This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json) Hash identifier: Z68Yx2nBuxmrZwtkedip6KaEoM0zFJUraSh1jnMNMfg= Subject key identifier: AC:0A:7B:92:40:2C:5B:B6:13:11:AE:E4:D1:F9:64:38:47:84:5A:B7 Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca Certificate serial: 019AD81407FB1C57FEF2B14E4092CC8175A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft Manifest number: 10E4 Signing time: Mon 01 Dec 2025 04:03:02 +0000 Manifest this update: Mon 01 Dec 2025 04:03:02 +0000 Manifest next update: Tue 02 Dec 2025 04:03:02 +0000 Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: G5ugVUZ5hEJm49ljeZEvQIO9C1TMbD+fYZUnwRVwOT0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:14:07:fb:1c:57:fe:f2:b1:4e:40:92:cc:81:75:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca Validity Not Before: Dec 1 04:03:02 2025 GMT Not After : Dec 2 04:03:02 2025 GMT Subject: CN=ac0a7b92402c5bb61311aee4d1f9643847845ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:de:6c:4b:0c:1a:d2:b0:f7:09:8b:17:5e: 6e:cc:79:eb:96:3b:35:04:fd:a7:de:76:41:a9:d0: 09:95:bc:3a:e5:69:f9:5a:03:f0:2a:a1:d4:72:d0: 92:0f:53:99:db:bf:58:0e:fb:ca:71:72:b8:8f:c9: 16:76:7e:58:87:22:77:1b:cf:8b:6e:00:9d:b3:f7: 30:7b:2c:92:9c:3d:5b:11:07:5e:36:84:3f:46:cb: d8:e6:b4:31:12:a1:13:88:67:fe:ab:8b:fc:3e:8b: 6d:16:65:95:4d:4a:f3:2f:be:6e:06:b7:ec:d4:91: b7:60:81:bb:63:b3:7e:b9:b2:f9:3d:fe:10:67:5f: 44:ab:04:04:00:c7:de:9c:4d:5a:57:c5:de:c6:b7: bf:28:64:37:35:f3:5a:17:af:ee:9c:04:0d:39:87: 75:e2:c6:15:b2:fd:d1:78:f7:d6:94:f6:ca:7a:22: da:c2:98:11:74:f1:eb:12:09:c2:a4:ca:51:eb:5d: 35:87:f8:3c:ec:65:cb:3e:d3:2f:1b:9b:50:3d:a8: df:f9:79:2d:41:98:b1:92:f0:fe:97:81:96:93:d7: 86:d8:65:f9:2d:b3:3f:24:67:cf:f9:f9:a9:e0:27: 42:f4:31:78:c5:a1:37:91:fe:81:dd:f6:e5:40:2a: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0A:7B:92:40:2C:5B:B6:13:11:AE:E4:D1:F9:64:38:47:84:5A:B7 X509v3 Authority Key Identifier: keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:52:55:1c:a0:5b:03:2f:3d:54:91:ce:f6:7a:f5:51:f7:08: 1d:ee:d3:ef:c0:93:03:0e:22:ee:17:22:ff:b4:46:9c:49:ef: 82:c9:3d:39:c3:20:13:93:a8:3f:1b:57:cb:7e:8f:c5:de:32: 70:07:bc:fc:3f:52:86:97:78:46:1a:cf:19:88:0a:54:b5:5a: 63:8a:12:f7:8f:e7:9d:90:39:d8:77:5a:04:b0:fc:5c:12:e0: 85:f9:35:50:df:3d:5e:ac:5c:80:79:0d:ec:40:17:31:b1:52: 97:2f:1c:93:bc:62:ee:86:3e:09:ec:99:25:c0:b2:2a:ec:c0: 32:dd:1d:e6:a4:fd:f0:b1:98:61:b8:be:ac:60:89:dc:5f:51: a1:c1:70:46:e1:ca:47:71:9f:e8:c4:8b:56:83:35:02:1b:02: 95:10:0d:1b:b9:db:36:5c:f4:e4:5e:cd:14:26:3c:5b:0b:2f: 8b:21:f7:7f:97:2e:33:82:49:51:3f:88:78:a4:bb:d5:1a:86: c9:b4:8e:04:40:99:f1:31:4c:c9:c7:f5:06:40:4e:f1:89:9a: c9:26:02:77:8e:b3:cf:fc:d4:38:11:ba:3e:d1:d6:40:6b:75: ff:52:e4:85:b9:e2:3e:d6:69:da:4f:94:47:a1:2d:38:50:70: 17:16:c7:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrYFAf7HFf+8rFOQJLMgXWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MzQzODdlYmZlY2RhNjM3YTc2ZTExMTk5ZTFjZDAzMDdj MmY0Y2EwHhcNMjUxMjAxMDQwMzAyWhcNMjUxMjAyMDQwMzAyWjAzMTEwLwYDVQQD EyhhYzBhN2I5MjQwMmM1YmI2MTMxMWFlZTRkMWY5NjQzODQ3ODQ1YWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVbebEsMGtKw9wmLF15uzHnrljs1 BP2n3nZBqdAJlbw65Wn5WgPwKqHUctCSD1OZ279YDvvKcXK4j8kWdn5YhyJ3G8+L bgCds/cweyySnD1bEQdeNoQ/RsvY5rQxEqETiGf+q4v8PottFmWVTUrzL75uBrfs 1JG3YIG7Y7N+ubL5Pf4QZ19EqwQEAMfenE1aV8Xexre/KGQ3NfNaF6/unAQNOYd1 4sYVsv3RePfWlPbKeiLawpgRdPHrEgnCpMpR6101h/g87GXLPtMvG5tQPajf+Xkt QZixkvD+l4GWk9eG2GX5LbM/JGfP+fmp4CdC9DF4xaE3kf6B3fblQCo+LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwKe5JALFu2ExGu5NH5ZDhHhFq3MB8GA1UdIwQY MBaAFEg0OH6/7NpjenbhEZnhzQMHwvTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZWU2YzgtZjNlMi00ZmFlLTk5OGEt NTkxYTJhNDE5NGNkLzEvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85ZWU2YzgtZjNlMi00ZmFlLTk5OGEtNTkxYTJhNDE5NGNk LzEvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1JVHKBb Ay89VJHO9nr1UfcIHe7T78CTAw4i7hci/7RGnEnvgsk9OcMgE5OoPxtXy36Pxd4y cAe8/D9Shpd4RhrPGYgKVLVaY4oS94/nnZA52HdaBLD8XBLghfk1UN89XqxcgHkN 7EAXMbFSly8ck7xi7oY+CeyZJcCyKuzAMt0d5qT98LGYYbi+rGCJ3F9RocFwRuHK R3Gf6MSLVoM1AhsClRANG7nbNlz05F7NFCY8WwsviyH3f5cuM4JJUT+IeKS71RqG ybSOBECZ8TFMycf1BkBO8YmaySYCd46zz/zUOBG6PtHWQGt1/1LkhbniPtZp2k+U R6EtOFBwFxbHTw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:07:52 2025 by rpki-client