This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft File: a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json) Hash identifier: kuuMA/yMtk6Sdlxx/TFvWgjLAkUgf0yMHUXdi5EZTg8= Subject key identifier: DD:5F:87:60:55:39:E4:DA:6D:8D:31:7B:6B:BB:24:F3:27:15:4B:3B Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F Certificate issuer: /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f Certificate serial: 01979A4CDF37CD336E3C681D31F04624F9D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft Manifest number: 0F1E Signing time: Mon 23 Jun 2025 01:00:18 +0000 Manifest this update: Mon 23 Jun 2025 01:00:18 +0000 Manifest next update: Tue 24 Jun 2025 01:00:18 +0000 Files and hashes: 1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=) 2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: GcvW4rpkiyX6qJQ2/iqj9GR6uuqlOb5e0TLbUZ7Ljpg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:9a:4c:df:37:cd:33:6e:3c:68:1d:31:f0:46:24:f9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f Validity Not Before: Jun 23 01:00:18 2025 GMT Not After : Jun 24 01:00:18 2025 GMT Subject: CN=dd5f87605539e4da6d8d317b6bbb24f327154b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:bf:08:d8:40:62:b7:36:67:23:3d:4b:86: 7f:99:91:10:6b:0c:c7:e2:3c:98:64:cd:c3:9b:9e: d7:42:7c:e5:77:76:21:c4:51:18:29:b2:9a:5e:38: ca:04:1b:dc:f9:d5:c0:b3:d7:be:9f:69:3c:12:27: d8:c4:7a:fe:6d:57:17:f2:af:eb:5a:40:1a:e9:7a: 52:98:1d:b2:9b:44:0d:6e:d4:f8:ce:8f:10:64:03: f2:44:d5:27:77:18:3d:e9:52:cc:5e:ed:03:b0:f3: a3:a8:93:dc:21:c4:6a:f0:fc:bd:72:98:bc:ca:3f: 02:e5:84:2b:6b:0f:28:18:d8:ae:90:69:9e:14:c7: 2c:85:38:f3:33:63:a4:3c:83:ef:31:5d:3a:42:c4: f4:10:b3:04:f9:6a:39:9d:c8:e9:98:ce:43:02:27: e6:31:6f:93:fc:5b:0d:6b:80:e6:0e:6f:f2:9a:19: d4:e5:a6:d3:d8:c0:d5:22:c2:9a:72:2c:52:66:c7: e2:29:e2:2e:4d:c5:d3:00:83:f7:01:bc:7f:e4:e0: ef:5d:ec:06:4b:17:c8:fd:76:6d:a5:2d:48:fc:00: 78:29:01:b1:33:fe:82:9a:e5:fe:ef:2d:0b:74:8a: f6:51:89:fc:cb:d6:6f:3a:f8:c3:d6:f5:a2:0e:41: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5F:87:60:55:39:E4:DA:6D:8D:31:7B:6B:BB:24:F3:27:15:4B:3B X509v3 Authority Key Identifier: keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:fb:da:08:31:29:43:da:1d:93:57:31:78:d3:9d:e4:7c:3a: 49:9a:ee:9e:f9:27:ff:0f:15:b4:fe:9e:85:91:c1:c6:8f:64: 7e:03:65:66:cb:94:ab:12:fa:5c:bd:9e:5c:f6:68:dc:01:cc: 3a:3a:8f:3e:81:c8:ad:39:1c:1b:0f:69:89:22:4f:fe:ac:5e: 36:72:ec:cc:bc:e8:74:74:01:bc:46:bc:60:66:51:51:52:df: 16:25:12:7a:15:dc:ad:b7:f1:67:29:cf:c9:5d:95:1e:e1:aa: ee:36:52:5c:8b:38:65:75:78:33:c1:30:db:3a:3c:1c:30:e8: 26:4b:03:a6:c5:ab:cc:4e:57:94:ee:ce:fc:cb:6e:44:a1:f1: 57:9b:a7:90:e6:66:3f:5a:d2:c2:f1:ee:a3:86:59:f9:86:a9: d9:e2:9b:58:a5:ff:d8:df:39:95:2b:99:02:92:eb:41:0e:41: 0e:09:3c:3b:e6:20:63:bb:b5:af:e9:65:4e:a9:75:79:8d:88: 71:a2:43:18:e0:ce:50:79:b2:d8:19:51:c1:98:6d:aa:8f:25: 53:f0:0e:6d:aa:6d:b9:38:2a:ca:3b:cd:7d:43:ca:6f:90:d7: e2:4c:c6:89:e4:bf:4e:8c:35:2d:e9:8e:e4:7c:e6:b2:48:66: 30:5c:f4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeaTN83zTNuPGgdMfBGJPnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2ZhMDVlNmI0ZDhhNTEyOTQ0MDc1MDRkOTY0MWFkM2Uw MjA0M2YwHhcNMjUwNjIzMDEwMDE4WhcNMjUwNjI0MDEwMDE4WjAzMTEwLwYDVQQD EyhkZDVmODc2MDU1MzllNGRhNmQ4ZDMxN2I2YmJiMjRmMzI3MTU0YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHu/CNhAYrc2ZyM9S4Z/mZEQawzH 4jyYZM3Dm57XQnzld3YhxFEYKbKaXjjKBBvc+dXAs9e+n2k8EifYxHr+bVcX8q/r WkAa6XpSmB2ym0QNbtT4zo8QZAPyRNUndxg96VLMXu0DsPOjqJPcIcRq8Py9cpi8 yj8C5YQraw8oGNiukGmeFMcshTjzM2OkPIPvMV06QsT0ELME+Wo5ncjpmM5DAifm MW+T/FsNa4DmDm/ymhnU5abT2MDVIsKacixSZsfiKeIuTcXTAIP3Abx/5ODvXewG SxfI/XZtpS1I/AB4KQGxM/6CmuX+7y0LdIr2UYn8y9ZvOvjD1vWiDkFbqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1fh2BVOeTabY0xe2u7JPMnFUs7MB8GA1UdIwQY MBaAFGt/oF5rTYpRKUQHUE2WQa0+AgQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgt OGIxY2ZiNjgzNjZlLzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgtOGIxY2ZiNjgzNjZl LzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3PvaCDEp Q9odk1cxeNOd5Hw6SZrunvkn/w8VtP6ehZHBxo9kfgNlZsuUqxL6XL2eXPZo3AHM OjqPPoHIrTkcGw9piSJP/qxeNnLszLzodHQBvEa8YGZRUVLfFiUSehXcrbfxZynP yV2VHuGq7jZSXIs4ZXV4M8Ew2zo8HDDoJksDpsWrzE5XlO7O/MtuRKHxV5unkOZm P1rSwvHuo4ZZ+Yap2eKbWKX/2N85lSuZApLrQQ5BDgk8O+YgY7u1r+llTql1eY2I caJDGODOUHmy2BlRwZhtqo8lU/AObaptuTgqyjvNfUPKb5DX4kzGieS/Tow1LemO 5HzmskhmMFz0pw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:45:00 2025 by rpki-client