This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json) Hash identifier: mKzGsfOmrZU8pmCuW/OvJtFcq7TYm6V7ayiSNsBG8lQ= Subject key identifier: 57:66:30:E1:17:CE:31:92:23:31:B3:BE:85:E3:33:4C:BC:83:E3:65 Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e Certificate serial: 019A066D22F435424930E38F3EAF19F928EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft Manifest number: 0587 Signing time: Tue 21 Oct 2025 11:00:06 +0000 Manifest this update: Tue 21 Oct 2025 11:00:06 +0000 Manifest next update: Wed 22 Oct 2025 11:00:06 +0000 Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: 1Wh3LkNd3Onb7+siWXZk6Ir0noXeZ+c6prW7urw4mKY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:6d:22:f4:35:42:49:30:e3:8f:3e:af:19:f9:28:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e Validity Not Before: Oct 21 11:00:06 2025 GMT Not After : Oct 22 11:00:06 2025 GMT Subject: CN=576630e117ce31922331b3be85e3334cbc83e365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:6e:59:4c:a3:99:90:85:30:cb:5b:7b:d1: 19:aa:f0:06:44:55:9c:80:5c:b5:9a:3c:cd:1e:c6: dd:11:5b:95:63:4c:85:6b:b9:02:06:f3:e8:80:f0: c4:68:a9:1e:26:5b:6f:cf:76:1d:6e:86:ac:10:b2: bb:8f:25:f2:c3:a3:e8:f3:56:81:3c:e7:a8:35:73: e6:5b:d4:f9:96:ce:9b:d6:56:70:06:72:57:3d:e9: f8:f0:60:41:15:1b:d8:38:ac:e4:6a:e5:02:9a:e1: 00:c1:f8:1d:f7:e4:b0:39:49:ad:a2:e6:8e:ba:ae: 5a:12:46:92:11:d2:75:cd:83:7c:91:bf:99:43:c6: 0e:dc:b6:ac:65:e6:50:3b:09:f9:f0:03:9e:f5:89: 7a:a1:1c:39:e1:8b:6c:a9:0f:c6:c1:4e:8c:dc:c1: 2f:0f:c7:e0:f5:73:c8:4a:b6:d9:f3:2b:ad:2b:f0: b0:32:12:c8:34:aa:f4:82:29:ff:5f:13:ee:9a:8b: b9:40:92:b4:d4:56:68:90:b3:ad:03:f4:0d:6a:4a: 7b:f1:92:f7:b2:d1:45:37:a1:db:e1:2f:bf:1e:30: f0:4e:06:3f:05:6f:98:4a:fe:6b:e5:a0:06:0e:da: 8b:fd:c6:f9:37:98:04:f4:8e:68:b3:54:2f:f3:3d: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:66:30:E1:17:CE:31:92:23:31:B3:BE:85:E3:33:4C:BC:83:E3:65 X509v3 Authority Key Identifier: keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:97:c4:9e:ec:9b:db:5b:02:63:fc:e6:8d:e1:60:28:f1:de: b5:59:f4:de:bf:eb:7f:28:df:ad:3c:45:5e:a3:32:57:27:13: b8:42:b5:e0:3f:4d:36:af:b7:dc:17:f2:35:ed:9a:c0:4d:e9: f3:5d:f6:9e:82:6a:f4:2f:89:e6:7b:4c:35:6c:1c:40:96:f4: c1:d9:de:1e:e5:88:5d:85:c3:68:5c:d3:2d:32:43:31:aa:46: f0:73:f3:ef:83:a2:8a:74:69:fa:c5:3e:0e:f5:fb:23:99:fb: 87:ad:69:b8:31:40:bb:8d:cb:d5:41:93:9b:ed:e6:ec:e9:20: 7f:90:bd:d3:a7:36:85:d6:a6:e9:06:05:85:a7:06:d3:2e:fb: e9:04:4f:56:a7:a8:9f:ce:37:b8:43:6f:e2:0e:4c:c9:2e:12: b8:11:6f:f2:d4:00:d9:b5:99:ab:8c:a5:2a:ca:12:7e:9d:e1: f9:1b:7b:0c:7f:8f:66:9e:57:f6:17:e6:8c:84:90:53:df:ef: 03:6d:07:a1:42:7a:f4:d4:2e:5e:12:70:eb:03:d8:c9:1e:bd: 69:6a:99:aa:16:44:51:de:ee:11:ea:46:f1:d5:7e:47:d5:6e: 66:a8:43:cc:8f:3f:08:10:36:43:d4:32:cf:b0:93:2c:7e:8b: 16:3b:c2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGbSL0NUJJMOOPPq8Z+SjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy ZWJlOGUwHhcNMjUxMDIxMTEwMDA2WhcNMjUxMDIyMTEwMDA2WjAzMTEwLwYDVQQD Eyg1NzY2MzBlMTE3Y2UzMTkyMjMzMWIzYmU4NWUzMzM0Y2JjODNlMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lxuWUyjmZCFMMtbe9EZqvAGRFWc gFy1mjzNHsbdEVuVY0yFa7kCBvPogPDEaKkeJltvz3YdboasELK7jyXyw6Po81aB POeoNXPmW9T5ls6b1lZwBnJXPen48GBBFRvYOKzkauUCmuEAwfgd9+SwOUmtouaO uq5aEkaSEdJ1zYN8kb+ZQ8YO3LasZeZQOwn58AOe9Yl6oRw54YtsqQ/GwU6M3MEv D8fg9XPISrbZ8yutK/CwMhLINKr0gin/XxPumou5QJK01FZokLOtA/QNakp78ZL3 stFFN6Hb4S+/HjDwTgY/BW+YSv5r5aAGDtqL/cb5N5gE9I5os1Qv8z0DSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdmMOEXzjGSIzGzvoXjM0y8g+NlMB8GA1UdIwQY MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0 LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJfEnuyb 21sCY/zmjeFgKPHetVn03r/rfyjfrTxFXqMyVycTuEK14D9NNq+33BfyNe2awE3p 8132noJq9C+J5ntMNWwcQJb0wdneHuWIXYXDaFzTLTJDMapG8HPz74OiinRp+sU+ DvX7I5n7h61puDFAu43L1UGTm+3m7Okgf5C906c2hdam6QYFhacG0y776QRPVqeo n843uENv4g5MyS4SuBFv8tQA2bWZq4ylKsoSfp3h+Rt7DH+PZp5X9hfmjISQU9/v A20HoUJ69NQuXhJw6wPYyR69aWqZqhZEUd7uEepG8dV+R9VuZqhDzI8/CBA2Q9Qy z7CTLH6LFjvCKQ== -----END CERTIFICATE-----Generated at Thu Dec 18 04:56:46 2025 by rpki-client