This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json) Hash identifier: aAQ0tj51fEzU/h70oJkDtjm0R2Cuu6Czb1RtIFNW6K4= Subject key identifier: B1:94:F5:E6:8E:94:E5:8B:17:16:D0:37:A2:5C:CF:4E:57:5F:A7:09 Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d Certificate serial: 019A537610AF840652C6658ACE9231EB17EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft Manifest number: 079D Signing time: Wed 05 Nov 2025 10:00:37 +0000 Manifest this update: Wed 05 Nov 2025 10:00:37 +0000 Manifest next update: Thu 06 Nov 2025 10:00:37 +0000 Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=) 2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: 5qVRP9QFvwmuY9lo+VUYuqMgbKM1cMAQKJ4q29WI5ak=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:76:10:af:84:06:52:c6:65:8a:ce:92:31:eb:17:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d Validity Not Before: Nov 5 10:00:37 2025 GMT Not After : Nov 6 10:00:37 2025 GMT Subject: CN=b194f5e68e94e58b1716d037a25ccf4e575fa709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:5f:34:c8:57:93:55:db:bc:35:ae:61:83: ea:a2:34:63:40:f2:bf:16:de:39:ec:63:89:c3:f6: a1:b2:7a:ca:a0:37:2c:92:ea:52:fb:45:a6:9d:93: 97:38:e3:be:1f:08:d9:d9:de:06:0f:e0:37:e1:4b: d1:fd:90:b4:ee:2c:43:41:c4:f7:4b:96:f4:a2:4a: 1c:fa:87:d5:85:36:b7:46:ab:82:d2:b3:67:16:76: 5e:0a:87:7e:43:b3:4a:2a:da:0c:f0:86:a0:74:96: 6b:5b:ff:04:0c:bf:d1:2f:98:f4:f4:bf:11:dc:32: 3b:3e:c6:09:9c:49:cb:d0:94:19:93:73:5b:52:1a: 9d:6b:26:1d:52:7b:eb:9d:91:cf:fa:e3:93:f3:4b: 22:13:f9:b2:6b:88:c2:dd:6e:44:34:bf:7c:33:f8: c1:8c:4f:0a:3b:38:18:16:af:a4:8d:f2:6f:05:97: 02:e3:0c:e5:7f:8b:c0:7c:97:ff:e4:e0:65:cd:67: 7c:6e:ed:fc:68:77:e3:32:8f:77:a2:8c:59:d6:40: 52:d7:74:ce:86:c1:50:32:6a:44:da:1f:bd:53:b0: d3:5b:17:13:40:46:95:91:48:e2:5b:ef:82:c9:9c: 08:a9:40:7e:9d:df:48:b5:b2:62:16:7e:25:63:ab: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:F5:E6:8E:94:E5:8B:17:16:D0:37:A2:5C:CF:4E:57:5F:A7:09 X509v3 Authority Key Identifier: keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:09:52:51:fe:5b:b0:95:10:e1:a1:e1:c6:4f:71:18:77:4b: 49:02:fc:0a:86:d5:ad:82:71:21:f3:c4:1d:ed:d8:eb:87:97: ac:a3:d4:05:58:eb:d2:68:04:97:39:18:2b:e6:32:63:78:24: c9:e0:a8:c9:c1:b5:ac:ad:64:09:5f:26:a5:26:c2:f2:30:d1: 4b:e4:bc:06:f1:6e:86:1a:be:45:7f:75:a5:3c:5b:ad:77:13: ce:1f:c1:92:be:ab:2b:a2:f7:41:20:1b:00:ac:a4:59:98:98: 77:3b:0f:8f:38:ec:e9:b4:73:78:bd:6e:55:33:7d:c1:1b:10: 47:83:db:24:7a:71:f2:21:ce:41:55:14:6b:d1:46:16:70:48: c1:f7:05:9d:90:0c:9b:6e:e6:c1:32:2f:f1:92:d8:f9:c0:e8: 56:98:ec:93:4f:c7:89:1b:db:14:c7:c6:9d:cd:80:40:0e:1e: 33:29:31:64:65:40:2d:7e:f3:6c:b8:a0:c1:1e:2b:a2:83:35: 52:2b:54:a9:c0:69:48:c4:f3:a9:eb:a6:83:1b:15:76:ef:68: ff:59:c5:42:49:cd:77:67:01:1f:fe:32:b7:5f:36:98:85:d2: aa:c8:f8:51:7b:51:92:bb:d4:17:ac:8e:a2:f8:1c:66:f2:01: 81:72:e0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTdhCvhAZSxmWKzpIx6xfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYWViNzYyMmE0NGQyM2MyYTQ1YjRkMGRmNDBkNmNkY2Mz MzI0MWQwHhcNMjUxMTA1MTAwMDM3WhcNMjUxMTA2MTAwMDM3WjAzMTEwLwYDVQQD EyhiMTk0ZjVlNjhlOTRlNThiMTcxNmQwMzdhMjVjY2Y0ZTU3NWZhNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4xfNMhXk1XbvDWuYYPqojRjQPK/ Ft457GOJw/ahsnrKoDcskupS+0WmnZOXOOO+HwjZ2d4GD+A34UvR/ZC07ixDQcT3 S5b0okoc+ofVhTa3RquC0rNnFnZeCod+Q7NKKtoM8IagdJZrW/8EDL/RL5j09L8R 3DI7PsYJnEnL0JQZk3NbUhqdayYdUnvrnZHP+uOT80siE/mya4jC3W5ENL98M/jB jE8KOzgYFq+kjfJvBZcC4wzlf4vAfJf/5OBlzWd8bu38aHfjMo93ooxZ1kBS13TO hsFQMmpE2h+9U7DTWxcTQEaVkUjiW++CyZwIqUB+nd9ItbJiFn4lY6vtTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGU9eaOlOWLFxbQN6Jcz05XX6cJMB8GA1UdIwQY MBaAFIGut2IqRNI8KkW00N9A1s3MMyQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAt ZGIzYWZkM2Q3NjJlLzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAtZGIzYWZkM2Q3NjJl LzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwlSUf5b sJUQ4aHhxk9xGHdLSQL8CobVrYJxIfPEHe3Y64eXrKPUBVjr0mgElzkYK+YyY3gk yeCoycG1rK1kCV8mpSbC8jDRS+S8BvFuhhq+RX91pTxbrXcTzh/Bkr6rK6L3QSAb AKykWZiYdzsPjzjs6bRzeL1uVTN9wRsQR4PbJHpx8iHOQVUUa9FGFnBIwfcFnZAM m27mwTIv8ZLY+cDoVpjsk0/HiRvbFMfGnc2AQA4eMykxZGVALX7zbLigwR4rooM1 UitUqcBpSMTzqeumgxsVdu9o/1nFQknNd2cBH/4yt182mIXSqsj4UXtRkrvUF6yO ovgcZvIBgXLg4g== -----END CERTIFICATE-----Generated at Sat Dec 20 03:41:12 2025 by rpki-client