This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json) Hash identifier: vMPgMFrzxd4b/6i+6o0CnrYLgRUd/OYxQnXqIECBwT4= Subject key identifier: C7:E8:21:54:E3:0D:5B:E4:32:8D:F6:9C:7E:FD:CF:C9:C5:44:F3:FC Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb Certificate serial: 0198CC4AD275AE8FCD108ACF6B71C0B4692E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft Manifest number: 021E Signing time: Thu 21 Aug 2025 11:01:52 +0000 Manifest this update: Thu 21 Aug 2025 11:01:52 +0000 Manifest next update: Fri 22 Aug 2025 11:01:52 +0000 Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: nln7xX6cvzcMmnr4+yLT2khc364c8fbK21QUeMglmBA=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:cc:4a:d2:75:ae:8f:cd:10:8a:cf:6b:71:c0:b4:69:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb Validity Not Before: Aug 21 11:01:52 2025 GMT Not After : Aug 22 11:01:52 2025 GMT Subject: CN=c7e82154e30d5be4328df69c7efdcfc9c544f3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:f6:5e:e6:57:a6:de:b5:43:2d:c0:9a:b6: ff:51:fb:ee:af:67:f1:06:23:78:ad:42:c1:84:b5: 18:25:46:61:2d:05:d2:cf:76:f7:3c:ff:3f:e0:02: 8c:bb:96:f2:cb:6f:a9:5f:3f:3e:eb:ce:f4:2a:8e: e0:48:c2:fb:6f:5c:26:7a:1b:1d:14:d3:96:67:cc: a2:76:ef:8e:7d:1e:71:e3:34:96:79:7a:3e:80:94: d4:c7:25:fc:06:3a:0b:d1:72:bf:a6:4b:ef:c8:bd: 38:de:18:63:63:06:5d:ce:ab:69:8f:82:f0:15:68: 54:7d:60:a7:a0:91:e4:17:c6:2a:fc:8b:e2:5b:a6: d9:12:68:6b:f1:9c:b6:49:a0:34:08:a0:a2:32:c8: a0:da:4c:c1:20:7a:13:84:5b:45:58:89:63:e1:12: 63:ee:73:d7:c8:8f:6c:ad:31:a1:71:72:a7:e3:ab: da:e1:e5:7b:9f:d3:0d:6a:63:6d:1c:45:a0:a1:2c: 44:42:61:a9:5e:f9:a0:2e:57:07:aa:fa:e9:fd:49: fe:26:bb:4e:40:11:aa:57:c6:ca:8e:0c:99:8e:34: ed:58:8f:59:b0:2d:7a:34:ce:2f:ca:48:d5:89:6e: 55:21:0e:ee:f0:d9:87:34:6b:53:a6:dd:93:97:bd: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:21:54:E3:0D:5B:E4:32:8D:F6:9C:7E:FD:CF:C9:C5:44:F3:FC X509v3 Authority Key Identifier: keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:42:c7:79:d6:10:ac:43:c1:80:9c:8e:21:9a:78:26:ac:66: 77:c1:6b:c1:68:42:d3:a0:a4:ad:5f:9c:a9:24:6d:ed:5a:29: fa:a2:43:0e:c8:40:c3:2b:0c:91:84:e8:87:ee:aa:e5:2f:ea: ca:96:b2:17:55:bb:85:1e:cb:e4:e1:07:fe:09:89:a9:cd:ad: f2:ac:4f:9f:df:d9:ef:8b:c7:aa:6f:d9:93:e8:14:68:f2:6a: 6f:09:a8:7f:11:b8:cd:dc:57:1f:0d:47:e7:6d:fc:9c:da:43: 7f:31:6d:f4:df:f1:97:d2:cf:ba:c8:bb:f7:c5:6f:a8:28:ab: 6a:77:4d:2a:ed:79:43:53:51:6d:49:2f:2f:39:f2:39:e2:81: cb:98:65:85:fd:2b:4c:1e:1d:8d:76:a7:76:e5:60:ca:3f:d9: 29:e7:5e:cd:7f:43:e0:9d:52:84:26:b1:c3:52:5a:99:54:8c: 6d:a2:79:48:b2:9b:83:cb:cd:99:a9:3c:0c:43:6e:36:10:b4: 6a:ab:c3:1a:55:3d:8b:5e:01:6d:fe:2d:47:2e:e7:eb:5b:99: 62:8d:e3:17:e2:70:32:9b:13:38:b2:c6:8c:df:38:01:e2:cb: 72:01:a4:3c:ef:61:8c:27:70:24:4a:9f:99:82:96:e6:57:83: 3d:74:f2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjMStJ1ro/NEIrPa3HAtGkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYzMwMWY2YmE2ZGIxY2MyN2I0NTRiY2IzMzIzOWFlMWQ2 NDFhYmIwHhcNMjUwODIxMTEwMTUyWhcNMjUwODIyMTEwMTUyWjAzMTEwLwYDVQQD EyhjN2U4MjE1NGUzMGQ1YmU0MzI4ZGY2OWM3ZWZkY2ZjOWM1NDRmM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndn2XuZXpt61Qy3Amrb/Ufvur2fx BiN4rULBhLUYJUZhLQXSz3b3PP8/4AKMu5byy2+pXz8+6870Ko7gSML7b1wmehsd FNOWZ8yidu+OfR5x4zSWeXo+gJTUxyX8BjoL0XK/pkvvyL043hhjYwZdzqtpj4Lw FWhUfWCnoJHkF8Yq/IviW6bZEmhr8Zy2SaA0CKCiMsig2kzBIHoThFtFWIlj4RJj 7nPXyI9srTGhcXKn46va4eV7n9MNamNtHEWgoSxEQmGpXvmgLlcHqvrp/Un+JrtO QBGqV8bKjgyZjjTtWI9ZsC16NM4vykjViW5VIQ7u8NmHNGtTpt2Tl73TeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfoIVTjDVvkMo32nH79z8nFRPP8MB8GA1UdIwQY MBaAFHrDAfa6bbHMJ7RUvLMyOa4dZBq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXNNQjlycHRzY3dudEZTOHN6STVyaDFrR3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84Nzg3NmQtZDc2Ni00YTZjLTlmMDUt YTU1ZWY3ZTMzODhlLzEvZXNNQjlycHRzY3dudEZTOHN6STVyaDFrR3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84Nzg3NmQtZDc2Ni00YTZjLTlmMDUtYTU1ZWY3ZTMzODhl LzEvZXNNQjlycHRzY3dudEZTOHN6STVyaDFrR3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWELHedYQ rEPBgJyOIZp4Jqxmd8FrwWhC06CkrV+cqSRt7Vop+qJDDshAwysMkYToh+6q5S/q ypayF1W7hR7L5OEH/gmJqc2t8qxPn9/Z74vHqm/Zk+gUaPJqbwmofxG4zdxXHw1H 5238nNpDfzFt9N/xl9LPusi798VvqCirandNKu15Q1NRbUkvLznyOeKBy5hlhf0r TB4djXanduVgyj/ZKedezX9D4J1ShCaxw1JamVSMbaJ5SLKbg8vNmak8DENuNhC0 aqvDGlU9i14Bbf4tRy7n61uZYo3jF+JwMpsTOLLGjN84AeLLcgGkPO9hjCdwJEqf mYKW5leDPXTy1g== -----END CERTIFICATE-----Generated at Tue Dec 16 14:19:02 2025 by rpki-client