This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json) Hash identifier: hiUTUN/YsqvukBQFUqIMAK9VkpOR5MdZKo4Fq/AU8kA= Subject key identifier: E2:16:53:FA:0A:60:57:FA:D2:DB:DB:48:FC:00:E0:C5:63:85:AC:25 Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a Certificate serial: 019A9AEB194665216C3E9C822465461165C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft Manifest number: 0375 Signing time: Wed 19 Nov 2025 07:01:29 +0000 Manifest this update: Wed 19 Nov 2025 07:01:29 +0000 Manifest next update: Thu 20 Nov 2025 07:01:29 +0000 Files and hashes: 1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=) 2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: Wq9jQKAYQcXi6iNf2fOdPJkQIHrY7Tsrwigx0n2j9is=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:eb:19:46:65:21:6c:3e:9c:82:24:65:46:11:65:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a Validity Not Before: Nov 19 07:01:29 2025 GMT Not After : Nov 20 07:01:29 2025 GMT Subject: CN=e21653fa0a6057fad2dbdb48fc00e0c56385ac25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a6:ac:34:ce:4b:04:83:24:b1:9a:dc:2c:87: 4e:86:1a:3a:e0:f0:73:a9:5a:6d:f9:d4:2b:ff:6c: 80:9b:b9:ba:1b:ab:f1:33:81:b9:90:4b:6d:27:f0: 41:ef:b0:48:da:cc:3b:19:a1:1f:eb:fa:1b:c9:9e: ba:22:d1:f2:2d:af:cc:c5:37:75:89:1a:26:89:ef: 7a:07:ee:ef:96:9f:53:f9:7a:b4:b2:bd:81:0b:9e: e3:79:d7:6f:fe:00:94:42:a9:2f:be:4a:70:f5:a8: 8b:94:0b:fa:1f:ff:d9:8c:64:7a:b0:c7:d0:30:13: 6e:c8:64:36:da:e8:aa:da:ef:99:c8:66:e7:f9:11: 8f:67:e1:25:06:9e:9c:53:15:39:d9:5e:a8:05:d2: 33:13:2c:67:9d:0d:81:5d:85:bd:f9:01:a2:c9:8e: 0d:b0:b4:5a:ac:7c:f0:c7:30:08:fc:14:c3:82:26: 09:6e:30:19:bf:9c:f1:40:75:81:92:33:04:03:d1: 66:94:05:68:b1:e7:c1:a9:db:4f:c7:98:cf:68:1f: 75:b8:28:eb:15:1a:9f:41:0d:81:97:5e:15:2e:8a: 3c:2f:6e:30:97:3d:cc:d2:97:57:f9:f9:9b:06:6b: 9c:46:48:c8:b1:16:73:0a:dd:38:36:50:b9:36:83: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:16:53:FA:0A:60:57:FA:D2:DB:DB:48:FC:00:E0:C5:63:85:AC:25 X509v3 Authority Key Identifier: keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:a6:34:7c:ef:ff:d0:5c:28:2f:4c:f7:01:a2:12:24:d2: 8f:0f:9a:0e:37:97:54:01:66:e4:d8:4e:82:56:3b:09:24:80: f5:b6:6d:56:27:94:a3:d3:1a:4b:3d:44:72:c4:76:b4:17:59: a9:71:60:15:45:3a:1f:f7:b7:b5:01:b8:db:eb:e2:ec:9a:43: 56:56:26:88:09:7f:8f:c9:6f:94:f6:58:50:a0:a2:4c:92:03: bd:37:c8:e0:d0:b9:ce:0a:85:0c:ff:14:63:b0:07:70:76:ff: 78:c9:c7:24:17:dc:d2:b3:c6:67:13:a7:6c:87:ec:93:44:04: 25:e5:33:de:07:8e:2a:87:83:fb:0e:48:6a:f5:9f:a9:b9:04: 2d:b2:96:e6:7e:78:20:06:7b:3f:1f:c0:3f:fb:fc:62:13:fd: c2:08:ad:d1:43:f6:37:e5:c2:d7:5d:8f:fe:49:cd:f3:47:af: 33:0d:8b:3e:f1:5d:54:b3:4f:00:83:8d:6a:db:b8:d0:d7:d6: a2:d6:a2:20:09:24:84:a6:5b:ad:f9:07:e0:aa:e3:1c:3d:6a: 1f:df:9e:88:7c:3a:cf:fe:89:e7:9d:6d:90:3f:b0:2b:7e:19: d2:af:3f:cc:70:aa:47:74:0e:f4:98:d3:f7:f2:c9:86:cc:d0: fe:3c:3f:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqa6xlGZSFsPpyCJGVGEWXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYWVlN2JiYTMyYThmOTNhNGNjZjU2OTFjODFkMTZkMDRi ODUwOGEwHhcNMjUxMTE5MDcwMTI5WhcNMjUxMTIwMDcwMTI5WjAzMTEwLwYDVQQD EyhlMjE2NTNmYTBhNjA1N2ZhZDJkYmRiNDhmYzAwZTBjNTYzODVhYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KasNM5LBIMksZrcLIdOhho64PBz qVpt+dQr/2yAm7m6G6vxM4G5kEttJ/BB77BI2sw7GaEf6/obyZ66ItHyLa/MxTd1 iRomie96B+7vlp9T+Xq0sr2BC57jeddv/gCUQqkvvkpw9aiLlAv6H//ZjGR6sMfQ MBNuyGQ22uiq2u+ZyGbn+RGPZ+ElBp6cUxU52V6oBdIzEyxnnQ2BXYW9+QGiyY4N sLRarHzwxzAI/BTDgiYJbjAZv5zxQHWBkjMEA9FmlAVosefBqdtPx5jPaB91uCjr FRqfQQ2Bl14VLoo8L24wlz3M0pdX+fmbBmucRkjIsRZzCt04NlC5NoOnawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIWU/oKYFf60tvbSPwA4MVjhawlMB8GA1UdIwQY MBaAFGqu57ujKo+TpMz1aRyB0W0EuFCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXE3bnU2TXFqNU9relBWcEhJSFJiUVM0VUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yM2FkODgtMmY0Yy00ZWY2LWE5ZTUt NTAzMmEzZWYyNTRjLzEvYXE3bnU2TXFqNU9relBWcEhJSFJiUVM0VUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yM2FkODgtMmY0Yy00ZWY2LWE5ZTUtNTAzMmEzZWYyNTRj LzEvYXE3bnU2TXFqNU9relBWcEhJSFJiUVM0VUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY+mNHzv /9BcKC9M9wGiEiTSjw+aDjeXVAFm5NhOglY7CSSA9bZtVieUo9MaSz1EcsR2tBdZ qXFgFUU6H/e3tQG42+vi7JpDVlYmiAl/j8lvlPZYUKCiTJIDvTfI4NC5zgqFDP8U Y7AHcHb/eMnHJBfc0rPGZxOnbIfsk0QEJeUz3geOKoeD+w5IavWfqbkELbKW5n54 IAZ7Px/AP/v8YhP9wgit0UP2N+XC112P/knN80evMw2LPvFdVLNPAIONatu40NfW otaiIAkkhKZbrfkH4KrjHD1qH9+eiHw6z/6J551tkD+wK34Z0q8/zHCqR3QO9JjT 9/LJhszQ/jw/nA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:19:44 2025 by rpki-client