This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json) Hash identifier: sK6wvJs88s4O0FixniSQVBwLWU4ILftR1J4euioT1F0= Subject key identifier: AD:3D:73:AA:03:6C:6E:24:6F:F9:27:FC:E9:B7:A0:E7:B4:4A:68:1B Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79 Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79 Certificate serial: 0198876914E7FA6F23D3D617F59539C18DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft Manifest number: 125D Signing time: Fri 08 Aug 2025 02:01:07 +0000 Manifest this update: Fri 08 Aug 2025 02:01:07 +0000 Manifest next update: Sat 09 Aug 2025 02:01:07 +0000 Files and hashes: 1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: 9WFqokqdj9YgOIDLnDRdYKJyRfflLSW6OSvMzCfT4tE=) 2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:87:69:14:e7:fa:6f:23:d3:d6:17:f5:95:39:c1:8d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79 Validity Not Before: Aug 8 02:01:07 2025 GMT Not After : Aug 9 02:01:07 2025 GMT Subject: CN=ad3d73aa036c6e246ff927fce9b7a0e7b44a681b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:be:eb:7e:51:08:2d:7e:8e:83:71:c8:1e: a8:60:c9:cc:25:fc:08:40:36:fa:65:0c:fc:63:d4: 4a:94:89:4a:1b:cc:66:33:a2:9e:98:de:6d:a3:39: fd:18:a2:6b:01:d2:42:d3:9c:49:40:40:4b:53:3f: d2:9d:32:2c:76:9f:85:0a:9e:45:6d:a0:8a:d6:56: 50:ed:ba:de:db:65:4f:63:fe:bb:ad:b6:0c:5a:08: d6:66:a1:d3:7c:4f:7a:90:ae:2e:47:eb:ac:14:58: 27:6c:7b:40:c2:45:d0:26:b2:5c:73:a8:f8:a9:c0: 28:47:a8:f7:49:22:ca:9f:90:82:44:ad:a0:b9:aa: 6e:c2:32:33:62:ad:fe:9c:fc:1b:07:cd:f9:f0:b1: f1:c9:33:21:92:ba:19:5e:79:23:0c:09:ea:66:14: c5:6b:92:2a:c4:94:1b:fe:d4:47:5d:8f:2e:d8:a5: 64:18:2e:66:e6:40:69:c3:bc:7b:b0:a0:47:7a:6a: 36:0d:8f:4f:69:06:06:02:91:e0:68:52:73:d0:8b: 8f:a7:e0:a4:f1:1a:b9:4c:01:65:f9:2b:a8:7a:53: f7:d5:5b:9d:c7:41:05:b7:5b:19:a2:38:87:b9:78: f8:e5:be:fc:dd:e8:81:dc:d3:b6:8e:09:a8:a2:7f: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3D:73:AA:03:6C:6E:24:6F:F9:27:FC:E9:B7:A0:E7:B4:4A:68:1B X509v3 Authority Key Identifier: keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2d:28:a2:0f:0e:b9:70:aa:59:1c:f9:c5:a8:94:1c:72:2e: 5f:71:d7:fb:fc:aa:65:61:51:3e:c7:00:ad:b6:92:38:f8:07: ce:4e:9d:76:d5:e9:45:22:12:68:18:40:99:85:7c:93:b6:43: 9f:ac:77:a3:62:cd:75:6e:34:9f:98:77:94:91:fc:b9:7a:f9: b3:e3:2f:27:1a:cb:e2:9d:11:ce:fd:82:93:ef:89:11:69:c2: ef:83:ab:1a:04:46:2f:eb:39:61:96:17:64:70:f7:45:06:0d: c5:cf:62:bc:4b:ee:4a:3a:50:a6:9f:c9:06:b6:fe:ee:69:68: 98:e5:1d:f0:94:e9:72:f3:a0:d3:14:9a:8e:1e:8c:2d:b4:d0: b0:01:23:3b:55:74:02:b4:da:68:11:36:ce:47:f6:9c:fa:34: c2:fc:72:2e:93:d2:0f:46:0e:f8:2e:56:a0:20:a0:b9:bb:43: c7:a6:90:d8:ed:10:f0:ba:e2:77:19:f3:b7:ac:03:57:09:e3: 4a:36:c4:18:d1:5e:de:b2:8f:6e:86:5f:20:e3:b0:cb:cf:06: f3:b6:6e:b3:ca:5b:7e:92:01:63:03:f1:f7:76:77:2e:71:d3: af:ce:05:90:85:f2:63:5a:25:0d:1b:6d:fe:81:54:e8:de:51: 8f:83:65:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiHaRTn+m8j09YX9ZU5wY3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNTExODY1OTMwMjk5NzYzZTBlNWYyZDgyNTY3ZGM1YTFk NTNlNzkwHhcNMjUwODA4MDIwMTA3WhcNMjUwODA5MDIwMTA3WjAzMTEwLwYDVQQD EyhhZDNkNzNhYTAzNmM2ZTI0NmZmOTI3ZmNlOWI3YTBlN2I0NGE2ODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNO+635RCC1+joNxyB6oYMnMJfwI QDb6ZQz8Y9RKlIlKG8xmM6KemN5tozn9GKJrAdJC05xJQEBLUz/SnTIsdp+FCp5F baCK1lZQ7bre22VPY/67rbYMWgjWZqHTfE96kK4uR+usFFgnbHtAwkXQJrJcc6j4 qcAoR6j3SSLKn5CCRK2guapuwjIzYq3+nPwbB8358LHxyTMhkroZXnkjDAnqZhTF a5IqxJQb/tRHXY8u2KVkGC5m5kBpw7x7sKBHemo2DY9PaQYGApHgaFJz0IuPp+Ck 8Rq5TAFl+SuoelP31Vudx0EFt1sZojiHuXj45b783eiB3NO2jgmoon9tAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK09c6oDbG4kb/kn/Om3oOe0SmgbMB8GA1UdIwQY MBaAFItRGGWTApl2Pg5fLYJWfcWh1T55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOGYwMmItNjU2My00MGE5LWEzNWEt MWYwOWJiNmRiMWI2LzEvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9hOGYwMmItNjU2My00MGE5LWEzNWEtMWYwOWJiNmRiMWI2 LzEvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGS0oog8O uXCqWRz5xaiUHHIuX3HX+/yqZWFRPscArbaSOPgHzk6ddtXpRSISaBhAmYV8k7ZD n6x3o2LNdW40n5h3lJH8uXr5s+MvJxrL4p0Rzv2Ck++JEWnC74OrGgRGL+s5YZYX ZHD3RQYNxc9ivEvuSjpQpp/JBrb+7mlomOUd8JTpcvOg0xSajh6MLbTQsAEjO1V0 ArTaaBE2zkf2nPo0wvxyLpPSD0YO+C5WoCCgubtDx6aQ2O0Q8Lridxnzt6wDVwnj SjbEGNFe3rKPboZfIOOwy88G87Zus8pbfpIBYwPx93Z3LnHTr84FkIXyY1olDRtt /oFU6N5Rj4Nliw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:18:05 2025 by rpki-client