This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft File: PuzUyqmjpXcV49XWa8zXGFr-QNo.mft (raw, json) Hash identifier: Zl8PgPRePExFKswztabG54RH7f6xL1bFmTserN47d/M= Subject key identifier: E8:25:5A:E7:30:8E:80:84:96:3A:E2:BA:84:CA:F5:96:6C:5A:C6:B3 Authority key identifier: 3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA Certificate issuer: /CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da Certificate serial: 019A0F397877607D17566D55591A290F1E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft Manifest number: 16F5 Signing time: Thu 23 Oct 2025 04:00:15 +0000 Manifest this update: Thu 23 Oct 2025 04:00:15 +0000 Manifest next update: Fri 24 Oct 2025 04:00:15 +0000 Files and hashes: 1: GTSqn8ohuN-MHhN18mr9Itlt7ao.roa (hash: lFLyLMK3dWhD600oT7fgmI5ccuGsQ2tgFOCCKMH2dCM=) 2: PuzUyqmjpXcV49XWa8zXGFr-QNo.crl (hash: 0YwVGUCah1HQLZolXvNH8n9uydyWIrbNezbq46odjvU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0f:39:78:77:60:7d:17:56:6d:55:59:1a:29:0f:1e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da Validity Not Before: Oct 23 04:00:15 2025 GMT Not After : Oct 24 04:00:15 2025 GMT Subject: CN=e8255ae7308e8084963ae2ba84caf5966c5ac6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:fb:48:51:19:d8:5e:20:08:19:23:f6:2f: 69:58:5d:2c:17:c1:59:9e:df:19:a6:aa:59:24:46: 9d:b6:4c:39:e6:87:22:41:df:9d:c3:cc:da:75:83: c3:38:ce:12:f7:a6:fc:62:19:0a:80:8a:e1:ac:ec: b1:ce:36:2f:0b:32:ef:44:a4:1b:9b:ea:cc:f9:d3: b6:87:d3:79:f7:c1:5f:be:68:bf:75:09:3e:8e:4b: 7b:0b:5c:92:41:24:2d:43:eb:c5:91:81:95:d1:5b: c6:bd:60:c5:33:17:88:bf:ff:da:af:44:32:85:33: 0b:c1:21:ec:9d:c4:18:9f:dc:52:72:9b:86:48:0a: 9e:f0:a8:a5:99:a0:b9:56:74:28:9a:46:f0:43:0b: af:76:1d:90:14:32:c2:70:69:e2:e9:1f:cf:ad:ad: 85:65:95:4c:e0:5f:39:31:db:84:f7:a5:eb:9b:cb: 24:23:6b:61:c0:d1:6a:c9:0f:fa:1d:94:e8:a0:99: f4:eb:fe:aa:72:e2:89:02:73:01:07:f6:f9:69:67: 9a:22:c7:47:11:d6:74:b2:6a:84:14:db:22:91:17: 31:99:f8:14:b4:c5:6d:50:30:ef:ae:4f:1b:25:ed: 5b:0e:84:51:62:c2:a8:e0:a9:40:be:ea:04:ac:9c: ff:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:5A:E7:30:8E:80:84:96:3A:E2:BA:84:CA:F5:96:6C:5A:C6:B3 X509v3 Authority Key Identifier: keyid:3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c4:50:e9:dc:3d:1c:62:42:7c:a8:f9:bc:97:3a:cf:2b:e8: fa:8e:64:08:5d:06:e5:75:73:4d:67:26:1b:bb:1e:14:fd:0b: 20:f4:75:ac:12:4c:a2:ae:f2:49:e6:9d:d2:2d:38:f3:2d:63: 4c:84:b3:a1:7f:b9:bb:e7:b0:1c:70:1c:86:3e:a6:15:6d:31: 47:0a:42:20:8b:7b:ca:af:37:9f:d8:81:76:d3:fd:2e:94:fe: 99:0c:c4:58:d3:41:c3:6f:cb:4c:4d:fd:bf:88:41:48:a4:db: 2c:30:3f:e2:89:e2:8a:d9:d9:49:71:42:95:9c:02:f1:39:b2: 00:76:88:f4:a0:76:0a:8a:a5:25:56:3c:36:a9:04:75:21:7b: 5a:cc:aa:91:b4:c4:d1:72:43:65:ea:12:e7:eb:88:60:49:b6: f6:d8:a6:db:93:5c:67:03:74:50:b1:bb:20:e8:d3:82:53:03: 0b:2e:70:2d:03:83:9f:a5:7c:75:a9:b8:3c:27:ce:ee:55:62: b5:9e:44:23:c2:8e:b3:24:e2:00:53:52:0c:44:d7:a5:85:b3: 01:1e:48:a8:b8:1a:7a:36:f5:e6:99:24:e7:4e:ea:ce:e3:41: db:da:c2:6f:da:95:b5:8c:d6:4b:27:44:ba:da:ad:37:78:e1: b6:a4:d2:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoPOXh3YH0XVm1VWRopDx6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZWNkNGNhYTlhM2E1NzcxNWUzZDVkNjZiY2NkNzE4NWFm ZTQwZGEwHhcNMjUxMDIzMDQwMDE1WhcNMjUxMDI0MDQwMDE1WjAzMTEwLwYDVQQD EyhlODI1NWFlNzMwOGU4MDg0OTYzYWUyYmE4NGNhZjU5NjZjNWFjNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mf7SFEZ2F4gCBkj9i9pWF0sF8FZ nt8ZpqpZJEadtkw55ociQd+dw8zadYPDOM4S96b8YhkKgIrhrOyxzjYvCzLvRKQb m+rM+dO2h9N598Ffvmi/dQk+jkt7C1ySQSQtQ+vFkYGV0VvGvWDFMxeIv//ar0Qy hTMLwSHsncQYn9xScpuGSAqe8KilmaC5VnQomkbwQwuvdh2QFDLCcGni6R/Pra2F ZZVM4F85MduE96Xrm8skI2thwNFqyQ/6HZTooJn06/6qcuKJAnMBB/b5aWeaIsdH EdZ0smqEFNsikRcxmfgUtMVtUDDvrk8bJe1bDoRRYsKo4KlAvuoErJz/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOglWucwjoCEljriuoTK9ZZsWsazMB8GA1UdIwQY MBaAFD7s1Mqpo6V3FePV1mvM1xha/kDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHV6VXlxbWpwWGNWNDlYV2E4elhHRnItUU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNjQ1YjItYWYyZS00YzBkLTk4MTIt NjllZWM1YjRiNTA1LzEvUHV6VXlxbWpwWGNWNDlYV2E4elhHRnItUU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zNjQ1YjItYWYyZS00YzBkLTk4MTItNjllZWM1YjRiNTA1 LzEvUHV6VXlxbWpwWGNWNDlYV2E4elhHRnItUU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsRQ6dw9 HGJCfKj5vJc6zyvo+o5kCF0G5XVzTWcmG7seFP0LIPR1rBJMoq7ySead0i048y1j TISzoX+5u+ewHHAchj6mFW0xRwpCIIt7yq83n9iBdtP9LpT+mQzEWNNBw2/LTE39 v4hBSKTbLDA/4oniitnZSXFClZwC8TmyAHaI9KB2CoqlJVY8NqkEdSF7WsyqkbTE 0XJDZeoS5+uIYEm29tim25NcZwN0ULG7IOjTglMDCy5wLQODn6V8dam4PCfO7lVi tZ5EI8KOsyTiAFNSDETXpYWzAR5IqLgaejb15pkk507qzuNB29rCb9qVtYzWSydE utqtN3jhtqTSRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:21:02 2025 by rpki-client