This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json) Hash identifier: TUBjm87IF2XYwPmoJW42GANtuxkeeHQjFJ4InHrT/Vg= Subject key identifier: B4:55:43:F0:CF:DD:2E:93:66:EA:E2:E8:33:3D:17:D8:8E:82:BD:22 Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56 Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56 Certificate serial: 019A7ABACF865E51F781A46A6E7B85567B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft Manifest number: 07BC Signing time: Thu 13 Nov 2025 01:00:54 +0000 Manifest this update: Thu 13 Nov 2025 01:00:54 +0000 Manifest next update: Fri 14 Nov 2025 01:00:54 +0000 Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: ESfJ6dWnVd+8w4hIPKdMW3wS9jYj7RE9DNuzkOPnk5E=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7a:ba:cf:86:5e:51:f7:81:a4:6a:6e:7b:85:56:7b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56 Validity Not Before: Nov 13 01:00:54 2025 GMT Not After : Nov 14 01:00:54 2025 GMT Subject: CN=b45543f0cfdd2e9366eae2e8333d17d88e82bd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:e7:a4:ff:50:03:d9:17:d4:7e:4e:fa:6d: 9f:88:a4:17:ab:dd:53:8f:37:c2:fc:ab:60:ef:2d: c9:c7:17:94:3b:7d:9a:1f:ea:a9:16:6a:db:f9:b0: 3c:96:d6:e9:a1:a2:16:f8:87:c5:f9:0b:dd:94:51: 14:2d:c5:4b:90:ea:41:84:1c:5d:3f:76:85:39:3a: 24:c2:30:1d:40:55:24:6a:31:fd:05:49:c2:59:a0: f4:dc:38:43:2a:b6:21:83:78:70:55:00:b3:84:48: 3a:a9:16:71:eb:e9:a0:5b:18:d7:5d:b0:44:f1:a2: 37:0a:f1:5e:64:f3:46:6d:aa:3e:2c:30:76:b1:2e: 74:96:fc:97:1f:7e:bd:a9:4d:1c:13:ae:74:3a:73: 06:64:54:a4:bb:0e:e5:6f:53:4c:28:32:9a:86:0f: d3:c2:a4:85:ae:e2:b6:97:92:40:24:5a:3e:57:6e: 51:0c:ea:b7:1f:0c:ad:51:a3:2e:97:66:7b:a2:2e: 1d:48:7f:0e:f7:d9:12:bf:64:79:8a:df:bd:16:5b: d6:62:ff:3d:7e:e4:b7:72:5e:1b:6b:bc:89:58:88: 79:d6:74:d1:e9:2e:c4:13:67:9a:94:7c:8c:0b:ff: 7f:ae:85:72:d2:d8:c7:6c:0a:25:a4:91:8f:ca:6e: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:43:F0:CF:DD:2E:93:66:EA:E2:E8:33:3D:17:D8:8E:82:BD:22 X509v3 Authority Key Identifier: keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a0:4a:54:94:cf:56:60:d8:5c:47:25:06:60:dd:e3:be:4c: 86:d9:74:96:0f:30:14:25:a5:1c:66:9b:51:94:8d:83:21:b8: 89:7a:43:99:95:f8:ca:29:ba:ab:0d:79:e4:e4:1e:57:5d:0c: 59:b8:86:b4:ee:35:5e:ee:ff:de:53:7d:37:97:e2:57:ca:86: 3c:b9:00:b5:bf:ba:55:f8:0e:97:c0:c6:7a:e2:7b:c4:04:c4: 39:8e:16:0c:8f:3c:ac:c0:89:21:72:3c:6d:44:28:56:07:a9: 99:1e:b2:63:51:5a:1b:ae:66:a1:2b:2f:9a:14:cb:41:ab:98: 98:29:24:8c:ec:19:db:2a:75:26:d0:29:09:a6:a1:22:b3:e4: 0e:e6:a7:36:de:49:1d:df:26:28:d1:33:f9:96:19:57:d4:95: 10:0d:bb:5b:a7:73:fa:e5:1f:25:b1:04:bd:26:4c:f7:df:f2: 88:2e:58:25:a3:82:94:24:39:44:0e:df:44:84:f6:31:97:ab: 8d:fd:66:97:e8:c9:48:62:2b:19:81:52:f8:85:55:64:e5:7c: 30:db:b1:0e:3f:e1:d7:c0:59:0e:82:ad:1d:a3:cf:bb:dd:59: f7:09:79:ad:73:d4:99:8b:9c:6b:94:4e:a9:5d:64:a2:55:01: b7:fe:7c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp6us+GXlH3gaRqbnuFVnsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzIyYTg3NjQ1YmQzNzVlNmRiMmFhMGI4MTZlOGEwNjEw ZTdhNTYwHhcNMjUxMTEzMDEwMDU0WhcNMjUxMTE0MDEwMDU0WjAzMTEwLwYDVQQD EyhiNDU1NDNmMGNmZGQyZTkzNjZlYWUyZTgzMzNkMTdkODhlODJiZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsHnpP9QA9kX1H5O+m2fiKQXq91T jzfC/Ktg7y3JxxeUO32aH+qpFmrb+bA8ltbpoaIW+IfF+QvdlFEULcVLkOpBhBxd P3aFOTokwjAdQFUkajH9BUnCWaD03DhDKrYhg3hwVQCzhEg6qRZx6+mgWxjXXbBE 8aI3CvFeZPNGbao+LDB2sS50lvyXH369qU0cE650OnMGZFSkuw7lb1NMKDKahg/T wqSFruK2l5JAJFo+V25RDOq3HwytUaMul2Z7oi4dSH8O99kSv2R5it+9FlvWYv89 fuS3cl4ba7yJWIh51nTR6S7EE2ealHyMC/9/roVy0tjHbAolpJGPym69wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRVQ/DP3S6TZuri6DM9F9iOgr0iMB8GA1UdIwQY MBaAFI7CKodkW9N15tsqoLgW6KBhDnpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjk4ZWEtYTQ2Ny00NWI5LTkxMTct ODc5OGVkNzVmMjg5LzEvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xMjk4ZWEtYTQ2Ny00NWI5LTkxMTctODc5OGVkNzVmMjg5 LzEvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKBKVJTP VmDYXEclBmDd475Mhtl0lg8wFCWlHGabUZSNgyG4iXpDmZX4yim6qw155OQeV10M WbiGtO41Xu7/3lN9N5fiV8qGPLkAtb+6VfgOl8DGeuJ7xATEOY4WDI88rMCJIXI8 bUQoVgepmR6yY1FaG65moSsvmhTLQauYmCkkjOwZ2yp1JtApCaahIrPkDuanNt5J Hd8mKNEz+ZYZV9SVEA27W6dz+uUfJbEEvSZM99/yiC5YJaOClCQ5RA7fRIT2MZer jf1ml+jJSGIrGYFS+IVVZOV8MNuxDj/h18BZDoKtHaPPu91Z9wl5rXPUmYuca5RO qV1kolUBt/58QA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:07 2025 by rpki-client