This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json) Hash identifier: /G6SNc+WASGpeJzxYwUylvUswFREbUbgrRUDMVZMud0= Subject key identifier: 2C:70:3F:49:09:A6:74:1C:90:E2:3E:D5:37:FE:6E:5B:3D:02:14:E7 Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa Certificate serial: 019B06D9CF831737644D85D878A9D029EAFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft Manifest number: 0853 Signing time: Wed 10 Dec 2025 06:01:36 +0000 Manifest this update: Wed 10 Dec 2025 06:01:36 +0000 Manifest next update: Thu 11 Dec 2025 06:01:36 +0000 Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: zUN0S+ExrjtdKUX6MLxuoK8cfgex36fHQm4rJLIi81E=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:cf:83:17:37:64:4d:85:d8:78:a9:d0:29:ea:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa Validity Not Before: Dec 10 06:01:36 2025 GMT Not After : Dec 11 06:01:36 2025 GMT Subject: CN=2c703f4909a6741c90e23ed537fe6e5b3d0214e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:37:e8:ba:68:fe:49:c4:84:e7:be:14:9c: c2:8a:73:78:25:4c:a1:16:2a:b9:26:0c:36:74:f2: 1c:ca:b1:e4:c8:d8:69:ee:e6:9b:e5:44:35:9d:1a: 37:3c:f5:8a:41:bc:89:e7:78:1f:1d:24:45:75:fe: ff:5c:bf:10:91:aa:4f:e0:5b:3e:28:5e:0b:4b:5e: 2e:85:24:30:2e:37:a9:5a:84:b6:44:1b:59:54:64: d8:4f:dc:47:ae:a1:b0:c7:46:0b:9f:e4:62:6f:d2: a3:06:9c:2a:36:71:d3:c3:df:9b:66:87:a2:14:68: 3a:c7:a8:1a:5d:bd:52:e1:6d:d9:2b:34:b1:df:fc: cc:d7:48:de:45:de:e2:64:d4:e3:e0:f5:9b:9d:ea: fa:40:36:33:4b:32:40:23:eb:a5:cf:ba:2f:ea:54: 76:cd:9b:b0:55:a1:77:85:87:81:94:b6:00:9c:cb: 3b:30:21:f6:90:61:74:67:b6:cf:ce:7e:32:ed:61: f5:cf:b4:4e:dc:55:dd:26:a3:e6:5c:13:16:59:ee: c2:21:c9:7e:0a:06:78:09:bc:fc:b4:fd:ff:e1:54: 1a:17:c5:45:c0:7c:cd:ea:01:4a:30:82:51:33:e9: 92:98:9c:8d:79:b6:ef:e7:d0:18:0c:73:6d:9c:33: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:70:3F:49:09:A6:74:1C:90:E2:3E:D5:37:FE:6E:5B:3D:02:14:E7 X509v3 Authority Key Identifier: keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c6:5f:2a:12:79:3a:35:4b:65:27:1b:6f:6b:0d:3d:f9:ef: 71:64:2d:04:e3:92:36:d9:d9:cf:d2:9b:e5:a3:e7:6f:4e:f7: d4:f0:38:2c:41:28:bf:d8:3e:f2:bb:8d:63:38:11:f1:61:a4: 99:fe:cc:1c:1a:38:7c:c0:d7:54:41:f5:a1:a6:5a:2d:47:e2: 38:43:f0:3e:82:4c:4a:bc:af:17:5d:89:27:e6:30:29:45:e4: 3c:19:bc:cd:40:97:3b:13:d6:7b:4e:cd:d5:01:82:44:23:e5: d4:f5:00:93:f1:a5:90:c7:08:dd:c5:72:56:54:69:fd:f0:e5: 94:6b:4d:81:3d:59:e3:a1:c3:68:2b:63:b4:28:4f:8c:b7:13: 50:8f:49:27:a9:6c:5c:ae:c5:19:78:8a:6d:4d:4c:72:e8:3b: 45:f8:f9:6c:1b:ea:4b:55:47:a5:58:b0:75:5f:f8:6d:20:68: 36:8c:d4:00:96:d6:6a:e4:d4:f1:4b:32:4c:60:6f:8b:b5:d3: 0d:c0:4f:67:fe:82:4f:d0:3e:42:75:ef:f7:17:cb:3f:79:1c: c4:ee:55:aa:37:45:a4:4c:a6:ce:b7:42:48:2c:21:77:ab:0d: 94:1e:d1:ba:a6:78:e4:86:f2:c2:58:ff:a4:97:29:dd:64:db: 65:dc:b6:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2c+DFzdkTYXYeKnQKer8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTNlOTRiNDI0YTVjNWQzZjMwMzIwMmI3NTQxNjliOGIw Yzk1ZmEwHhcNMjUxMjEwMDYwMTM2WhcNMjUxMjExMDYwMTM2WjAzMTEwLwYDVQQD EygyYzcwM2Y0OTA5YTY3NDFjOTBlMjNlZDUzN2ZlNmU1YjNkMDIxNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DY36Lpo/knEhOe+FJzCinN4JUyh Fiq5Jgw2dPIcyrHkyNhp7uab5UQ1nRo3PPWKQbyJ53gfHSRFdf7/XL8QkapP4Fs+ KF4LS14uhSQwLjepWoS2RBtZVGTYT9xHrqGwx0YLn+Rib9KjBpwqNnHTw9+bZoei FGg6x6gaXb1S4W3ZKzSx3/zM10jeRd7iZNTj4PWbner6QDYzSzJAI+ulz7ov6lR2 zZuwVaF3hYeBlLYAnMs7MCH2kGF0Z7bPzn4y7WH1z7RO3FXdJqPmXBMWWe7CIcl+ CgZ4Cbz8tP3/4VQaF8VFwHzN6gFKMIJRM+mSmJyNebbv59AYDHNtnDPnHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxwP0kJpnQckOI+1Tf+bls9AhTnMB8GA1UdIwQY MBaAFJ2j6UtCSlxdPzAyArdUFpuLDJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMt YTVhNWQ2ZWI4NDBmLzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMtYTVhNWQ2ZWI4NDBm LzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcZfKhJ5 OjVLZScbb2sNPfnvcWQtBOOSNtnZz9Kb5aPnb0731PA4LEEov9g+8ruNYzgR8WGk mf7MHBo4fMDXVEH1oaZaLUfiOEPwPoJMSryvF12JJ+YwKUXkPBm8zUCXOxPWe07N 1QGCRCPl1PUAk/GlkMcI3cVyVlRp/fDllGtNgT1Z46HDaCtjtChPjLcTUI9JJ6ls XK7FGXiKbU1Mcug7Rfj5bBvqS1VHpViwdV/4bSBoNozUAJbWauTU8UsyTGBvi7XT DcBPZ/6CT9A+QnXv9xfLP3kcxO5VqjdFpEymzrdCSCwhd6sNlB7RuqZ45Ibywlj/ pJcp3WTbZdy21w== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:00 2025 by rpki-client