This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft File: fnHOoonCLKhp05CCVc1Op2Yhk7I.mft (raw, json) Hash identifier: YcORSvCedFbUJ9X8MikQzTfJlW/KK7mvl7sIRaoajNY= Subject key identifier: 91:4E:41:F6:55:50:EF:3A:72:71:E1:7B:45:6D:AE:26:D2:1C:31:FA Authority key identifier: 7E:71:CE:A2:89:C2:2C:A8:69:D3:90:82:55:CD:4E:A7:66:21:93:B2 Certificate issuer: /CN=7e71cea289c22ca869d3908255cd4ea7662193b2 Certificate serial: 0195E15A1B30DF21C3EA22D2331498F4B3FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft Manifest number: 0AA9 Signing time: Sat 29 Mar 2025 10:02:13 +0000 Manifest this update: Sat 29 Mar 2025 10:02:13 +0000 Manifest next update: Sun 30 Mar 2025 10:02:13 +0000 Files and hashes: 1: fnHOoonCLKhp05CCVc1Op2Yhk7I.crl (hash: TMohqsmCOtj5ZH3ApQPvlsRiGmomv34ybl9wfFWB13k=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:e1:5a:1b:30:df:21:c3:ea:22:d2:33:14:98:f4:b3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e71cea289c22ca869d3908255cd4ea7662193b2 Validity Not Before: Mar 29 10:02:13 2025 GMT Not After : Mar 30 10:02:13 2025 GMT Subject: CN=914e41f65550ef3a7271e17b456dae26d21c31fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:e8:39:8f:78:12:a3:44:d7:3a:53:75:52: 3a:2c:10:a3:f7:44:bf:0c:49:9c:2b:c5:cb:b3:b4: 65:93:8b:02:68:3d:c9:3f:2c:55:79:92:e6:1b:2a: 0a:49:84:a6:c5:18:27:e7:82:78:00:30:8a:a1:c2: 2d:1d:41:ad:b8:62:d6:da:7f:85:85:13:e5:a3:30: ba:e8:55:05:c2:92:00:61:d0:be:6d:26:8b:e1:29: bc:ac:fb:b6:20:36:73:77:79:85:34:60:32:d9:bf: b8:0a:7f:3a:78:7b:ad:6b:49:3f:1f:b0:c9:1a:cd: f5:d6:af:17:fb:c8:0c:a1:ab:11:12:1b:71:47:19: 66:55:36:51:0d:fd:04:2b:b1:b1:d8:12:c5:e9:97: 62:b4:af:7e:c6:80:05:4b:60:24:d1:b5:99:3a:d0: ae:0d:ef:0c:41:23:c2:04:85:f5:4d:1e:2e:4c:2a: 6d:9d:7b:41:7f:51:fe:9c:6b:52:ab:85:d5:be:07: 15:be:ef:83:34:11:36:a9:f8:ca:53:66:4a:ef:fe: 4d:66:26:30:1c:68:6e:d3:0f:92:9a:d6:37:f3:61: e9:27:77:2a:65:5c:6b:88:1a:52:1a:1a:6e:f3:cf: 7b:9a:5e:2d:6c:ef:3c:40:9d:c7:25:f9:e7:6f:a5: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4E:41:F6:55:50:EF:3A:72:71:E1:7B:45:6D:AE:26:D2:1C:31:FA X509v3 Authority Key Identifier: keyid:7E:71:CE:A2:89:C2:2C:A8:69:D3:90:82:55:CD:4E:A7:66:21:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:82:2e:53:b0:4c:6c:ec:60:3b:26:aa:e3:dc:f7:da:ed:ae: b8:b9:88:7a:87:05:b6:23:bf:b7:04:23:ce:2b:f3:68:6f:a4: a8:90:62:dc:91:2d:30:c7:4b:29:4b:37:e2:d8:7a:e8:31:75: d0:2e:1c:d5:b0:e7:cd:95:a7:95:57:46:74:a2:5e:e4:cb:f4: ef:50:1b:5e:7a:14:34:49:06:ae:f6:1f:f7:5d:35:e8:c9:fe: 31:47:11:c8:03:c7:04:1c:ef:3f:4c:48:dd:94:57:eb:85:d5: 78:ff:6c:28:7d:36:05:63:f3:5d:84:f2:d1:2d:a5:54:57:a8: 2e:9d:5a:ed:ec:07:f7:f5:eb:b3:2f:15:b7:8b:1d:fe:20:c5: 40:94:d3:19:40:d6:8b:ca:5e:ca:26:09:98:07:57:16:0a:10: a8:e4:c1:a1:a3:70:b7:5d:0d:de:38:2a:ee:bd:77:aa:fb:23: 66:f9:e0:49:6f:20:c3:26:21:fc:cc:6d:42:22:ce:28:6e:ea: a8:8b:23:51:fe:80:88:19:23:96:7f:67:b8:74:f2:6b:ca:dd: c5:d9:21:60:cc:28:3d:22:d7:95:76:1b:84:9e:30:35:33:df: c5:e0:8d:ee:07:cc:51:07:ae:20:97:a3:f6:d9:37:3e:cf:df: c2:ca:a5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZXhWhsw3yHD6iLSMxSY9LP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzFjZWEyODljMjJjYTg2OWQzOTA4MjU1Y2Q0ZWE3NjYy MTkzYjIwHhcNMjUwMzI5MTAwMjEzWhcNMjUwMzMwMTAwMjEzWjAzMTEwLwYDVQQD Eyg5MTRlNDFmNjU1NTBlZjNhNzI3MWUxN2I0NTZkYWUyNmQyMWMzMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtADoOY94EqNE1zpTdVI6LBCj90S/ DEmcK8XLs7Rlk4sCaD3JPyxVeZLmGyoKSYSmxRgn54J4ADCKocItHUGtuGLW2n+F hRPlozC66FUFwpIAYdC+bSaL4Sm8rPu2IDZzd3mFNGAy2b+4Cn86eHuta0k/H7DJ Gs311q8X+8gMoasREhtxRxlmVTZRDf0EK7Gx2BLF6ZditK9+xoAFS2Ak0bWZOtCu De8MQSPCBIX1TR4uTCptnXtBf1H+nGtSq4XVvgcVvu+DNBE2qfjKU2ZK7/5NZiYw HGhu0w+SmtY382HpJ3cqZVxriBpSGhpu8897ml4tbO88QJ3HJfnnb6V0oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFOQfZVUO86cnHhe0VtribSHDH6MB8GA1UdIwQY MBaAFH5xzqKJwiyoadOQglXNTqdmIZOyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5IT29vbkNMS2hwMDVDQ1ZjMU9wMlloazdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iODJhZjctNGQyZS00YjRhLWE3N2Mt MWYwOWRjZDNlNjQ4LzEvZm5IT29vbkNMS2hwMDVDQ1ZjMU9wMlloazdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iODJhZjctNGQyZS00YjRhLWE3N2MtMWYwOWRjZDNlNjQ4 LzEvZm5IT29vbkNMS2hwMDVDQ1ZjMU9wMlloazdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4IuU7BM bOxgOyaq49z32u2uuLmIeocFtiO/twQjzivzaG+kqJBi3JEtMMdLKUs34th66DF1 0C4c1bDnzZWnlVdGdKJe5Mv071AbXnoUNEkGrvYf91016Mn+MUcRyAPHBBzvP0xI 3ZRX64XVeP9sKH02BWPzXYTy0S2lVFeoLp1a7ewH9/Xrsy8Vt4sd/iDFQJTTGUDW i8peyiYJmAdXFgoQqOTBoaNwt10N3jgq7r13qvsjZvngSW8gwyYh/MxtQiLOKG7q qIsjUf6AiBkjln9nuHTya8rdxdkhYMwoPSLXlXYbhJ4wNTPfxeCN7gfMUQeuIJej 9tk3Ps/fwsqlSg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:17:18 2025 by rpki-client