This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json) Hash identifier: InKR9YZW/JrNPp4Rn9TkybK0Ot+rVcTsBSDCdkgR/+g= Subject key identifier: 00:15:94:3B:17:EE:28:C0:97:70:9F:52:47:47:A5:0E:6F:51:26:2E Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b Certificate serial: 019A910C43A247B27A2399BD58128CB82B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft Manifest number: 172B Signing time: Mon 17 Nov 2025 09:01:31 +0000 Manifest this update: Mon 17 Nov 2025 09:01:31 +0000 Manifest next update: Tue 18 Nov 2025 09:01:31 +0000 Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: Uf1eLEG9AwsA29bAhevuOediNPnLUcMMRIvc9LfdtEg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:0c:43:a2:47:b2:7a:23:99:bd:58:12:8c:b8:2b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b Validity Not Before: Nov 17 09:01:31 2025 GMT Not After : Nov 18 09:01:31 2025 GMT Subject: CN=0015943b17ee28c097709f524747a50e6f51262e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:84:13:3a:0d:7a:d6:f1:1f:b1:68:29:fe: 54:2b:40:14:fc:aa:fe:19:71:9d:f7:55:23:b1:a2: 4b:4b:48:5b:4e:73:08:6a:d7:3b:8d:f1:b5:a9:ac: 0c:d3:76:df:62:ee:07:52:fb:f6:3d:27:71:fc:4f: 93:1a:cc:ae:8d:67:df:95:1c:8d:87:5d:b0:59:63: 3f:f1:3b:fb:13:fb:42:7e:f9:3a:7c:dd:e9:6f:13: 61:c8:b3:f1:47:74:46:00:c7:32:c5:c8:80:74:a5: bd:39:cc:c0:6d:77:92:43:e1:7d:51:b4:85:b0:31: b4:8a:ef:c9:b6:27:54:55:5e:9a:80:b6:da:a7:66: cf:f5:30:87:be:14:44:53:39:ed:49:90:51:c0:e7: ba:42:b8:1a:50:40:73:32:9d:c8:3a:a9:df:ee:d4: f5:5a:72:1b:ef:08:1f:27:4a:e4:0f:f4:64:f3:1b: 6a:d4:5d:51:a7:15:ef:20:32:de:c2:ae:10:ac:b5: 63:a8:db:95:4f:95:29:19:80:89:cb:41:46:66:83: d3:a9:8f:e7:2e:3e:63:2b:f0:62:4e:e5:cf:8f:e2: 60:a0:74:4b:cd:42:f9:30:bd:91:98:4c:b4:28:2d: 61:c1:0c:34:93:67:29:9a:bb:5e:b9:b2:0c:cf:ad: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:15:94:3B:17:EE:28:C0:97:70:9F:52:47:47:A5:0E:6F:51:26:2E X509v3 Authority Key Identifier: keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c0:81:42:15:6c:a8:4c:7d:b1:03:f2:b4:d9:1d:21:ef:3e: a2:fb:32:6b:b4:06:cb:70:a4:89:21:69:36:21:5e:73:9f:25: 93:ee:09:d7:5c:ea:f0:42:42:ea:cd:22:b9:f1:3e:d6:7f:4d: 75:0c:6a:44:3c:91:8a:48:06:d9:7a:3b:50:94:4d:fa:df:15: b1:be:93:a9:32:88:73:df:e1:78:4d:2c:63:ee:1c:c0:1e:d7: a9:cb:cf:ee:ed:7f:68:37:d6:27:c2:62:85:e5:99:1c:74:e6: 3e:0a:b7:d1:c0:d8:d2:b7:e6:b6:61:93:f2:40:cc:65:a2:a8: 4a:6b:51:85:11:96:88:cc:ba:46:7c:70:93:eb:90:32:3c:48: a5:fc:0c:43:11:9d:af:4c:b1:ff:73:ce:dc:fa:86:96:43:18: 10:0b:30:f2:8c:1f:f7:5f:98:91:53:8f:61:8d:31:64:cf:d8: ac:55:c6:83:83:a4:bc:0d:d0:c0:10:03:de:4a:ad:89:fa:80: 79:68:3e:41:a4:e3:17:85:39:e7:d5:5c:1e:29:16:80:47:d2: ad:5f:6a:50:9c:39:d4:a2:c7:4d:da:ff:26:a8:3a:0f:93:5e: b3:17:1c:4a:3f:27:6e:08:43:75:72:a7:b2:23:66:25:ee:7c: 12:7f:e1:aa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZqRDEOiR7J6I5m9WBKMuCuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YTAzZDI0NTBkY2U1ODdkNTM3NTVhOWY2YjRhNDY1NmEy ODBiNGIwHhcNMjUxMTE3MDkwMTMxWhcNMjUxMTE4MDkwMTMxWjAzMTEwLwYDVQQD EygwMDE1OTQzYjE3ZWUyOGMwOTc3MDlmNTI0NzQ3YTUwZTZmNTEyNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIKEEzoNetbxH7FoKf5UK0AU/Kr+ GXGd91UjsaJLS0hbTnMIatc7jfG1qawM03bfYu4HUvv2PSdx/E+TGsyujWfflRyN h12wWWM/8Tv7E/tCfvk6fN3pbxNhyLPxR3RGAMcyxciAdKW9OczAbXeSQ+F9UbSF sDG0iu/JtidUVV6agLbap2bP9TCHvhREUzntSZBRwOe6QrgaUEBzMp3IOqnf7tT1 WnIb7wgfJ0rkD/Rk8xtq1F1RpxXvIDLewq4QrLVjqNuVT5UpGYCJy0FGZoPTqY/n Lj5jK/BiTuXPj+JgoHRLzUL5ML2RmEy0KC1hwQw0k2cpmrteubIMz61IGQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAAVlDsX7ijAl3CfUkdHpQ5vUSYuMB8GA1UdIwQY MBaAFPmgPSRQ3OWH1TdVqfa0pGVqKAtLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1hQTlKRkRjNVlmVk4xV3A5clNrWldvb0Mwcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTZmOTI0LTE5ZjQtNDUxMi1iZGU0 LWUwNmM4YjMwMzQ3OC8xLzEtYUE5SkZEYzVZZlZOMVdwOXJTa1pXb29DMHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2NlLzk2ZjkyNC0xOWY0LTQ1MTItYmRlNC1lMDZjOGIzMDM0 NzgvMS8xLWFBOUpGRGM1WWZWTjFXcDlyU2taV29vQzBzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosCB QhVsqEx9sQPytNkdIe8+ovsya7QGy3CkiSFpNiFec58lk+4J11zq8EJC6s0iufE+ 1n9NdQxqRDyRikgG2Xo7UJRN+t8Vsb6TqTKIc9/heE0sY+4cwB7XqcvP7u1/aDfW J8JiheWZHHTmPgq30cDY0rfmtmGT8kDMZaKoSmtRhRGWiMy6Rnxwk+uQMjxIpfwM QxGdr0yx/3PO3PqGlkMYEAsw8owf91+YkVOPYY0xZM/YrFXGg4OkvA3QwBAD3kqt ifqAeWg+QaTjF4U559VcHikWgEfSrV9qUJw51KLHTdr/Jqg6D5NesxccSj8nbghD dXKnsiNmJe58En/hqg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:32:13 2025 by rpki-client