This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json) Hash identifier: IJ+HWll6exevnqogQ1SwuQRxoJdcOxq1V9+046STCis= Subject key identifier: BA:F2:A4:7C:5C:BC:FE:E5:B0:4C:B4:1D:4D:D8:38:45:8D:CE:DA:AE Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b Certificate serial: 019A958D1C440FBE9C13F6E53A5A5B9DD339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft Manifest number: 07D7 Signing time: Tue 18 Nov 2025 06:00:44 +0000 Manifest this update: Tue 18 Nov 2025 06:00:44 +0000 Manifest next update: Wed 19 Nov 2025 06:00:44 +0000 Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: rRseCJ6OXLG1W0ENZp6B3jgEtOdIt0e29GDL82h5aqM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:8d:1c:44:0f:be:9c:13:f6:e5:3a:5a:5b:9d:d3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b Validity Not Before: Nov 18 06:00:44 2025 GMT Not After : Nov 19 06:00:44 2025 GMT Subject: CN=baf2a47c5cbcfee5b04cb41d4dd838458dcedaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:c3:fc:9e:4c:25:aa:dc:6f:e7:07:af:28: ab:cc:5a:60:23:8f:11:98:26:a1:26:43:c3:f2:db: f7:83:c6:d1:e4:55:7c:0d:58:2c:eb:49:1b:62:42: 40:a1:bb:d9:3b:53:92:0e:e1:e0:91:97:4d:ea:c7: d4:ec:bd:90:5b:ea:58:ba:ea:c7:7d:8b:65:96:f8: 3c:1b:15:52:1e:58:64:36:c2:51:43:09:43:ec:d0: 86:d1:e4:b9:55:54:5e:19:f1:3a:fd:0a:08:78:ba: c4:cd:7e:4a:84:b2:22:b5:0c:73:3f:ed:51:d0:93: 0d:69:08:8f:d9:60:3f:e0:19:ff:e0:72:15:79:ee: ab:1e:5e:0b:4a:82:2b:0c:a1:d3:fd:be:58:c7:47: 7d:20:a6:61:72:f6:fd:de:78:2e:74:1b:36:e0:77: 22:32:8c:76:e7:c0:49:7f:ad:e4:14:c4:b2:4f:b2: d8:4f:1e:b6:cc:2b:b6:7f:0c:77:6f:3a:12:fe:6b: 72:5f:9e:c3:28:9f:6d:b1:95:ab:4e:58:f8:a9:ee: 92:f7:b9:b6:0f:6e:dd:01:e6:57:48:4b:82:dd:b9: 50:6c:a8:1b:86:cd:4d:2c:78:78:a7:c5:fe:0e:3f: b4:90:38:bc:24:f8:cc:de:77:d0:3c:83:ae:e1:fb: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:A4:7C:5C:BC:FE:E5:B0:4C:B4:1D:4D:D8:38:45:8D:CE:DA:AE X509v3 Authority Key Identifier: keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:39:5b:e4:c6:fc:83:04:1d:a1:0d:18:f4:2c:56:5d:53:25: 89:37:a9:c5:37:9c:f9:fa:62:2d:37:8d:33:8b:2e:50:43:5f: 51:94:4d:57:82:2e:3e:2f:8b:ab:7c:9d:79:65:c1:6e:2c:e7: 71:17:4e:25:46:33:7f:e4:ed:16:8a:2e:d1:39:3b:bd:35:59: ce:64:dc:5d:be:32:5b:2f:89:2f:03:1d:f5:eb:e9:dd:3b:09: ef:b8:e1:1a:30:1b:0a:d6:6a:e8:88:af:10:b5:3f:f9:e9:ef: c6:d0:89:66:8e:c4:4c:83:db:c9:2a:e9:47:21:21:25:d7:f5: 77:8c:e7:83:57:9a:d6:55:2c:d5:84:02:d5:0c:50:66:6e:40: 5c:74:67:c1:79:e3:44:e8:db:77:46:2e:49:28:84:9d:a5:d3: 04:10:5f:c3:db:dc:80:85:31:41:2c:24:ff:7e:71:ae:23:27: f1:22:04:15:ed:dd:12:b7:8c:ab:ff:67:9c:8d:e5:d3:aa:6d: 6e:a9:6b:01:e0:84:fa:f7:22:b6:91:32:15:3c:23:a6:b3:b0: 20:fe:54:c3:da:5b:30:8c:84:9d:bf:60:a6:03:e9:ef:63:1a: 77:c0:4c:38:02:df:19:c2:8e:bb:83:e3:91:18:44:1c:00:bf: 86:64:61:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqVjRxED76cE/blOlpbndM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDQxOTQxYjE0NTBkNmI5NWI1OGNhM2YwNzdjZTIwOGRm ZGZiNGIwHhcNMjUxMTE4MDYwMDQ0WhcNMjUxMTE5MDYwMDQ0WjAzMTEwLwYDVQQD EyhiYWYyYTQ3YzVjYmNmZWU1YjA0Y2I0MWQ0ZGQ4Mzg0NThkY2VkYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrPD/J5MJarcb+cHryirzFpgI48R mCahJkPD8tv3g8bR5FV8DVgs60kbYkJAobvZO1OSDuHgkZdN6sfU7L2QW+pYuurH fYtllvg8GxVSHlhkNsJRQwlD7NCG0eS5VVReGfE6/QoIeLrEzX5KhLIitQxzP+1R 0JMNaQiP2WA/4Bn/4HIVee6rHl4LSoIrDKHT/b5Yx0d9IKZhcvb93ngudBs24Hci Mox258BJf63kFMSyT7LYTx62zCu2fwx3bzoS/mtyX57DKJ9tsZWrTlj4qe6S97m2 D27dAeZXSEuC3blQbKgbhs1NLHh4p8X+Dj+0kDi8JPjM3nfQPIOu4fvEXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrypHxcvP7lsEy0HU3YOEWNztquMB8GA1UdIwQY MBaAFFQEGUGxRQ1rlbWMo/B3ziCN/ftLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85Mzk4YjAtMmZiYi00YmQzLWI5YmMt MWU4OWY5Njk1ZDFiLzEvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85Mzk4YjAtMmZiYi00YmQzLWI5YmMtMWU4OWY5Njk1ZDFi LzEvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDlb5Mb8 gwQdoQ0Y9CxWXVMliTepxTec+fpiLTeNM4suUENfUZRNV4IuPi+Lq3ydeWXBbizn cRdOJUYzf+TtFoou0Tk7vTVZzmTcXb4yWy+JLwMd9evp3TsJ77jhGjAbCtZq6Iiv ELU/+envxtCJZo7ETIPbySrpRyEhJdf1d4zng1ea1lUs1YQC1QxQZm5AXHRnwXnj ROjbd0YuSSiEnaXTBBBfw9vcgIUxQSwk/35xriMn8SIEFe3dEreMq/9nnI3l06pt bqlrAeCE+vcitpEyFTwjprOwIP5Uw9pbMIyEnb9gpgPp72Mad8BMOALfGcKOu4Pj kRhEHAC/hmRh0g== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:42 2025 by rpki-client