This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json) Hash identifier: y5xSI45i5MwLnCi2rpvMb6GmTk6ZKXFIWe3Nrpu/Iic= Subject key identifier: 24:7B:29:92:31:7C:2A:88:F8:36:CB:B6:20:A1:A8:85:80:06:2F:80 Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84 Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284 Certificate serial: 019A95FB4668A4CD8CEFE08D7D941A4F1BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft Manifest number: 07A6 Signing time: Tue 18 Nov 2025 08:01:03 +0000 Manifest this update: Tue 18 Nov 2025 08:01:03 +0000 Manifest next update: Wed 19 Nov 2025 08:01:03 +0000 Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: k0Qwq/Cmd2C5/LKpUtYJLSJoayBwTVkT/y9TiS/8iro=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:fb:46:68:a4:cd:8c:ef:e0:8d:7d:94:1a:4f:1b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0f32e5f098b86a8794825c81122da953466284 Validity Not Before: Nov 18 08:01:03 2025 GMT Not After : Nov 19 08:01:03 2025 GMT Subject: CN=247b2992317c2a88f836cbb620a1a88580062f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:79:a1:b7:e1:df:0d:3b:16:72:d3:88:69: a3:09:e5:40:38:cf:36:78:63:b1:90:4e:96:b5:2b: c1:be:5b:ff:09:c1:bc:62:75:c7:6c:71:fc:f4:9d: 39:51:60:4a:dd:11:3f:ec:e6:18:10:a7:a0:12:41: dc:39:2d:bd:a9:e2:11:9a:a7:9e:d2:17:72:78:8a: e7:55:58:5d:68:a4:23:68:24:17:0c:34:07:d1:3f: 97:9c:95:ba:35:cd:fb:8f:69:67:f2:8e:b4:a9:1b: 9d:16:4c:b3:86:bd:bf:ec:02:0b:5c:a0:00:b3:a6: ed:f1:6a:a6:c7:a2:1b:42:d2:da:6f:44:2a:08:2b: 83:72:65:b8:27:03:b1:0f:96:fb:c6:21:5e:9b:d1: 04:e1:30:60:aa:70:e3:ff:4e:5e:f1:63:e6:1b:fd: ce:ad:65:59:fd:3b:36:fb:fe:1a:ac:3b:67:60:4a: ca:7b:d4:f0:ee:23:9e:57:d2:ba:aa:36:36:e7:f7: 11:6a:5c:9a:30:60:63:e8:05:77:0c:af:81:69:63: 52:27:d4:22:2a:32:24:b2:21:e3:db:53:30:d2:72: 6e:a7:41:8a:1e:83:05:f4:8e:71:93:c0:32:31:92: 3e:a7:9e:ca:11:4e:ac:ab:d4:3e:0c:87:10:6f:ba: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7B:29:92:31:7C:2A:88:F8:36:CB:B6:20:A1:A8:85:80:06:2F:80 X509v3 Authority Key Identifier: keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6e:95:de:17:7c:db:46:62:98:1b:fb:19:b4:09:a2:39:ac: 8c:84:a7:a6:20:b6:f6:49:9c:b0:d7:bb:c7:ba:d3:57:72:b9: fb:df:e1:be:a9:47:44:e8:ac:de:5f:09:6b:c1:83:99:17:16: c5:7e:83:11:3b:09:00:31:bc:01:5e:58:71:c8:c2:ab:18:00: c4:0d:97:7e:b9:33:97:7c:a5:62:89:33:47:a7:b6:29:cb:f0: 3b:22:11:7c:ae:e7:78:09:ef:b8:1a:cf:19:51:78:7b:b3:12: 61:d8:6a:3a:37:c1:12:ea:bf:5a:2e:75:25:40:6e:d5:32:78: ca:d9:8d:9b:09:2f:7d:49:c8:7e:58:59:b1:33:8c:de:81:f9: d7:ad:9e:ed:92:10:dc:80:4c:f0:11:cd:b1:2b:9f:80:46:89: c5:b6:5b:15:31:0d:13:ac:4c:0a:1f:d0:f3:22:be:07:79:8f: ee:98:ea:14:16:13:8e:8d:26:6d:3d:0c:bc:a5:76:84:c5:6a: be:59:b9:46:98:10:80:ce:a3:e2:2e:ec:af:a1:2c:63:f3:2c: 7e:c0:67:62:7f:7a:29:28:72:69:26:85:a3:97:7a:01:fe:07: e0:de:c1:fe:91:4d:d6:c9:2e:dd:ed:22:a3:7c:69:41:59:7f: 7c:6d:b8:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqV+0ZopM2M7+CNfZQaTxu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMGYzMmU1ZjA5OGI4NmE4Nzk0ODI1YzgxMTIyZGE5NTM0 NjYyODQwHhcNMjUxMTE4MDgwMTAzWhcNMjUxMTE5MDgwMTAzWjAzMTEwLwYDVQQD EygyNDdiMjk5MjMxN2MyYTg4ZjgzNmNiYjYyMGExYTg4NTgwMDYyZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Z5obfh3w07FnLTiGmjCeVAOM82 eGOxkE6WtSvBvlv/CcG8YnXHbHH89J05UWBK3RE/7OYYEKegEkHcOS29qeIRmqee 0hdyeIrnVVhdaKQjaCQXDDQH0T+XnJW6Nc37j2ln8o60qRudFkyzhr2/7AILXKAA s6bt8Wqmx6IbQtLab0QqCCuDcmW4JwOxD5b7xiFem9EE4TBgqnDj/05e8WPmG/3O rWVZ/Ts2+/4arDtnYErKe9Tw7iOeV9K6qjY25/cRalyaMGBj6AV3DK+BaWNSJ9Qi KjIksiHj21Mw0nJup0GKHoMF9I5xk8AyMZI+p57KEU6sq9Q+DIcQb7reXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR7KZIxfCqI+DbLtiChqIWABi+AMB8GA1UdIwQY MBaAFN8PMuXwmLhqh5SCXIESLalTRmKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGIt OGIxMmIxZjFiNWFlLzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGItOGIxMmIxZjFiNWFl LzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE26V3hd8 20ZimBv7GbQJojmsjISnpiC29kmcsNe7x7rTV3K5+9/hvqlHROis3l8Ja8GDmRcW xX6DETsJADG8AV5YccjCqxgAxA2Xfrkzl3ylYokzR6e2KcvwOyIRfK7neAnvuBrP GVF4e7MSYdhqOjfBEuq/Wi51JUBu1TJ4ytmNmwkvfUnIflhZsTOM3oH5162e7ZIQ 3IBM8BHNsSufgEaJxbZbFTENE6xMCh/Q8yK+B3mP7pjqFBYTjo0mbT0MvKV2hMVq vlm5RpgQgM6j4i7sr6EsY/MsfsBnYn96KShyaSaFo5d6Af4H4N7B/pFN1sku3e0i o3xpQVl/fG24gg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:57 2025 by rpki-client