKsgI9TDtXS/SXT39Tj0huglRB+CFtVZFiPX0y0n6m6YXNOl7OBIgHWc3gi deCuwm6ZLu9SsZGmdFvShN/GwEnnCCEc6WQMRoAzhmAG1W0vmY1kUytMfT0Wh78u 3XzzWGGn8pjfNFlHRwu2wgAsOIDjSn0K0xrH7sa0jL8hj/cTp3p2hJWzcaAbRKCN jk3fanAZkFVzIA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:44:28 2025 by rpki-client