This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json) Hash identifier: BQqhNU6Xx4V1cCsUW18fBXi4S6vRmdvve8G9S2Hr//Q= Subject key identifier: 35:E1:03:3D:1C:5C:D9:A3:C9:8E:32:6A:B7:DC:E3:5C:4B:0D:C7:D7 Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12 Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612 Certificate serial: 019AEE2C874D5D8DE00FFBC3938D109D8752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 11:01:26 +0000 Manifest this update: Fri 05 Dec 2025 11:01:26 +0000 Manifest next update: Sat 06 Dec 2025 11:01:26 +0000 Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: i+XQ/Gz7KTiQN2/oc0z6O1WUsDpxZCA4pN4P3gGonTM=) 2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:2c:87:4d:5d:8d:e0:0f:fb:c3:93:8d:10:9d:87:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612 Validity Not Before: Dec 5 11:01:26 2025 GMT Not After : Dec 6 11:01:26 2025 GMT Subject: CN=35e1033d1c5cd9a3c98e326ab7dce35c4b0dc7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:c7:0b:80:43:c7:aa:0c:b2:b9:47:5a:33: e2:ed:04:14:d9:fa:3c:a7:df:a5:94:9f:52:05:0a: 37:1a:2b:71:d3:12:f0:9f:4b:11:40:4c:c7:95:57: b5:af:63:1a:ba:60:10:29:96:f8:d0:29:39:64:b5: 57:95:45:4d:5d:b3:44:cd:b5:99:25:03:75:cb:4d: bb:27:04:0a:00:43:bd:c9:1e:49:a9:79:78:2c:2e: 5d:9e:31:f8:37:b6:4a:f8:02:f0:29:73:2c:fa:11: 26:2d:d1:3e:af:88:84:fe:f0:b2:3d:b5:15:cc:47: a8:d5:a7:40:5f:d8:b1:d6:fb:b7:6d:92:4b:24:cb: 35:42:cc:67:10:04:8c:c1:f8:79:58:bd:78:1d:e7: 84:2e:e9:ed:a3:93:b4:60:7d:30:47:08:bc:69:d3: 2e:27:9b:61:41:bb:69:01:0f:b4:b2:96:47:e3:fb: 8a:3d:4d:4d:32:c6:23:41:aa:36:91:66:1c:aa:76: 41:2d:4d:99:34:ae:6a:53:64:2d:b5:ad:a8:71:dd: 9c:86:39:d7:03:89:fc:c4:82:b9:45:b5:f5:01:0c: cf:c7:9f:86:3f:b9:b7:40:20:6e:d5:0f:1a:28:6e: 19:51:8a:9d:70:d1:44:96:5c:4e:43:d3:4b:f7:95: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:03:3D:1C:5C:D9:A3:C9:8E:32:6A:B7:DC:E3:5C:4B:0D:C7:D7 X509v3 Authority Key Identifier: keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0c:c0:9f:59:0e:90:9e:88:ca:0f:4b:52:79:06:68:91:25: 7d:3c:b7:6e:54:d3:e5:70:88:17:85:50:df:cc:af:a6:ea:c5: 4c:93:c5:1e:2e:bd:5c:02:43:99:b4:1e:ab:bd:fc:28:33:11: a9:44:c4:53:68:e1:28:b0:62:65:eb:bb:e5:3c:a7:af:7e:82: bd:fe:b7:5f:6e:45:9b:39:60:a3:97:a4:dc:ce:61:36:92:26: 79:f4:e5:20:c1:b6:9f:33:75:bc:40:88:6f:40:58:19:1d:3e: bb:1e:1e:3b:2f:d5:79:75:ba:9b:9e:ed:06:77:02:8c:dd:4f: ec:2e:66:7b:4d:ce:e1:e7:6f:09:09:4b:c8:10:dd:53:ed:b2: 05:44:7b:30:b3:d3:4d:22:7d:1c:05:26:22:6e:e5:4c:94:a8: f0:85:f4:8c:67:a4:f2:8f:4e:c8:fc:12:9a:80:aa:39:ab:3e: 8e:41:ef:61:ab:b0:21:22:d1:8c:c4:c4:1a:42:71:3b:af:17: a5:a7:da:b0:da:f6:be:35:dc:0e:a5:34:15:08:8a:57:62:d1: fd:f8:03:c0:67:0e:cc:b5:c0:4a:55:0a:50:ab:bf:ba:50:68: 19:40:4c:17:a2:c9:4c:78:54:06:71:dc:d0:03:8b:ee:64:e9: f1:90:7a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZruLIdNXY3gD/vDk40QnYdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky YmM2MTIwHhcNMjUxMjA1MTEwMTI2WhcNMjUxMjA2MTEwMTI2WjAzMTEwLwYDVQQD EygzNWUxMDMzZDFjNWNkOWEzYzk4ZTMyNmFiN2RjZTM1YzRiMGRjN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcrHC4BDx6oMsrlHWjPi7QQU2fo8 p9+llJ9SBQo3Gitx0xLwn0sRQEzHlVe1r2MaumAQKZb40Ck5ZLVXlUVNXbNEzbWZ JQN1y027JwQKAEO9yR5JqXl4LC5dnjH4N7ZK+ALwKXMs+hEmLdE+r4iE/vCyPbUV zEeo1adAX9ix1vu3bZJLJMs1QsxnEASMwfh5WL14HeeELunto5O0YH0wRwi8adMu J5thQbtpAQ+0spZH4/uKPU1NMsYjQao2kWYcqnZBLU2ZNK5qU2Qtta2ocd2chjnX A4n8xIK5RbX1AQzPx5+GP7m3QCBu1Q8aKG4ZUYqdcNFEllxOQ9NL95Vg7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXhAz0cXNmjyY4yarfc41xLDcfXMB8GA1UdIwQY MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It OTdkY2RhM2EzY2E1LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1 LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQzAn1kO kJ6Iyg9LUnkGaJElfTy3blTT5XCIF4VQ38yvpurFTJPFHi69XAJDmbQeq738KDMR qUTEU2jhKLBiZeu75Tynr36Cvf63X25Fmzlgo5ek3M5hNpImefTlIMG2nzN1vECI b0BYGR0+ux4eOy/VeXW6m57tBncCjN1P7C5me03O4edvCQlLyBDdU+2yBUR7MLPT TSJ9HAUmIm7lTJSo8IX0jGek8o9OyPwSmoCqOas+jkHvYauwISLRjMTEGkJxO68X pafasNr2vjXcDqU0FQiKV2LR/fgDwGcOzLXASlUKUKu/ulBoGUBMF6LJTHhUBnHc 0AOL7mTp8ZB6Gw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:42:38 2025 by rpki-client