This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft File: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json) Hash identifier: OZ8W4Ca3wbPTz6G596CbsEBRDIy3gr1tTPullbWdwVw= Subject key identifier: 08:7C:25:85:86:1C:FE:1A:DE:2B:85:45:A2:3F:A9:85:85:A5:86:C9 Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7 Certificate issuer: /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7 Certificate serial: 0199E52B7742F97BFE9ECAB4CBA792E48B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft Manifest number: 027D Signing time: Wed 15 Oct 2025 00:00:54 +0000 Manifest this update: Wed 15 Oct 2025 00:00:54 +0000 Manifest next update: Thu 16 Oct 2025 00:00:54 +0000 Files and hashes: 1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: Mj9zhvgVl8RMhSkEr4neuO0pLzBSGcTv2ht05nSeS+4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:e5:2b:77:42:f9:7b:fe:9e:ca:b4:cb:a7:92:e4:8b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7 Validity Not Before: Oct 15 00:00:54 2025 GMT Not After : Oct 16 00:00:54 2025 GMT Subject: CN=087c2585861cfe1ade2b8545a23fa98585a586c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:f4:6a:d2:3c:9f:21:49:a7:81:da:95:1b: 35:c1:91:f2:a5:1a:c0:b4:a0:7b:58:2a:cb:f1:90: 17:03:8e:f6:a6:60:58:2a:4e:e6:b0:ce:eb:92:00: 15:05:87:92:af:69:d1:f7:68:83:1a:65:88:a5:d0: a7:8f:d0:b8:b0:fb:ec:7f:ed:de:1d:ef:5f:df:d2: 64:27:16:c5:21:7a:ab:f6:5f:be:ad:38:8d:44:85: dd:9b:15:16:30:70:b8:f1:b4:08:4d:88:84:b9:be: db:ae:80:78:87:51:6c:ec:ea:4d:35:a4:5e:52:02: ee:cd:07:c1:e4:32:a4:08:7e:2d:52:d9:47:b5:38: 6b:8d:48:dc:67:bf:e7:5f:8c:61:ea:5d:31:96:9e: 14:e4:11:9d:e6:d9:dd:f8:80:44:04:97:1b:d4:69: 3e:58:a1:66:2c:4d:5f:f0:ef:b1:c5:fd:3c:00:a6: ee:39:3f:6f:43:ca:f1:58:22:0d:45:32:3b:5f:8b: 0e:ba:64:78:8f:fb:66:82:5c:de:e7:34:b9:13:1d: df:7a:99:64:ca:49:31:14:4f:70:ce:11:b1:d4:c7: 79:55:da:52:8d:1c:32:5c:6c:b8:90:89:21:9d:e3: 0f:9a:ce:f7:04:47:89:d8:cc:5d:b9:ef:65:3d:11: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:25:85:86:1C:FE:1A:DE:2B:85:45:A2:3F:A9:85:85:A5:86:C9 X509v3 Authority Key Identifier: keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:86:85:7f:9a:97:0d:be:1d:93:49:c2:c4:a6:0e:e6:ca: a3:ae:9b:18:a7:cc:3c:c9:b1:79:30:a0:c1:8b:5a:23:c8:73: 8e:5c:12:9c:2b:12:0d:cb:cb:29:44:d0:b5:24:55:2f:a9:ad: c7:c9:8f:7e:8d:e7:6f:1e:72:a8:ce:dc:81:d0:32:2c:37:05: af:19:a4:f1:92:b8:60:f8:7a:6c:32:77:1e:19:bd:d0:f6:76: 2a:86:73:55:2d:25:5b:0d:90:06:2b:66:60:34:b2:70:ec:2d: ce:40:63:41:18:62:6d:ed:85:25:45:e3:10:47:a5:bf:cd:6f: 3e:2a:64:a6:00:54:83:c0:d2:54:43:88:70:dd:89:2f:3f:0b: cf:98:68:ad:97:65:b5:97:bc:b6:1a:5b:cc:30:74:78:57:79: 46:80:ac:62:bb:e5:f5:79:0b:a9:d4:68:1b:8b:63:0d:56:93: 28:39:41:f2:50:86:4e:42:41:3e:f0:93:2d:e4:59:fb:0b:54: ef:ce:af:bb:ff:6c:94:da:28:2a:98:04:19:39:4d:7d:1f:fc: 90:53:3e:c1:6e:6a:4f:7b:52:cf:0b:b5:20:4d:0a:6f:28:38: 7d:8d:ef:66:d3:fb:96:6c:0f:ae:48:0b:07:21:86:97:de:5a: c1:5b:7c:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnlK3dC+Xv+nsq0y6eS5IteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTFhOWExNTU2NTg1NTViNjA4YjVlYjk1YjJiNTE1NWUy ZjQzYTcwHhcNMjUxMDE1MDAwMDU0WhcNMjUxMDE2MDAwMDU0WjAzMTEwLwYDVQQD EygwODdjMjU4NTg2MWNmZTFhZGUyYjg1NDVhMjNmYTk4NTg1YTU4NmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj30atI8nyFJp4HalRs1wZHypRrA tKB7WCrL8ZAXA472pmBYKk7msM7rkgAVBYeSr2nR92iDGmWIpdCnj9C4sPvsf+3e He9f39JkJxbFIXqr9l++rTiNRIXdmxUWMHC48bQITYiEub7broB4h1Fs7OpNNaRe UgLuzQfB5DKkCH4tUtlHtThrjUjcZ7/nX4xh6l0xlp4U5BGd5tnd+IBEBJcb1Gk+ WKFmLE1f8O+xxf08AKbuOT9vQ8rxWCINRTI7X4sOumR4j/tmglze5zS5Ex3feplk ykkxFE9wzhGx1Md5VdpSjRwyXGy4kIkhneMPms73BEeJ2Mxdue9lPRFh5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh8JYWGHP4a3iuFRaI/qYWFpYbJMB8GA1UdIwQY MBaAFGSRqaFVZYVVtgi165WytRVeL0OnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkpHcG9WVmxoVlcyQ0xYcmxiSzFGVjR2UTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNjAzODctMTQzMi00MDdkLTg5YmMt NTQwYjdkMTgxODgyLzEvWkpHcG9WVmxoVlcyQ0xYcmxiSzFGVjR2UTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mNjAzODctMTQzMi00MDdkLTg5YmMtNTQwYjdkMTgxODgy LzEvWkpHcG9WVmxoVlcyQ0xYcmxiSzFGVjR2UTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8GGhX+a lw2+HZNJwsSmDubKo66bGKfMPMmxeTCgwYtaI8hzjlwSnCsSDcvLKUTQtSRVL6mt x8mPfo3nbx5yqM7cgdAyLDcFrxmk8ZK4YPh6bDJ3Hhm90PZ2KoZzVS0lWw2QBitm YDSycOwtzkBjQRhibe2FJUXjEEelv81vPipkpgBUg8DSVEOIcN2JLz8Lz5horZdl tZe8thpbzDB0eFd5RoCsYrvl9XkLqdRoG4tjDVaTKDlB8lCGTkJBPvCTLeRZ+wtU 786vu/9slNooKpgEGTlNfR/8kFM+wW5qT3tSzwu1IE0Kbyg4fY3vZtP7lmwPrkgL ByGGl95awVt8vA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:08:59 2025 by rpki-client