This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json) Hash identifier: uYHsv/QROYi7op15b3xZerVrWSu3JpIh+M7JSm1gYew= Subject key identifier: CA:09:25:95:D2:CF:0E:FD:5C:70:68:C4:2E:4E:94:9E:52:59:4C:68 Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77 Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77 Certificate serial: 019A947B6531A52CF4ABA0ED010366258C09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft Manifest number: 0E67 Signing time: Tue 18 Nov 2025 01:01:45 +0000 Manifest this update: Tue 18 Nov 2025 01:01:45 +0000 Manifest next update: Wed 19 Nov 2025 01:01:45 +0000 Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: QthWFalt7vBsBCkETE5j0ZmEz0yZ+82Dl3WZDPg4UH8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:94:7b:65:31:a5:2c:f4:ab:a0:ed:01:03:66:25:8c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77 Validity Not Before: Nov 18 01:01:45 2025 GMT Not After : Nov 19 01:01:45 2025 GMT Subject: CN=ca092595d2cf0efd5c7068c42e4e949e52594c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:2d:6a:da:af:2c:0a:f7:8a:25:2b:f1:12: d5:10:a2:83:7d:72:94:e1:9d:84:34:93:65:bb:62: 66:74:4d:8a:9d:af:4d:e9:28:70:01:4a:9d:92:e9: 93:4e:de:7d:3d:f3:96:1a:51:70:4c:13:53:cf:a2: 5e:de:de:51:20:24:87:d1:dd:62:64:7a:c5:11:12: 6b:fc:cc:c2:f6:b1:06:f2:c8:45:5a:58:7f:54:e8: aa:49:4e:43:4e:96:ef:d6:04:5f:e7:26:f8:70:ae: 1f:cf:05:23:2c:dc:12:27:71:1d:68:7a:6d:c2:13: b9:9b:3c:3f:b4:cf:37:08:51:44:ad:91:c3:ef:44: e3:50:9a:03:e2:c7:73:7f:f3:32:80:e8:28:52:e1: d8:6f:29:a5:16:23:9a:8c:3e:de:69:93:ed:1a:9a: e2:43:bb:43:ae:fa:f0:0f:57:69:7f:0d:13:a0:6a: e9:1f:a1:0b:81:dc:ed:85:39:f5:8d:1b:e5:66:98: 6b:22:e5:ea:48:92:7d:95:ad:75:8f:de:8d:1b:c7: 4d:e9:6e:1b:08:9b:3e:84:e5:44:ac:26:95:d2:a8: 4a:39:0d:d9:11:32:ab:b8:5d:c2:28:fa:26:a1:46: 8c:da:d5:84:7a:9e:74:8b:78:10:fc:fb:23:5f:a5: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:09:25:95:D2:CF:0E:FD:5C:70:68:C4:2E:4E:94:9E:52:59:4C:68 X509v3 Authority Key Identifier: keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:98:52:6a:a1:e5:4d:90:99:c1:4f:5a:8c:a2:16:8e:48:19: 0d:04:cc:e3:37:39:a0:e5:2c:e6:d1:f5:9a:05:89:39:d0:ad: 15:6a:ea:33:0b:4f:ea:50:63:ee:f0:ce:33:37:39:f5:ce:ce: a7:86:df:5e:1b:d9:d9:8f:4b:41:81:16:37:f3:de:9d:ec:66: c5:c2:2a:12:ca:ed:d4:55:c5:be:7f:8f:d4:d9:b3:ce:52:ab: ed:4a:35:3f:f3:88:cc:a7:7a:e3:0e:6f:f7:db:7e:ad:0a:38: 03:0f:ab:4d:c4:57:f3:f3:66:c3:d6:23:f7:d1:b3:b7:7b:1d: 3b:0c:63:03:0f:04:8c:2e:79:08:ca:60:63:8f:18:18:cf:19: 45:ac:1d:c5:8f:3a:32:b1:7e:bc:e0:53:e7:0c:7e:1f:42:f5: 60:11:fd:49:93:31:27:c1:24:e7:cd:65:19:c9:de:03:42:2e: ed:4b:8a:61:28:99:48:b3:f5:e9:96:fc:32:23:39:a8:a1:90: ca:29:42:18:9e:f5:33:8f:51:17:3e:72:2c:09:a9:dc:85:d4: a1:68:c6:92:e7:e3:30:d6:38:2d:98:f1:be:29:5a:ea:4f:81: e4:c3:54:dd:23:c8:49:25:5d:bb:87:c8:f0:2a:4a:2c:0c:26: ad:ae:7a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqUe2UxpSz0q6DtAQNmJYwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjljZjFlYTY1ZjA4ZTI5MGEwNDE1Mjc3ZTY1ZWM5NWI3 ODBkNzcwHhcNMjUxMTE4MDEwMTQ1WhcNMjUxMTE5MDEwMTQ1WjAzMTEwLwYDVQQD EyhjYTA5MjU5NWQyY2YwZWZkNWM3MDY4YzQyZTRlOTQ5ZTUyNTk0YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hwtatqvLAr3iiUr8RLVEKKDfXKU 4Z2ENJNlu2JmdE2Kna9N6ShwAUqdkumTTt59PfOWGlFwTBNTz6Je3t5RICSH0d1i ZHrFERJr/MzC9rEG8shFWlh/VOiqSU5DTpbv1gRf5yb4cK4fzwUjLNwSJ3EdaHpt whO5mzw/tM83CFFErZHD70TjUJoD4sdzf/MygOgoUuHYbymlFiOajD7eaZPtGpri Q7tDrvrwD1dpfw0ToGrpH6ELgdzthTn1jRvlZphrIuXqSJJ9la11j96NG8dN6W4b CJs+hOVErCaV0qhKOQ3ZETKruF3CKPomoUaM2tWEep50i3gQ/PsjX6W8UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoJJZXSzw79XHBoxC5OlJ5SWUxoMB8GA1UdIwQY MBaAFItpzx6mXwjikKBBUnfmXslbeA13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJuUEhxWmZDT0tRb0VGU2QtWmV5VnQ0RFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2UzMDEtNjJmOC00OWYxLWEwZjct N2VkNmVmNzNmZjZkLzEvaTJuUEhxWmZDT0tRb0VGU2QtWmV5VnQ0RFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85M2UzMDEtNjJmOC00OWYxLWEwZjctN2VkNmVmNzNmZjZk LzEvaTJuUEhxWmZDT0tRb0VGU2QtWmV5VnQ0RFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5hSaqHl TZCZwU9ajKIWjkgZDQTM4zc5oOUs5tH1mgWJOdCtFWrqMwtP6lBj7vDOMzc59c7O p4bfXhvZ2Y9LQYEWN/PenexmxcIqEsrt1FXFvn+P1NmzzlKr7Uo1P/OIzKd64w5v 99t+rQo4Aw+rTcRX8/Nmw9Yj99Gzt3sdOwxjAw8EjC55CMpgY48YGM8ZRawdxY86 MrF+vOBT5wx+H0L1YBH9SZMxJ8Ek581lGcneA0Iu7UuKYSiZSLP16Zb8MiM5qKGQ yilCGJ71M49RFz5yLAmp3IXUoWjGkufjMNY4LZjxvila6k+B5MNU3SPISSVdu4fI 8CpKLAwmra56CQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:41:55 2025 by rpki-client