This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json) Hash identifier: 3o8YcqBmPbjxk6jkUmf3DMdSilJe+wYEEvG6REamURg= Subject key identifier: 38:36:36:74:3C:48:CC:26:71:EC:24:E3:88:60:C7:51:A6:12:EA:B8 Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd Certificate serial: 019A819942C5995135ABF23886F442825DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft Manifest number: 0810 Signing time: Fri 14 Nov 2025 09:01:36 +0000 Manifest this update: Fri 14 Nov 2025 09:01:36 +0000 Manifest next update: Sat 15 Nov 2025 09:01:36 +0000 Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: LVHoyqg1kzCKRHFE2emL/fzMWpm+BUK7TBwOI2tJgBM=) 2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:99:42:c5:99:51:35:ab:f2:38:86:f4:42:82:5d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd Validity Not Before: Nov 14 09:01:36 2025 GMT Not After : Nov 15 09:01:36 2025 GMT Subject: CN=383636743c48cc2671ec24e38860c751a612eab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:fb:e7:a5:7d:8e:aa:ed:4e:23:79:3a:0d: 3a:f4:fc:58:8b:f0:85:42:fd:61:d5:05:8b:52:ed: e5:ab:2f:f3:46:f5:67:50:96:c6:e9:44:ae:79:8a: 1d:c3:f1:78:4d:bc:a8:65:5d:bf:70:82:52:48:da: 40:44:54:9c:ba:f6:d8:84:d9:aa:7a:9a:4d:50:10: 41:57:7b:49:26:76:f6:b4:bb:d0:16:9d:33:09:e3: fa:db:9a:8b:57:09:28:8c:05:25:d5:a3:dc:b8:74: 38:1c:48:bd:e0:b9:4a:02:fe:fc:0e:91:a0:10:48: 69:48:b4:25:30:ce:e5:88:06:31:4f:da:65:87:2e: d3:2c:28:46:f9:e8:51:6a:99:02:47:d1:6a:66:5b: 1c:51:68:bc:3f:ef:78:0a:cb:60:d9:ef:bc:5a:fc: e7:d4:6c:60:74:c5:36:8d:4f:df:79:27:b2:93:3d: 9b:e6:4e:10:62:77:33:62:e2:01:11:16:48:cb:42: 2d:26:7c:35:02:61:89:24:f7:3a:3a:1d:3b:4b:81: 56:6f:55:5b:b8:74:73:65:bb:f0:c2:56:69:c0:39: 51:a6:8d:f4:4b:b5:ef:f9:0e:bc:f8:61:76:cf:c4: e6:ba:78:af:54:9e:4b:16:73:9f:8a:48:a8:da:69: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:36:74:3C:48:CC:26:71:EC:24:E3:88:60:C7:51:A6:12:EA:B8 X509v3 Authority Key Identifier: keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a4:38:07:81:31:c0:df:09:0c:67:0c:23:66:29:e1:33:e1: b3:c9:05:fd:97:52:d4:ea:09:ff:1f:35:ea:5b:1b:79:2a:0a: f2:3f:19:55:52:ca:34:3d:a1:db:54:5a:1b:0b:f4:22:6c:ec: 92:3e:0c:e8:9b:8a:c5:75:3d:3e:e2:a5:90:c9:be:e7:92:33: 8a:59:cb:ca:59:96:e0:9d:c9:63:2c:e6:07:41:9e:c6:95:74: 9f:ce:74:c3:e6:91:98:81:81:4f:f0:b9:24:ea:ac:30:1d:40: ef:c3:3e:9b:12:ec:d7:95:e2:93:a0:06:19:98:11:c7:b0:14: c4:4b:85:da:8d:92:b1:87:60:8c:09:59:7f:39:82:19:fb:27: 60:3c:d8:db:94:02:d7:c9:ed:a1:e6:56:13:3b:9b:7b:54:9b: 60:37:d1:d9:e2:c2:fb:43:08:af:2d:61:4c:c9:ae:8d:f7:49: 12:55:c9:3f:42:a1:df:b8:69:0a:a2:4a:19:44:74:92:7d:10: 51:4e:c1:6e:bc:c3:c0:ca:19:72:5c:d8:aa:eb:72:fc:0f:0d: d5:35:ad:c8:5f:c5:d9:71:3d:00:94:f6:6b:0f:7b:a7:30:16: 10:fc:f8:71:0d:4d:f2:1d:4a:2d:99:52:d7:c2:67:c5:f5:e0: 5f:d1:a9:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqBmULFmVE1q/I4hvRCgl3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzIxNzIyNjFjOTUwOWU1NzM1MjEzN2JhMDE5MmE4NDg2 YjZmZGQwHhcNMjUxMTE0MDkwMTM2WhcNMjUxMTE1MDkwMTM2WjAzMTEwLwYDVQQD EygzODM2MzY3NDNjNDhjYzI2NzFlYzI0ZTM4ODYwYzc1MWE2MTJlYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCH756V9jqrtTiN5Og069PxYi/CF Qv1h1QWLUu3lqy/zRvVnUJbG6USueYodw/F4TbyoZV2/cIJSSNpARFScuvbYhNmq eppNUBBBV3tJJnb2tLvQFp0zCeP625qLVwkojAUl1aPcuHQ4HEi94LlKAv78DpGg EEhpSLQlMM7liAYxT9plhy7TLChG+ehRapkCR9FqZlscUWi8P+94Cstg2e+8Wvzn 1GxgdMU2jU/feSeykz2b5k4QYnczYuIBERZIy0ItJnw1AmGJJPc6Oh07S4FWb1Vb uHRzZbvwwlZpwDlRpo30S7Xv+Q68+GF2z8TmunivVJ5LFnOfikio2mnAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg2NnQ8SMwmcewk44hgx1GmEuq4MB8GA1UdIwQY MBaAFA0yFyJhyVCeVzUhN7oBkqhIa2/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWIt ZmU4NDg0ZjcwNzlkLzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWItZmU4NDg0ZjcwNzlk LzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqQ4B4Ex wN8JDGcMI2Yp4TPhs8kF/ZdS1OoJ/x816lsbeSoK8j8ZVVLKND2h21RaGwv0Imzs kj4M6JuKxXU9PuKlkMm+55IzilnLylmW4J3JYyzmB0GexpV0n850w+aRmIGBT/C5 JOqsMB1A78M+mxLs15Xik6AGGZgRx7AUxEuF2o2SsYdgjAlZfzmCGfsnYDzY25QC 18ntoeZWEzube1SbYDfR2eLC+0MIry1hTMmujfdJElXJP0Kh37hpCqJKGUR0kn0Q UU7BbrzDwMoZclzYquty/A8N1TWtyF/F2XE9AJT2aw97pzAWEPz4cQ1N8h1KLZlS 18JnxfXgX9GpfA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:20:09 2025 by rpki-client