This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft File: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json) Hash identifier: YyEQO3tRJUHUxMLy/bbY3DYEX/12OXH7OzkbLP1+TOQ= Subject key identifier: 92:06:47:D8:36:C3:C2:12:D0:B7:5C:77:F9:51:20:26:A5:4A:EC:56 Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83 Certificate issuer: /CN=9e193d6f48067ffb8732cc432697542313dc6783 Certificate serial: 019AE3A80DB14A16E298235B9055EBC9E79B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft Manifest number: 03BE Signing time: Wed 03 Dec 2025 10:00:32 +0000 Manifest this update: Wed 03 Dec 2025 10:00:32 +0000 Manifest next update: Thu 04 Dec 2025 10:00:32 +0000 Files and hashes: 1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: sU/wi0jjZn6PpXP3CGdPK9f81Ift6akQ9ASdWpMMAzs=) 2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a8:0d:b1:4a:16:e2:98:23:5b:90:55:eb:c9:e7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783 Validity Not Before: Dec 3 10:00:32 2025 GMT Not After : Dec 4 10:00:32 2025 GMT Subject: CN=920647d836c3c212d0b75c77f9512026a54aec56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:fa:a4:2c:de:23:7b:9a:da:17:9a:f4:f8: 7c:c3:8e:ed:11:08:a1:cf:98:4a:df:78:a9:db:70: 86:91:fc:16:65:88:d2:bc:e7:fd:8b:e6:a8:ae:e1: 22:24:19:65:a2:ae:7f:9c:4a:f3:75:81:0d:5c:0e: b7:7f:0c:77:3e:77:86:d4:a1:8f:09:90:fc:3c:ea: 5a:eb:88:a6:ba:49:53:c9:d4:5b:25:25:e0:26:9e: d7:9a:7d:5c:0d:37:86:1e:37:bc:69:8f:32:9e:ab: e4:43:9d:3f:4d:94:15:42:29:ff:1d:63:bf:e5:e5: 92:f2:fe:91:c0:ce:ca:f6:da:31:6b:d8:cd:c2:0f: a1:f3:7c:a1:bd:ce:df:ca:ac:91:e1:0d:f0:e5:20: f5:d9:38:ff:5e:3e:c8:19:59:cf:88:93:11:fa:8c: 51:d6:82:9d:58:db:c7:82:5c:31:24:71:1c:4d:64: 9d:29:1e:63:2c:69:3f:d7:84:16:91:32:1c:56:ca: 64:89:73:9f:19:48:bc:bc:9f:1b:10:24:64:4f:94: 02:d7:dd:b6:cd:24:9d:9a:c9:5e:91:eb:99:fc:bd: 8c:1e:84:d8:a3:d9:04:b0:ef:3f:a5:12:36:aa:48: ff:7b:8f:0e:95:69:f7:b5:69:32:e3:a5:24:61:30: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:06:47:D8:36:C3:C2:12:D0:B7:5C:77:F9:51:20:26:A5:4A:EC:56 X509v3 Authority Key Identifier: keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:55:3f:96:d3:ba:65:2d:8c:aa:e6:53:4a:71:39:d9:ea:85: a2:41:a0:3f:0b:7c:97:9a:74:ee:d3:18:01:c1:29:73:aa:14: d3:e2:45:aa:cc:46:15:f5:0d:fc:b5:ed:aa:d0:59:de:c9:b9: 49:93:07:b0:1f:78:15:f0:e8:95:09:80:bc:4e:c6:07:1c:c4: 0b:57:3e:3e:18:92:3b:83:81:ec:64:48:75:97:7f:c8:79:d7: f2:39:0f:34:a2:52:4e:fd:22:cc:4b:ac:23:c1:4d:96:b9:a2: 3a:aa:44:1d:99:57:3f:b9:c4:bd:eb:11:ed:e6:4d:65:1e:ba: 76:c1:4b:bd:1e:04:96:bc:a2:62:d7:15:39:6d:66:06:e9:87: 08:f3:af:21:c4:ab:21:6b:94:ae:22:63:45:ff:7d:bd:0d:ca: fe:80:d8:3a:c5:e7:0e:40:9f:0f:34:50:a2:e2:95:6e:f7:00: 37:ba:cb:80:f2:0d:05:2c:61:72:b8:1a:7b:ff:ae:b5:4a:b6: 1e:ab:58:ce:8f:0b:fc:d9:52:2e:b2:1d:be:f3:96:03:7f:ca: 92:e6:ea:72:6f:36:14:35:77:98:97:6e:48:7b:6e:55:48:1c: 82:75:59:49:52:38:98:ab:30:4d:ef:e3:ab:38:37:b5:f5:18: d7:9c:c9:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjqA2xShbimCNbkFXryeebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMTkzZDZmNDgwNjdmZmI4NzMyY2M0MzI2OTc1NDIzMTNk YzY3ODMwHhcNMjUxMjAzMTAwMDMyWhcNMjUxMjA0MTAwMDMyWjAzMTEwLwYDVQQD Eyg5MjA2NDdkODM2YzNjMjEyZDBiNzVjNzdmOTUxMjAyNmE1NGFlYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtL6pCzeI3ua2hea9Ph8w47tEQih z5hK33ip23CGkfwWZYjSvOf9i+aoruEiJBlloq5/nErzdYENXA63fwx3PneG1KGP CZD8POpa64imuklTydRbJSXgJp7Xmn1cDTeGHje8aY8ynqvkQ50/TZQVQin/HWO/ 5eWS8v6RwM7K9toxa9jNwg+h83yhvc7fyqyR4Q3w5SD12Tj/Xj7IGVnPiJMR+oxR 1oKdWNvHglwxJHEcTWSdKR5jLGk/14QWkTIcVspkiXOfGUi8vJ8bECRkT5QC1922 zSSdmslekeuZ/L2MHoTYo9kEsO8/pRI2qkj/e48OlWn3tWky46UkYTAcxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIGR9g2w8IS0Ldcd/lRICalSuxWMB8GA1UdIwQY MBaAFJ4ZPW9IBn/7hzLMQyaXVCMT3GeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhrOWIwZ0dmX3VITXN4REpwZFVJeFBjWjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81Nzk1MDctMGYxYy00NDgyLTgxZjgt MjNiZWNhYmVlNDg1LzEvbmhrOWIwZ0dmX3VITXN4REpwZFVJeFBjWjRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81Nzk1MDctMGYxYy00NDgyLTgxZjgtMjNiZWNhYmVlNDg1 LzEvbmhrOWIwZ0dmX3VITXN4REpwZFVJeFBjWjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1U/ltO6 ZS2MquZTSnE52eqFokGgPwt8l5p07tMYAcEpc6oU0+JFqsxGFfUN/LXtqtBZ3sm5 SZMHsB94FfDolQmAvE7GBxzEC1c+PhiSO4OB7GRIdZd/yHnX8jkPNKJSTv0izEus I8FNlrmiOqpEHZlXP7nEvesR7eZNZR66dsFLvR4ElryiYtcVOW1mBumHCPOvIcSr IWuUriJjRf99vQ3K/oDYOsXnDkCfDzRQouKVbvcAN7rLgPINBSxhcrgae/+utUq2 HqtYzo8L/NlSLrIdvvOWA3/Kkubqcm82FDV3mJduSHtuVUgcgnVZSVI4mKswTe/j qzg3tfUY15zJhw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:16:23 2025 by rpki-client