This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json) Hash identifier: lVKANq4pEi9rTd2maJ096ISgtSivf4HgAGpSLCp+r+0= Subject key identifier: 7F:89:01:02:F0:94:67:DB:38:19:B1:57:57:EE:35:CD:3C:99:8E:CF Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19 Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919 Certificate serial: 019ADEBD70B62140D575EE188C95347CDEFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft Manifest number: 1758 Signing time: Tue 02 Dec 2025 11:05:48 +0000 Manifest this update: Tue 02 Dec 2025 11:05:48 +0000 Manifest next update: Wed 03 Dec 2025 11:05:48 +0000 Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: HUVrlqsRoChpA55/E68uTtymK8lLwoO9u0086o93+v8=) 2: l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa (hash: r01Jvma9tByEXSDH9Xqkw4ab0NExhxA4UlIuCcU9e1A=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:bd:70:b6:21:40:d5:75:ee:18:8c:95:34:7c:de:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919 Validity Not Before: Dec 2 11:05:48 2025 GMT Not After : Dec 3 11:05:48 2025 GMT Subject: CN=7f890102f09467db3819b15757ee35cd3c998ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:bb:f4:b3:40:57:e6:39:de:ee:b7:fb:96: 40:5d:04:10:e8:09:61:d5:89:16:b4:8b:25:b7:45: cc:c3:d7:23:e9:a2:f6:c8:31:16:d8:7f:f2:55:98: 84:b6:ed:e2:9f:e2:3b:b6:7d:cc:8c:8c:67:1f:7c: 80:c7:ea:6a:72:c4:46:48:29:a9:78:0b:cc:79:e4: 76:6e:f3:ee:b7:d2:4c:1a:a2:bc:a7:9c:10:6e:4a: 65:18:b0:2b:4f:17:34:50:7c:5b:3a:59:b5:af:20: 36:8a:f8:87:da:57:ce:ae:37:db:f8:6b:b2:0e:23: d2:ac:62:36:34:ff:6c:7b:75:03:7a:e3:a0:12:0e: 92:f3:57:81:df:72:0a:fd:6d:fe:73:c4:39:55:d5: 41:50:65:f1:0c:78:d8:48:ca:88:a0:fb:b9:66:b1: 22:c0:71:3f:e4:22:88:6e:de:5a:4a:2e:68:45:85: 1e:f0:d3:36:12:e9:f0:3c:d6:7b:03:39:1c:6d:1c: d8:2b:65:5d:89:5c:50:db:ca:fe:27:a3:a8:6a:0f: d2:38:7b:89:1b:23:d4:81:07:d3:3f:81:37:42:62: 2b:4e:15:a9:c6:b6:c0:42:1f:e8:4e:7f:ba:2e:09: 2e:33:af:66:ff:b9:5d:ab:4f:f9:0b:db:01:40:8b: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:89:01:02:F0:94:67:DB:38:19:B1:57:57:EE:35:CD:3C:99:8E:CF X509v3 Authority Key Identifier: keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b6:6f:c7:c9:75:23:7c:1b:6e:b3:56:ef:29:13:9e:a1:e8: 2a:eb:88:ca:fb:06:da:08:2e:bd:89:7c:61:db:2c:0b:5a:22: aa:78:ad:a3:db:b8:ea:cc:42:96:3c:f4:73:60:33:57:29:da: ea:c5:71:68:91:ce:67:a4:7b:ce:b4:b6:aa:9d:4c:1e:ef:95: 39:ab:d9:11:de:35:69:65:48:fe:53:96:c8:34:10:34:5c:7f: df:59:d1:b9:8f:34:9f:76:4a:f8:a7:ad:e8:fa:50:9b:b9:81: aa:f2:b3:48:ac:2f:db:55:c0:d5:6e:56:11:0f:92:8f:9b:be: f9:81:d4:2d:d8:73:70:e2:44:4b:26:46:26:98:69:e2:68:12: 51:97:43:30:5f:f5:d2:be:c2:3e:43:ff:53:cf:48:07:bf:e8: 14:91:33:fa:70:c5:2a:ed:37:06:d0:11:68:99:f4:09:17:23: 74:9b:c2:04:30:dd:42:0c:2d:45:07:da:68:99:6d:f7:f4:f0: 5f:f5:66:63:9e:be:d5:9d:a8:b5:bc:78:e4:91:12:98:62:33: 6d:ba:3f:bb:dd:44:1e:3d:7a:79:4b:1a:4f:cb:99:88:1c:28: 10:43:64:0c:9a:98:85:d0:c9:1b:13:ea:31:29:64:35:8a:0a: c0:94:9e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrevXC2IUDVde4YjJU0fN77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTg5NjIxZDJmYTg3MjE2NmU2YTA1ZWU0N2E3ZDc1NjI0 M2U5MTkwHhcNMjUxMjAyMTEwNTQ4WhcNMjUxMjAzMTEwNTQ4WjAzMTEwLwYDVQQD Eyg3Zjg5MDEwMmYwOTQ2N2RiMzgxOWIxNTc1N2VlMzVjZDNjOTk4ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37y79LNAV+Y53u63+5ZAXQQQ6Alh 1YkWtIslt0XMw9cj6aL2yDEW2H/yVZiEtu3in+I7tn3MjIxnH3yAx+pqcsRGSCmp eAvMeeR2bvPut9JMGqK8p5wQbkplGLArTxc0UHxbOlm1ryA2iviH2lfOrjfb+Guy DiPSrGI2NP9se3UDeuOgEg6S81eB33IK/W3+c8Q5VdVBUGXxDHjYSMqIoPu5ZrEi wHE/5CKIbt5aSi5oRYUe8NM2EunwPNZ7AzkcbRzYK2VdiVxQ28r+J6Ooag/SOHuJ GyPUgQfTP4E3QmIrThWpxrbAQh/oTn+6LgkuM69m/7ldq0/5C9sBQIsB6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+JAQLwlGfbOBmxV1fuNc08mY7PMB8GA1UdIwQY MBaAFN0YliHS+ochZuagXuR6fXViQ+kZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JpV0lkTDZoeUZtNXFCZTVIcDlkV0pENlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjMyN2YtODAzZS00N2ZjLThlMjUt NDQzMTFmOWNiODU2LzEvM1JpV0lkTDZoeUZtNXFCZTVIcDlkV0pENlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kNjMyN2YtODAzZS00N2ZjLThlMjUtNDQzMTFmOWNiODU2 LzEvM1JpV0lkTDZoeUZtNXFCZTVIcDlkV0pENlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLZvx8l1 I3wbbrNW7ykTnqHoKuuIyvsG2gguvYl8YdssC1oiqnito9u46sxCljz0c2AzVyna 6sVxaJHOZ6R7zrS2qp1MHu+VOavZEd41aWVI/lOWyDQQNFx/31nRuY80n3ZK+Ket 6PpQm7mBqvKzSKwv21XA1W5WEQ+Sj5u++YHULdhzcOJESyZGJphp4mgSUZdDMF/1 0r7CPkP/U89IB7/oFJEz+nDFKu03BtARaJn0CRcjdJvCBDDdQgwtRQfaaJlt9/Tw X/VmY56+1Z2otbx45JESmGIzbbo/u91EHj16eUsaT8uZiBwoEENkDJqYhdDJGxPq MSlkNYoKwJSenQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:11 2025 by rpki-client