This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json) Hash identifier: vVbDVkmsyDKadmjXkPCOKInPnQv4KlgfQ+ExnXKS0dY= Subject key identifier: D0:7C:36:C4:59:32:D8:C1:10:BE:17:44:EA:65:9C:31:51:43:42:74 Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d Certificate serial: 0198646FD6DDA9AAFD79E73A8A8D216330AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft Manifest number: 160E Signing time: Fri 01 Aug 2025 07:01:47 +0000 Manifest this update: Fri 01 Aug 2025 07:01:47 +0000 Manifest next update: Sat 02 Aug 2025 07:01:47 +0000 Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: UTZJbF6pRZ0SSRpCBP+664o14TP3oU3Zyu7W1MFc2cY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:64:6f:d6:dd:a9:aa:fd:79:e7:3a:8a:8d:21:63:30:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d Validity Not Before: Aug 1 07:01:47 2025 GMT Not After : Aug 2 07:01:47 2025 GMT Subject: CN=d07c36c45932d8c110be1744ea659c3151434274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:25:9e:f8:5b:94:10:ac:f8:aa:f9:e8:35: 13:16:b5:e5:e8:1e:74:94:e1:fd:9e:2b:c9:29:78: d8:4a:2b:ce:dc:8b:14:8f:fc:05:a6:ef:c4:d4:bb: e5:f9:93:a8:f8:05:79:84:d8:f9:32:64:c5:50:04: 9b:17:6c:88:2c:e8:c0:8c:6c:2c:86:9a:ef:63:10: 2f:81:cf:a2:df:78:c1:c6:05:ec:01:19:55:b4:7f: 22:70:5e:f9:df:f4:60:e2:11:42:43:7a:a8:0f:a0: 16:0e:03:09:54:0e:39:ff:91:c6:78:cb:db:77:c7: ea:86:47:85:8a:00:70:3d:bb:d2:03:1f:86:72:2d: 90:0d:ff:93:47:0a:ee:52:d8:b1:fa:3d:9a:e5:42: 0d:1c:20:ce:85:a2:2b:ad:c6:8f:ae:3c:bd:5a:9a: 3a:70:a2:d8:29:a4:35:9f:09:e1:1c:a4:3f:6c:36: 7a:c4:13:8f:84:98:f7:ad:fd:12:72:c5:85:1a:1a: c7:b7:a2:bd:64:90:58:64:09:53:54:0d:37:70:56: f8:18:72:f9:ba:41:43:c0:1f:02:78:92:b2:5e:c7: 05:21:b2:d3:55:9a:b8:bf:b6:23:1a:5e:3a:0c:0c: e8:d6:6a:f7:1a:63:8c:cf:67:a2:8c:56:98:6a:d1: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7C:36:C4:59:32:D8:C1:10:BE:17:44:EA:65:9C:31:51:43:42:74 X509v3 Authority Key Identifier: keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:74:0e:0c:2d:3f:b0:b2:ba:c0:71:3a:22:23:5e:49:bf:56: 79:50:3b:c2:6e:a0:5d:31:36:a7:05:2f:5e:72:f4:68:61:40: 9f:43:1b:37:0b:5c:06:d3:34:e1:9e:21:a6:cc:83:b0:b1:73: 5e:a1:54:f6:a8:a4:4c:14:4d:3b:e3:01:0e:11:8a:03:f5:1c: c3:56:d9:8d:ba:72:b6:9e:93:ae:7e:e8:e9:ff:97:31:6d:b8: 57:fe:d5:3d:fa:53:63:16:61:4f:45:71:5b:b8:45:c9:be:78: 1a:cd:b2:89:20:b4:44:ea:04:36:a7:4a:da:92:11:ad:e3:82: ef:30:46:83:24:24:51:a7:a3:9c:73:8e:47:05:2c:f5:f9:dd: 19:b0:69:96:65:7d:69:17:9b:b1:2c:bd:c7:76:91:a6:53:b9: c7:2e:57:06:26:1a:ae:5e:54:5a:c7:4c:43:f5:4b:2e:c9:a1: 27:a7:ca:75:ba:17:ca:31:44:a2:62:f9:3b:69:02:e0:17:63: fa:87:66:ac:56:b9:c7:f4:bd:97:5d:23:8c:c7:6a:60:51:84: ab:de:29:7c:fd:af:d7:55:9d:af:87:a2:cb:bb:87:4d:26:16: c9:86:d3:2c:ef:85:57:c3:4b:68:04:86:78:a8:ad:3a:f4:32: 30:d1:dd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhkb9bdqar9eec6io0hYzCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNzdhYzllZGY2NTAxYWJhY2U1ZjRhZGFlODRkOWNhZmUw NzkwOGQwHhcNMjUwODAxMDcwMTQ3WhcNMjUwODAyMDcwMTQ3WjAzMTEwLwYDVQQD EyhkMDdjMzZjNDU5MzJkOGMxMTBiZTE3NDRlYTY1OWMzMTUxNDM0Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AclnvhblBCs+Kr56DUTFrXl6B50 lOH9nivJKXjYSivO3IsUj/wFpu/E1Lvl+ZOo+AV5hNj5MmTFUASbF2yILOjAjGws hprvYxAvgc+i33jBxgXsARlVtH8icF753/Rg4hFCQ3qoD6AWDgMJVA45/5HGeMvb d8fqhkeFigBwPbvSAx+Gci2QDf+TRwruUtix+j2a5UINHCDOhaIrrcaPrjy9Wpo6 cKLYKaQ1nwnhHKQ/bDZ6xBOPhJj3rf0ScsWFGhrHt6K9ZJBYZAlTVA03cFb4GHL5 ukFDwB8CeJKyXscFIbLTVZq4v7YjGl46DAzo1mr3GmOMz2eijFaYatEAdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB8NsRZMtjBEL4XROplnDFRQ0J0MB8GA1UdIwQY MBaAFBt3rJ7fZQGrrOX0ra6E2cr+B5CNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQt ZDE1OGQ1YzVjYmNjLzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQtZDE1OGQ1YzVjYmNj LzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInQODC0/ sLK6wHE6IiNeSb9WeVA7wm6gXTE2pwUvXnL0aGFAn0MbNwtcBtM04Z4hpsyDsLFz XqFU9qikTBRNO+MBDhGKA/Ucw1bZjbpytp6Trn7o6f+XMW24V/7VPfpTYxZhT0Vx W7hFyb54Gs2yiSC0ROoENqdK2pIRreOC7zBGgyQkUaejnHOORwUs9fndGbBplmV9 aRebsSy9x3aRplO5xy5XBiYarl5UWsdMQ/VLLsmhJ6fKdboXyjFEomL5O2kC4Bdj +odmrFa5x/S9l10jjMdqYFGEq94pfP2v11Wdr4eiy7uHTSYWyYbTLO+FV8NLaASG eKitOvQyMNHdPw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:48:31 2025 by rpki-client