This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft File: 65Hpk6SkDOfl2chjJfGG3waeys0.mft (raw, json) Hash identifier: b9/SUWP1jRdN71FfaWW5pvXFRb/BJyIE42d+JF2YHRI= Subject key identifier: AC:B3:69:5E:C9:C4:A9:85:43:4F:F6:83:19:83:96:31:59:E6:44:95 Authority key identifier: EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD Certificate issuer: /CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd Certificate serial: 019A94E8D9FDC55B6291697321A0B8079BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft Manifest number: 081B Signing time: Tue 18 Nov 2025 03:01:19 +0000 Manifest this update: Tue 18 Nov 2025 03:01:19 +0000 Manifest next update: Wed 19 Nov 2025 03:01:19 +0000 Files and hashes: 1: 65Hpk6SkDOfl2chjJfGG3waeys0.crl (hash: wn5pi0e0oo69TEdWN9Q+iXyteK8Ft5Xaj+/Yo6U3XvI=) 2: ctxe5Lnf-P92Y-aRF-aTwCxvQ-Y.roa (hash: JuvYZG1KASTZcCfggftiqfbWLqoSmP/ETYKyhfPlx0Q=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:94:e8:d9:fd:c5:5b:62:91:69:73:21:a0:b8:07:9b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd Validity Not Before: Nov 18 03:01:19 2025 GMT Not After : Nov 19 03:01:19 2025 GMT Subject: CN=acb3695ec9c4a985434ff6831983963159e64495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:ea:0c:0c:12:e0:7b:30:2e:55:6a:95:91: 6a:29:0a:3f:ea:fc:2a:e9:2e:12:a4:02:31:0d:01: fd:31:e2:63:f6:28:d6:84:e1:d4:87:9a:9b:37:88: 80:44:4f:44:73:8a:66:17:43:18:9c:01:b6:d2:14: 6c:26:b7:1c:e2:a0:2b:a6:fe:67:df:0a:31:ec:dc: e9:36:0b:2f:0c:03:60:e0:b7:45:c5:e7:13:c0:79: 6a:62:a5:af:b3:ef:ac:de:36:10:16:91:3a:97:94: 33:40:e7:e8:c9:a1:f6:1d:58:25:d9:02:91:d8:d3: 12:5b:36:c5:cc:df:50:4d:0d:36:76:2b:b4:5b:0e: 37:d4:60:c6:01:a8:3f:4b:7d:b6:d9:df:33:05:0d: 3d:25:e5:1d:ea:e7:a4:37:fe:0f:36:2c:20:8c:3a: f2:51:31:05:1b:60:c6:0a:44:ed:23:3b:26:62:86: 88:a9:cb:b0:27:c7:59:21:ca:e5:cb:ee:fb:18:da: 04:52:ee:87:f1:67:17:14:7c:fc:be:23:ae:de:24: e9:9f:56:6f:df:c8:9d:ed:1e:03:54:79:7a:25:fe: 45:3c:6d:56:01:4e:39:ce:9d:68:6a:41:56:50:8a: da:70:f6:51:ed:97:83:0f:d3:f9:ab:de:47:d4:25: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B3:69:5E:C9:C4:A9:85:43:4F:F6:83:19:83:96:31:59:E6:44:95 X509v3 Authority Key Identifier: keyid:EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:47:0c:fa:e9:6f:99:f0:70:9d:00:2d:cf:99:7a:a3:fc:45: ba:e2:60:ad:3a:88:a3:bd:57:7b:7f:fe:50:20:e1:d8:55:54: 8c:6e:64:f2:ee:9c:2a:eb:87:4f:b1:e9:9c:c8:5f:f5:a0:f0: 85:26:ba:76:c3:6e:d7:af:5b:17:83:57:42:33:ed:2c:f7:d4: 17:7c:0d:8c:80:26:77:d8:c1:fb:03:ff:98:e4:c5:b6:0f:3e: 00:6a:55:8a:a3:0c:37:ea:c1:8c:15:99:98:25:b5:15:a7:70: 2d:4d:98:6e:b0:94:43:56:1d:3a:b4:4c:a7:21:4d:0b:2e:da: 23:c2:24:3f:11:36:f7:cb:5c:da:b7:88:d7:cf:9b:02:2a:d1: ca:dc:14:68:a0:a4:f6:21:b1:94:cd:78:4b:55:15:26:22:48: 5e:10:a1:34:d9:8b:bb:a5:0f:ff:6e:bc:ae:1c:c1:56:a8:00: a2:69:46:d5:98:99:64:0a:df:85:db:a7:fe:1a:d7:87:35:71: 80:8c:8d:f1:32:f4:d1:86:a3:8f:75:63:02:0d:ec:33:ee:c9: b8:25:42:6d:af:6e:bd:76:2e:4c:7c:49:7d:33:31:6b:d7:1a: c6:fe:56:71:34:95:51:8a:0e:45:1e:18:67:10:aa:13:ea:cd: 02:d8:f3:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqU6Nn9xVtikWlzIaC4B5vxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTFlOTkzYTRhNDBjZTdlNWQ5Yzg2MzI1ZjE4NmRmMDY5 ZWNhY2QwHhcNMjUxMTE4MDMwMTE5WhcNMjUxMTE5MDMwMTE5WjAzMTEwLwYDVQQD EyhhY2IzNjk1ZWM5YzRhOTg1NDM0ZmY2ODMxOTgzOTYzMTU5ZTY0NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhvqDAwS4HswLlVqlZFqKQo/6vwq 6S4SpAIxDQH9MeJj9ijWhOHUh5qbN4iARE9Ec4pmF0MYnAG20hRsJrcc4qArpv5n 3wox7NzpNgsvDANg4LdFxecTwHlqYqWvs++s3jYQFpE6l5QzQOfoyaH2HVgl2QKR 2NMSWzbFzN9QTQ02diu0Ww431GDGAag/S3222d8zBQ09JeUd6uekN/4PNiwgjDry UTEFG2DGCkTtIzsmYoaIqcuwJ8dZIcrly+77GNoEUu6H8WcXFHz8viOu3iTpn1Zv 38id7R4DVHl6Jf5FPG1WAU45zp1oakFWUIracPZR7ZeDD9P5q95H1CXdbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyzaV7JxKmFQ0/2gxmDljFZ5kSVMB8GA1UdIwQY MBaAFOuR6ZOkpAzn5dnIYyXxht8GnsrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVIcGs2U2tET2ZsMmNoakpmR0czd2FleXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjNhMDItMDY1MC00ZTVjLWI4ZDAt YzcwMWYyNzljNmRlLzEvNjVIcGs2U2tET2ZsMmNoakpmR0czd2FleXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81ZjNhMDItMDY1MC00ZTVjLWI4ZDAtYzcwMWYyNzljNmRl LzEvNjVIcGs2U2tET2ZsMmNoakpmR0czd2FleXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUcM+ulv mfBwnQAtz5l6o/xFuuJgrTqIo71Xe3/+UCDh2FVUjG5k8u6cKuuHT7HpnMhf9aDw hSa6dsNu169bF4NXQjPtLPfUF3wNjIAmd9jB+wP/mOTFtg8+AGpViqMMN+rBjBWZ mCW1FadwLU2YbrCUQ1YdOrRMpyFNCy7aI8IkPxE298tc2reI18+bAirRytwUaKCk 9iGxlM14S1UVJiJIXhChNNmLu6UP/268rhzBVqgAomlG1ZiZZArfhdun/hrXhzVx gIyN8TL00Yajj3VjAg3sM+7JuCVCba9uvXYuTHxJfTMxa9caxv5WcTSVUYoORR4Y ZxCqE+rNAtjzMw== -----END CERTIFICATE-----Generated at Thu Dec 18 17:03:40 2025 by rpki-client