This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json) Hash identifier: cn6/j/1xIDP3G9gyaGC4imJ7HyXb7z0fs9BzxB3zgIE= Subject key identifier: 82:E2:9E:95:68:EB:25:92:EB:D1:5A:33:59:F0:9F:DD:75:5F:6D:65 Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72 Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072 Certificate serial: 019A5E69613429B6B3AB305E9A269A39FA0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft Manifest number: 0F9B Signing time: Fri 07 Nov 2025 13:02:35 +0000 Manifest this update: Fri 07 Nov 2025 13:02:35 +0000 Manifest next update: Sat 08 Nov 2025 13:02:35 +0000 Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: fOGfziIqavhofwKt5pq4JW9cxLd8U0gqB56yXKUtgJE=) 2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:69:61:34:29:b6:b3:ab:30:5e:9a:26:9a:39:fa:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072 Validity Not Before: Nov 7 13:02:35 2025 GMT Not After : Nov 8 13:02:35 2025 GMT Subject: CN=82e29e9568eb2592ebd15a3359f09fdd755f6d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:08:09:d0:b9:23:d1:cb:50:73:93:a0:d2: 7c:7d:a7:4a:a0:f1:26:5b:ad:b8:98:2b:99:8c:74: 86:00:65:be:c7:ea:90:ae:8d:ba:5b:c2:56:ba:4f: 3e:b1:b6:fa:80:e9:5c:da:6f:b7:49:e7:84:44:dd: c3:df:a1:f3:7f:03:0b:00:82:f0:8c:ab:48:a0:c6: 07:9b:a8:c9:97:51:c4:45:ab:dc:0d:d3:82:4b:65: 78:6a:67:65:95:55:9e:f0:21:1c:50:98:6d:5a:d5: 09:55:48:6c:62:65:68:98:f9:4d:19:d0:7c:b7:30: 36:50:92:19:39:0d:52:ea:f6:d5:0a:93:69:51:48: 6e:5c:fe:6d:e3:96:62:3d:88:f7:4b:61:b0:46:05: 6d:9b:c1:68:06:c8:b9:09:d8:94:02:08:88:64:a4: 6a:c1:fb:bd:ea:1c:26:5c:69:04:e9:1d:5b:f4:05: ab:f8:57:1c:98:6c:f5:83:b9:bd:0a:42:96:d3:2a: dd:bd:2c:ac:ad:64:82:c4:f9:9e:e2:c7:7a:f8:27: ea:b7:45:7b:c9:b7:69:2b:13:b1:72:ce:03:ff:16: a4:4b:20:a8:df:5c:f9:f8:fd:60:b2:88:9f:45:2b: b9:56:0c:8d:9e:4c:00:7e:53:18:f9:cd:95:7b:be: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E2:9E:95:68:EB:25:92:EB:D1:5A:33:59:F0:9F:DD:75:5F:6D:65 X509v3 Authority Key Identifier: keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:13:c2:86:3a:db:bf:b1:fa:49:86:40:b8:64:e9:d7:ca:a9: 79:09:d0:9a:42:ab:2e:bf:d7:73:69:1b:4a:e4:04:06:7b:6c: d7:1c:14:f6:3d:e6:2d:5d:f2:3b:97:bd:7a:0c:d7:a4:37:87: e3:21:6f:04:be:e4:e7:2c:f4:4f:c3:93:7f:8a:84:7f:e6:11: 60:06:12:11:7e:11:42:73:b8:75:a0:14:ba:e7:17:e9:62:d6: 3c:b3:71:4d:45:48:fd:95:73:0e:33:1c:e6:c7:10:77:b0:5e: 7b:be:0c:b8:e0:35:d6:f4:54:b3:be:94:a5:93:78:23:fa:e1: 5f:77:fe:64:3f:98:d2:98:b6:48:b5:62:26:6c:8d:2e:82:0a: e1:a0:5c:85:b5:00:9e:a8:af:fb:88:73:8a:c1:95:95:6a:68: e9:c7:58:c9:77:1e:fc:7b:0a:b5:d4:9e:48:67:b6:bc:0f:96: 19:4f:71:75:44:59:30:5d:fa:95:b7:01:05:2f:e3:21:79:ec: 59:2b:82:4a:c3:21:f6:fb:23:1b:59:9e:ba:bd:fb:0b:42:5c: 49:36:31:f2:ae:87:2f:6c:a7:e8:b0:06:10:ee:30:43:88:af: ad:f2:c3:73:ce:84:24:b6:e9:b1:2d:a7:86:db:05:22:30:65: 75:3e:b8:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpeaWE0KbazqzBemiaaOfoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZGYxZmU1MjAzNTRkZDNiYjNlOTI2NGE3NmNmNTNlYjA3 ZGIwNzIwHhcNMjUxMTA3MTMwMjM1WhcNMjUxMTA4MTMwMjM1WjAzMTEwLwYDVQQD Eyg4MmUyOWU5NTY4ZWIyNTkyZWJkMTVhMzM1OWYwOWZkZDc1NWY2ZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/QICdC5I9HLUHOToNJ8fadKoPEm W624mCuZjHSGAGW+x+qQro26W8JWuk8+sbb6gOlc2m+3SeeERN3D36HzfwMLAILw jKtIoMYHm6jJl1HERavcDdOCS2V4amdllVWe8CEcUJhtWtUJVUhsYmVomPlNGdB8 tzA2UJIZOQ1S6vbVCpNpUUhuXP5t45ZiPYj3S2GwRgVtm8FoBsi5CdiUAgiIZKRq wfu96hwmXGkE6R1b9AWr+FccmGz1g7m9CkKW0yrdvSysrWSCxPme4sd6+Cfqt0V7 ybdpKxOxcs4D/xakSyCo31z5+P1gsoifRSu5VgyNnkwAflMY+c2Ve77iaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILinpVo6yWS69FaM1nwn911X21lMB8GA1UdIwQY MBaAFIHfH+UgNU3Tuz6SZKds9T6wfbByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2Q4ZjVTQTFUZE83UHBKa3AyejFQckI5c0hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hZDk3NWMtMjAxMS00YjljLWFkM2Ut NTNmMDdiMWY2MjFlLzEvZ2Q4ZjVTQTFUZE83UHBKa3AyejFQckI5c0hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hZDk3NWMtMjAxMS00YjljLWFkM2UtNTNmMDdiMWY2MjFl LzEvZ2Q4ZjVTQTFUZE83UHBKa3AyejFQckI5c0hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxPChjrb v7H6SYZAuGTp18qpeQnQmkKrLr/Xc2kbSuQEBnts1xwU9j3mLV3yO5e9egzXpDeH 4yFvBL7k5yz0T8OTf4qEf+YRYAYSEX4RQnO4daAUuucX6WLWPLNxTUVI/ZVzDjMc 5scQd7Bee74MuOA11vRUs76UpZN4I/rhX3f+ZD+Y0pi2SLViJmyNLoIK4aBchbUA nqiv+4hzisGVlWpo6cdYyXce/HsKtdSeSGe2vA+WGU9xdURZMF36lbcBBS/jIXns WSuCSsMh9vsjG1meur37C0JcSTYx8q6HL2yn6LAGEO4wQ4ivrfLDc86EJLbpsS2n htsFIjBldT64oA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:38:52 2025 by rpki-client