This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json) Hash identifier: 5Pm+TCZKx/931alEgcoy+2oXXgzKxiws5YevXXlz3wU= Subject key identifier: B9:34:1F:78:56:F3:42:F9:58:BE:64:E5:58:88:6A:AF:B5:36:B8:5F Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9 Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9 Certificate serial: 019A7B6115666033DBF7DB50DD91B770D6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft Manifest number: 155F Signing time: Thu 13 Nov 2025 04:02:31 +0000 Manifest this update: Thu 13 Nov 2025 04:02:31 +0000 Manifest next update: Fri 14 Nov 2025 04:02:31 +0000 Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: S8q6fKEmCmbsjE+BdfvYzI3T1OxboGFMd9nSB+HcMd4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7b:61:15:66:60:33:db:f7:db:50:dd:91:b7:70:d6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9 Validity Not Before: Nov 13 04:02:31 2025 GMT Not After : Nov 14 04:02:31 2025 GMT Subject: CN=b9341f7856f342f958be64e558886aafb536b85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:86:24:dd:84:c7:1c:19:85:09:6a:cc:8a: 64:71:08:34:a6:9e:e8:6e:82:a6:c4:90:f6:a5:ac: e4:7a:4a:f2:e2:65:fb:75:4d:ed:2c:c8:dc:77:23: 30:88:77:28:d8:d8:7d:5d:81:11:b6:c2:5b:a1:66: 52:d9:97:ca:3b:43:6c:2c:81:29:cd:71:30:ea:16: 2b:e0:ae:8c:00:c3:f4:55:d0:f0:79:1d:45:42:45: 43:17:6f:2e:0f:36:c7:2a:03:23:4c:3a:db:51:85: 08:b6:53:8a:40:9c:52:9d:df:1c:5c:73:69:92:ac: 2a:70:6a:a9:9c:22:95:ca:74:d1:33:0b:c4:94:47: 15:6f:e0:01:f3:a3:dd:45:da:9b:e9:bf:e9:17:54: 59:fd:48:80:ef:8c:60:b4:65:e6:2a:91:db:ad:a8: f1:82:e8:8b:3b:49:08:d0:ac:f0:af:a5:f2:07:fb: 30:e2:88:0b:8b:bc:28:8a:8b:c0:ec:4a:a2:cc:18: 5f:71:6b:66:52:19:06:ff:ed:8d:9d:a3:49:31:d9: 65:5d:e5:4d:73:24:14:c1:17:51:c4:fa:1c:25:84: a9:12:c8:05:98:fe:73:a7:96:7a:9d:4e:ef:61:f6: 4f:5a:f5:59:14:5b:c1:d7:bc:d0:3c:77:68:6b:af: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:34:1F:78:56:F3:42:F9:58:BE:64:E5:58:88:6A:AF:B5:36:B8:5F X509v3 Authority Key Identifier: keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ed:89:fe:fb:4d:4b:af:c3:4a:eb:41:8a:f7:34:2c:56:2e: bd:53:74:a0:f2:a4:86:41:c9:64:9d:8c:85:dc:f4:e3:b9:63: 40:4a:c2:3b:dd:8b:36:25:7f:ae:ce:5d:a3:15:3f:07:49:32: 67:45:f1:a1:9c:82:21:d7:65:98:e1:ef:fb:cf:a3:80:08:8c: 41:7d:fd:0a:00:d4:ae:a8:bd:3c:ef:0d:89:69:a2:85:34:5d: 4d:33:4a:40:53:64:d9:02:40:58:0b:bd:e4:3a:fd:5e:3e:9c: be:69:94:2e:4c:f9:b7:97:17:d5:5f:83:9c:dd:63:98:ca:d2: 4c:0b:d2:2f:ca:e7:8b:50:0a:4c:03:ee:23:c7:a0:08:5f:13: 67:6f:33:3f:83:99:23:9c:48:35:4c:de:3d:7f:16:71:99:24: 5a:ed:cf:f7:25:6c:ec:db:85:aa:24:d9:a5:0e:6d:33:02:4e: a3:b7:93:3c:cf:46:ab:07:58:8e:cd:b2:f6:8d:dd:d7:31:a4: 61:b3:d7:e8:80:7b:22:34:ae:46:8d:ec:da:32:d0:aa:44:c7: ab:78:4c:f7:26:24:c3:b0:d7:19:bb:5d:9b:e3:3b:d3:e4:e6: 06:e7:be:20:e1:fa:a7:2d:8b:fc:fa:94:67:bc:f7:a0:05:fb: b2:08:08:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp7YRVmYDPb99tQ3ZG3cNapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmYzM2U4YTNiYWFlMmQ4ZDg1NjAwMTBjOTdjNzZmM2Ix OWZhYzkwHhcNMjUxMTEzMDQwMjMxWhcNMjUxMTE0MDQwMjMxWjAzMTEwLwYDVQQD EyhiOTM0MWY3ODU2ZjM0MmY5NThiZTY0ZTU1ODg4NmFhZmI1MzZiODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyqGJN2ExxwZhQlqzIpkcQg0pp7o boKmxJD2pazkekry4mX7dU3tLMjcdyMwiHco2Nh9XYERtsJboWZS2ZfKO0NsLIEp zXEw6hYr4K6MAMP0VdDweR1FQkVDF28uDzbHKgMjTDrbUYUItlOKQJxSnd8cXHNp kqwqcGqpnCKVynTRMwvElEcVb+AB86PdRdqb6b/pF1RZ/UiA74xgtGXmKpHbrajx guiLO0kI0Kzwr6XyB/sw4ogLi7woiovA7EqizBhfcWtmUhkG/+2NnaNJMdllXeVN cyQUwRdRxPocJYSpEsgFmP5zp5Z6nU7vYfZPWvVZFFvB17zQPHdoa68xUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk0H3hW80L5WL5k5ViIaq+1NrhfMB8GA1UdIwQY MBaAFO3/M+ijuq4tjYVgAQyXx287GfrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMDUzMzItYmVlZi00ZjQyLTg4Zjgt MGRjZTI3MWY3ZTYxLzEvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mMDUzMzItYmVlZi00ZjQyLTg4ZjgtMGRjZTI3MWY3ZTYx LzEvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+2J/vtN S6/DSutBivc0LFYuvVN0oPKkhkHJZJ2Mhdz047ljQErCO92LNiV/rs5doxU/B0ky Z0XxoZyCIddlmOHv+8+jgAiMQX39CgDUrqi9PO8NiWmihTRdTTNKQFNk2QJAWAu9 5Dr9Xj6cvmmULkz5t5cX1V+DnN1jmMrSTAvSL8rni1AKTAPuI8egCF8TZ28zP4OZ I5xINUzePX8WcZkkWu3P9yVs7NuFqiTZpQ5tMwJOo7eTPM9GqwdYjs2y9o3d1zGk YbPX6IB7IjSuRo3s2jLQqkTHq3hM9yYkw7DXGbtdm+M70+TmBue+IOH6py2L/PqU Z7z3oAX7sggIXg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:11 2025 by rpki-client