This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft File: U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json) Hash identifier: sjcy1cwR/u8V2ZDe0k9Be3eT76zne864MsCI8qlkQN8= Subject key identifier: 3D:9B:C4:80:79:7E:8D:AE:11:0D:31:D1:2E:16:E0:05:B0:AB:26:AE Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D Certificate issuer: /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d Certificate serial: 019AB9D0D4BDC8739B119B1E93972100E05E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft Manifest number: 0A69 Signing time: Tue 25 Nov 2025 07:01:02 +0000 Manifest this update: Tue 25 Nov 2025 07:01:02 +0000 Manifest next update: Wed 26 Nov 2025 07:01:02 +0000 Files and hashes: 1: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: vFJmtXjfe/eeEau4ndCbfpMCofVHdXUzRjqoNs6FjC0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:d0:d4:bd:c8:73:9b:11:9b:1e:93:97:21:00:e0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d Validity Not Before: Nov 25 07:01:02 2025 GMT Not After : Nov 26 07:01:02 2025 GMT Subject: CN=3d9bc480797e8dae110d31d12e16e005b0ab26ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:9d:1a:d8:11:d4:40:96:e8:83:25:24:d8: 4a:1b:89:7f:34:c3:b5:12:69:dc:02:50:5a:51:a3: 39:4d:3e:ef:c0:6d:89:a5:70:93:74:ed:90:10:67: da:09:de:4a:3c:43:55:2d:73:e2:58:06:26:c7:3c: a0:2c:6a:e1:fc:a2:19:97:7c:12:bd:79:8c:cf:63: d2:98:d8:79:8c:3c:c3:c7:87:13:1b:ac:8a:d5:d8: bd:16:69:ae:68:38:ef:5f:2c:83:6d:7e:36:27:54: e3:83:5f:e2:0e:2b:ef:46:fe:79:71:ea:8c:a3:2b: 9b:14:9d:27:96:87:1f:bf:6a:8c:46:a2:98:f2:e2: a4:81:d6:69:07:3e:a9:a2:94:41:ba:b0:03:8c:7c: c5:68:99:ff:01:7c:cf:09:fc:40:a7:12:1f:16:c0: c2:20:b3:43:60:a0:69:c6:9b:81:5a:09:ec:7f:36: e3:ad:be:79:cb:c5:fd:0d:23:b9:10:21:00:d0:76: f9:55:91:cb:a1:96:cf:f1:24:a8:51:43:3b:7b:61: 60:2e:b6:31:67:af:d9:4a:10:ae:98:c2:6a:a3:16: 0b:2c:ab:7a:d8:48:98:9d:8d:01:35:59:96:bb:c7: 4b:88:eb:76:ba:98:cc:50:62:c4:27:c8:15:de:aa: 53:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:C4:80:79:7E:8D:AE:11:0D:31:D1:2E:16:E0:05:B0:AB:26:AE X509v3 Authority Key Identifier: keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:53:d4:78:ec:07:bc:8c:c6:c9:cd:9d:1e:3c:74:29:fd:f3: 67:a8:a5:69:ad:3e:54:3e:3b:2c:a0:67:8e:54:00:01:d3:24: 07:f4:b7:5e:be:89:45:5a:e1:df:4c:cd:e9:13:72:fd:2a:7d: 91:50:1f:75:7d:e2:19:5f:0a:11:d7:fa:01:b4:6f:37:ce:50: 8c:40:2c:1f:09:0a:42:2f:a9:3f:a9:d4:74:1a:bc:e8:18:bc: 95:1c:47:5f:85:1f:65:09:de:ad:9e:50:02:ee:4a:b0:be:cc: c3:11:ea:f5:f4:32:11:e6:34:83:b4:00:be:c0:6b:3f:0d:1a: 7a:e9:4b:b1:7e:ff:7c:0a:af:b8:7c:45:a3:e1:3c:ba:78:17: bc:22:85:99:30:c4:51:c1:2c:df:6c:f6:0b:0a:06:ae:f6:ad: dd:f1:f1:ed:7e:42:9b:48:d2:2c:21:a8:13:5f:ef:7b:27:e3: 8c:6a:61:b0:30:b4:25:a7:ca:48:15:8d:45:fa:34:98:08:38: 9a:ba:93:2f:8a:dc:ea:fa:7d:f6:9d:e5:db:3e:5e:a4:6f:e1: f0:45:51:e7:a8:b1:c7:a8:1f:98:ab:dd:0f:57:b3:f0:a1:2a: cf:c6:76:c6:77:42:c7:63:69:85:50:e7:0a:0b:14:64:e8:04: 3d:f5:c9:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq50NS9yHObEZsek5chAOBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjQ3YTcyNWM3NjhkNGRlNzhmYjMxYmI0MGZlMTZlYmEx OWYyMGQwHhcNMjUxMTI1MDcwMTAyWhcNMjUxMTI2MDcwMTAyWjAzMTEwLwYDVQQD EygzZDliYzQ4MDc5N2U4ZGFlMTEwZDMxZDEyZTE2ZTAwNWIwYWIyNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ6dGtgR1ECW6IMlJNhKG4l/NMO1 EmncAlBaUaM5TT7vwG2JpXCTdO2QEGfaCd5KPENVLXPiWAYmxzygLGrh/KIZl3wS vXmMz2PSmNh5jDzDx4cTG6yK1di9FmmuaDjvXyyDbX42J1Tjg1/iDivvRv55ceqM oyubFJ0nlocfv2qMRqKY8uKkgdZpBz6popRBurADjHzFaJn/AXzPCfxApxIfFsDC ILNDYKBpxpuBWgnsfzbjrb55y8X9DSO5ECEA0Hb5VZHLoZbP8SSoUUM7e2FgLrYx Z6/ZShCumMJqoxYLLKt62EiYnY0BNVmWu8dLiOt2upjMUGLEJ8gV3qpTtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2bxIB5fo2uEQ0x0S4W4AWwqyauMB8GA1UdIwQY MBaAFFP0enJcdo1N54+zG7QP4W66GfINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMt NTc0NzEzODQ1ZGJjLzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMtNTc0NzEzODQ1ZGJj LzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFPUeOwH vIzGyc2dHjx0Kf3zZ6ilaa0+VD47LKBnjlQAAdMkB/S3Xr6JRVrh30zN6RNy/Sp9 kVAfdX3iGV8KEdf6AbRvN85QjEAsHwkKQi+pP6nUdBq86Bi8lRxHX4UfZQnerZ5Q Au5KsL7MwxHq9fQyEeY0g7QAvsBrPw0aeulLsX7/fAqvuHxFo+E8ungXvCKFmTDE UcEs32z2CwoGrvat3fHx7X5Cm0jSLCGoE1/veyfjjGphsDC0JafKSBWNRfo0mAg4 mrqTL4rc6vp99p3l2z5epG/h8EVR56ixx6gfmKvdD1ez8KEqz8Z2xndCx2NphVDn CgsUZOgEPfXJdg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:12 2025 by rpki-client