This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json) Hash identifier: b8wo9nEFdDJI1SrrD8UjSl/8otejT0q7QJHiAK/v0Ew= Subject key identifier: 7A:49:3C:E9:DA:82:2F:9B:25:D9:09:6E:FC:28:63:69:2C:16:FB:E8 Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9 Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9 Certificate serial: 019AA42446F00B9D7A4E0D03FB7AD9358F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft Manifest number: 1215 Signing time: Fri 21 Nov 2025 02:00:32 +0000 Manifest this update: Fri 21 Nov 2025 02:00:32 +0000 Manifest next update: Sat 22 Nov 2025 02:00:32 +0000 Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: vxAofoV88JxLmdEDVHsDlBWZ45RQplPBDvzZ1OSvHaw=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a4:24:46:f0:0b:9d:7a:4e:0d:03:fb:7a:d9:35:8f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9 Validity Not Before: Nov 21 02:00:32 2025 GMT Not After : Nov 22 02:00:32 2025 GMT Subject: CN=7a493ce9da822f9b25d9096efc2863692c16fbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:02:56:67:66:15:01:e5:0f:e1:ca:e9:11: 34:0b:96:21:05:bc:ba:57:f3:d7:42:2d:a4:59:8f: ca:33:69:97:0b:18:e9:a6:e1:0d:df:aa:09:d0:76: 14:b1:79:1a:20:b9:8e:4e:40:d1:a6:f8:ee:c9:36: e1:9f:23:89:d9:12:c5:69:4e:b1:c3:9a:89:f3:0b: d0:75:81:22:1c:23:2d:a1:9b:9e:f3:2c:67:03:83: 2d:86:c3:34:b3:34:05:b6:27:fb:e3:5e:c1:1a:1c: 75:48:5f:89:90:dd:ae:45:48:40:0f:b7:78:e0:ad: ea:d0:a8:05:65:27:63:dc:ef:fd:8e:8c:d2:54:db: fa:ec:1d:00:98:e8:1f:72:5e:ea:09:b6:dd:f3:d8: 22:86:11:72:25:f5:49:b3:33:71:a2:e4:c3:46:c2: ea:74:a1:95:28:f6:9b:83:65:5d:63:5b:4f:12:eb: 6b:0f:fd:72:32:05:71:37:e6:81:ac:07:a3:51:a1: 45:46:94:36:85:75:47:a4:2c:d4:07:6c:1d:e5:98: e6:a1:a9:d9:2e:0e:35:bf:a2:9a:37:21:8f:96:ac: 35:cf:5a:89:da:8a:9d:33:7e:87:99:06:8c:d7:3c: 10:98:52:1b:82:dc:29:7c:02:8d:34:0b:27:ae:fa: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:49:3C:E9:DA:82:2F:9B:25:D9:09:6E:FC:28:63:69:2C:16:FB:E8 X509v3 Authority Key Identifier: keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c8:fd:62:93:fc:d7:cd:d0:34:06:e1:22:e9:59:de:16:ef: 56:8c:53:1f:ad:b2:62:93:a4:1f:11:71:67:4e:23:68:8f:e4: ba:b0:d4:84:03:a4:e6:df:21:d2:de:18:a3:10:36:79:0f:9b: 97:a9:18:3c:86:f4:7a:58:75:ac:98:1c:e9:cf:e0:81:9d:3e: 9e:24:b4:f4:46:9b:69:0a:f3:80:47:27:25:9b:c2:11:ca:50: e9:72:5f:a2:a2:b2:75:46:77:d4:56:30:79:99:34:1c:ba:1f: 01:13:77:66:4b:6e:01:9d:22:3b:48:b3:1e:1c:d3:39:b6:2a: a5:7b:91:96:02:3e:3c:3d:35:d5:77:b7:7a:d4:15:12:6a:ae: 56:ca:00:f7:e4:b1:cc:8a:02:39:6a:cf:ec:7d:d3:5c:73:9c: ef:11:66:18:dd:18:68:27:fd:19:16:70:f5:e1:f8:70:4e:21: 81:e8:d8:86:60:fc:88:e0:44:3d:e2:5a:35:3e:51:be:cd:3c: 77:5a:57:88:88:e0:b5:dd:e3:d8:7e:04:f6:af:30:1d:53:4f: c2:d4:c9:eb:32:36:4a:47:21:7b:ec:e8:15:eb:36:a4:90:d5: 57:1e:cb:6e:df:03:4f:b0:56:2d:f8:33:50:90:94:38:0c:41: 51:4b:51:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqkJEbwC516Tg0D+3rZNY9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExM2YwM2JmMTQ1MWVlZTYyZWE3MjQwNWZhOGI2NGFiZmFl M2M0ZTkwHhcNMjUxMTIxMDIwMDMyWhcNMjUxMTIyMDIwMDMyWjAzMTEwLwYDVQQD Eyg3YTQ5M2NlOWRhODIyZjliMjVkOTA5NmVmYzI4NjM2OTJjMTZmYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApesCVmdmFQHlD+HK6RE0C5YhBby6 V/PXQi2kWY/KM2mXCxjppuEN36oJ0HYUsXkaILmOTkDRpvjuyTbhnyOJ2RLFaU6x w5qJ8wvQdYEiHCMtoZue8yxnA4MthsM0szQFtif7417BGhx1SF+JkN2uRUhAD7d4 4K3q0KgFZSdj3O/9jozSVNv67B0AmOgfcl7qCbbd89gihhFyJfVJszNxouTDRsLq dKGVKPabg2VdY1tPEutrD/1yMgVxN+aBrAejUaFFRpQ2hXVHpCzUB2wd5ZjmoanZ Lg41v6KaNyGPlqw1z1qJ2oqdM36HmQaM1zwQmFIbgtwpfAKNNAsnrvoBMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpJPOnagi+bJdkJbvwoY2ksFvvoMB8GA1UdIwQY MBaAFBE/A78UUe7mLqckBfqLZKv648TpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQt ZGViZTU3NDdiMjkzLzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQtZGViZTU3NDdiMjkz LzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8j9YpP8 183QNAbhIulZ3hbvVoxTH62yYpOkHxFxZ04jaI/kurDUhAOk5t8h0t4YoxA2eQ+b l6kYPIb0elh1rJgc6c/ggZ0+niS09EabaQrzgEcnJZvCEcpQ6XJfoqKydUZ31FYw eZk0HLofARN3ZktuAZ0iO0izHhzTObYqpXuRlgI+PD011Xe3etQVEmquVsoA9+Sx zIoCOWrP7H3TXHOc7xFmGN0YaCf9GRZw9eH4cE4hgejYhmD8iOBEPeJaNT5Rvs08 d1pXiIjgtd3j2H4E9q8wHVNPwtTJ6zI2Skche+zoFes2pJDVVx7Lbt8DT7BWLfgz UJCUOAxBUUtRtQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:39 2025 by rpki-client