This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json) Hash identifier: oxvxHHwZXJ5RmDFq7fiYadd5I2OR9vk//6CSsTMfY0E= Subject key identifier: 79:7D:A2:E6:58:F8:DC:65:D2:26:EF:E8:56:11:BC:A8:F5:95:D1:44 Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67 Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067 Certificate serial: 0199E0E0DB0F466D76C93B0BEADD906D4543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft Manifest number: 16D2 Signing time: Tue 14 Oct 2025 04:00:56 +0000 Manifest this update: Tue 14 Oct 2025 04:00:56 +0000 Manifest next update: Wed 15 Oct 2025 04:00:56 +0000 Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: 4GuNDfg4hq/tWiJvyac2iJ4YHzutF7KLZUDO505R5Q0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:e0:e0:db:0f:46:6d:76:c9:3b:0b:ea:dd:90:6d:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067 Validity Not Before: Oct 14 04:00:56 2025 GMT Not After : Oct 15 04:00:56 2025 GMT Subject: CN=797da2e658f8dc65d226efe85611bca8f595d144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:32:55:ba:1d:3b:ee:f5:6b:f9:45:43:bc:ee: a1:72:cd:85:40:cc:01:ce:7d:f4:73:5e:7f:53:5b: cf:a9:6e:2d:cd:c4:68:6a:81:ba:28:a4:94:0b:ac: bb:d3:49:27:a1:12:fa:5c:a5:27:02:bf:2d:bd:00: 87:62:29:f6:f0:c6:e8:05:bd:ab:46:3f:1a:f6:4d: 3a:52:ef:7d:cf:2c:94:f3:86:6c:fb:3c:b1:5b:b8: fd:f6:c2:51:ac:b5:20:9d:5a:c6:72:a6:76:0e:38: 6f:ec:a8:a2:b4:93:98:47:6d:b7:05:8b:2f:ae:38: 54:d3:e1:5c:17:e5:78:7d:01:65:24:10:69:59:c0: c4:07:d6:0e:4c:28:d0:45:26:d4:0e:85:9a:fd:e7: 48:a6:7a:8d:19:cc:ce:c8:6c:a3:25:33:a7:c7:db: c6:49:87:30:50:54:72:ca:17:15:9a:38:b4:b8:4a: 7f:9d:de:f6:e7:d7:13:4a:3c:56:d5:3e:87:04:2f: e4:d0:65:c1:a6:1f:88:a9:b8:9f:0c:cb:db:5d:ab: 32:d8:2d:17:db:d7:39:13:f5:17:fa:03:0e:d7:38: e2:b5:e6:25:7c:ea:8a:e8:52:39:40:02:91:71:dc: e6:06:c2:bb:2a:a9:89:6a:75:d7:58:ad:3e:fb:02: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7D:A2:E6:58:F8:DC:65:D2:26:EF:E8:56:11:BC:A8:F5:95:D1:44 X509v3 Authority Key Identifier: keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:26:84:6a:e6:ca:dc:4f:f1:59:b9:c8:66:67:1d:8f:7f:d7: 8a:41:3f:73:53:cd:a2:f0:5a:cb:05:4e:f2:9a:c1:54:04:f7: 34:97:23:b9:05:2a:01:f9:cf:3d:2e:01:20:e8:58:ea:90:82: 46:8f:e8:78:62:de:a4:af:e9:d4:3d:b2:c4:55:fb:30:a9:c3: 59:86:25:cf:a2:16:cb:ed:d8:e1:bf:b9:50:a5:9e:3e:37:99: 4f:27:c4:b2:2d:15:f9:f5:e9:48:33:4c:a0:38:d3:60:8d:16: d6:51:32:d8:60:fb:41:94:e0:92:8b:82:76:34:11:31:90:b7: 36:2d:ed:4a:23:60:14:e1:4f:08:f3:38:46:19:91:23:2f:3f: ce:2b:aa:e0:e0:38:0d:5b:23:1b:b5:a4:f8:42:37:d9:c4:78: 2e:1f:33:b5:08:3e:18:95:36:f3:07:c3:9b:28:31:7f:8e:06: 81:f1:6e:ba:31:02:4a:bc:56:c0:21:6b:c0:48:03:20:10:73: cf:cd:27:6e:da:4d:26:b8:d2:4b:fe:f6:91:63:0c:36:4b:32: 8d:b6:c7:2a:ea:2f:58:83:75:73:cb:c5:4d:7b:64:f9:2f:fc: 08:ba:e1:ee:e4:78:17:33:55:7f:df:b6:ae:ab:ce:03:d0:e7: b3:1a:58:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZng4NsPRm12yTsL6t2QbUVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTUyMzkyOGQ4ZThlNTRiZTQ2Nzk3NjMzMWEwMTIxZDQy YTAwNjcwHhcNMjUxMDE0MDQwMDU2WhcNMjUxMDE1MDQwMDU2WjAzMTEwLwYDVQQD Eyg3OTdkYTJlNjU4ZjhkYzY1ZDIyNmVmZTg1NjExYmNhOGY1OTVkMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDJVuh077vVr+UVDvO6hcs2FQMwB zn30c15/U1vPqW4tzcRoaoG6KKSUC6y700knoRL6XKUnAr8tvQCHYin28MboBb2r Rj8a9k06Uu99zyyU84Zs+zyxW7j99sJRrLUgnVrGcqZ2Djhv7KiitJOYR223BYsv rjhU0+FcF+V4fQFlJBBpWcDEB9YOTCjQRSbUDoWa/edIpnqNGczOyGyjJTOnx9vG SYcwUFRyyhcVmji0uEp/nd7259cTSjxW1T6HBC/k0GXBph+IqbifDMvbXasy2C0X 29c5E/UX+gMO1zjiteYlfOqK6FI5QAKRcdzmBsK7KqmJanXXWK0++wJD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl9ouZY+Nxl0ibv6FYRvKj1ldFEMB8GA1UdIwQY MBaAFB8VI5KNjo5UvkZ5djMaASHUKgBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmIt ODk5ZjlmYmViYjE5LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmItODk5ZjlmYmViYjE5 LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiaEaubK 3E/xWbnIZmcdj3/XikE/c1PNovBaywVO8prBVAT3NJcjuQUqAfnPPS4BIOhY6pCC Ro/oeGLepK/p1D2yxFX7MKnDWYYlz6IWy+3Y4b+5UKWePjeZTyfEsi0V+fXpSDNM oDjTYI0W1lEy2GD7QZTgkouCdjQRMZC3Ni3tSiNgFOFPCPM4RhmRIy8/ziuq4OA4 DVsjG7Wk+EI32cR4Lh8ztQg+GJU28wfDmygxf44GgfFuujECSrxWwCFrwEgDIBBz z80nbtpNJrjSS/72kWMMNksyjbbHKuovWIN1c8vFTXtk+S/8CLrh7uR4FzNVf9+2 rqvOA9DnsxpYvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:43:33 2025 by rpki-client