This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json) Hash identifier: KeORRxHaR/+Dhny79gH+1CEqgw9DL9fFNIbye/mc4Wk= Subject key identifier: 84:52:31:B8:C9:33:EA:23:D3:23:E7:75:1A:DE:7E:78:36:E6:42:84 Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0 Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0 Certificate serial: 0197E83154107BBE10DD8C8F733CF0FF7EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft Manifest number: 0D5E Signing time: Tue 08 Jul 2025 04:00:36 +0000 Manifest this update: Tue 08 Jul 2025 04:00:36 +0000 Manifest next update: Wed 09 Jul 2025 04:00:36 +0000 Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=) 2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: +QSA+L1vOdQsZLobGRxKhUg6Cp5wGrOXe90J9Qfv664=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:e8:31:54:10:7b:be:10:dd:8c:8f:73:3c:f0:ff:7e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0 Validity Not Before: Jul 8 04:00:36 2025 GMT Not After : Jul 9 04:00:36 2025 GMT Subject: CN=845231b8c933ea23d323e7751ade7e7836e64284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8e:8d:f1:c9:89:75:6a:a7:bc:60:e2:c0:ae: a6:95:d2:8b:79:e4:09:b2:14:2a:a7:d6:d8:63:6f: 1f:09:bc:64:02:d4:e5:0a:9d:d4:96:a6:89:fc:29: 55:fb:65:ba:88:0d:1a:4c:d4:2d:3e:42:06:ac:f0: 7c:0a:59:88:86:02:69:3b:15:14:fa:ed:8e:e0:da: 62:06:8a:01:0e:68:3c:d8:65:9f:ca:09:a8:02:4b: 85:99:b2:ed:57:8b:c3:01:1d:79:40:fd:f7:d7:0e: 55:69:0c:bd:51:e7:6d:d8:52:23:9a:35:49:67:26: c4:a4:16:47:32:a0:a3:8e:95:32:c1:36:93:ee:d8: 22:c0:b8:d0:bb:1e:c3:a8:ad:4f:b8:86:69:b5:7a: fd:29:7e:7a:5d:5c:21:2e:c4:e9:5b:df:27:fb:0c: 70:8c:4f:fd:41:1e:ae:3f:0f:37:8b:b2:81:c8:be: e5:09:9c:e4:b9:19:ac:f0:d9:d0:94:41:d9:7d:dc: 8f:12:26:d0:3f:b1:47:c0:f3:2d:ee:e6:92:3a:3c: e3:44:0d:fd:a8:dc:be:25:43:46:b7:69:f3:7f:99: 7e:63:76:4c:8a:2b:3f:0b:ae:0f:c8:29:06:80:30: 17:97:74:8d:a0:9f:53:4e:4e:fe:86:e9:ea:0c:5c: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:52:31:B8:C9:33:EA:23:D3:23:E7:75:1A:DE:7E:78:36:E6:42:84 X509v3 Authority Key Identifier: keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6b:e1:93:0e:44:98:fe:f0:25:8a:eb:c1:0d:7d:b1:ff:d5: 1f:f4:75:b1:20:29:6f:ba:ae:50:65:89:a5:35:0f:c4:78:86: cc:25:48:62:dd:49:93:83:17:a9:4d:fb:2f:30:f8:c6:2e:4f: 71:07:9b:ae:09:2e:64:49:e4:9d:6c:ee:d5:c3:64:d4:bd:25: d9:a0:06:71:35:ba:55:e7:90:bd:73:13:04:44:62:e9:9e:0c: e1:6d:14:7f:f1:a5:e9:59:db:96:13:84:6d:83:80:9c:04:35: ad:d1:0d:d3:eb:4e:f5:c5:dd:35:05:cc:f9:65:95:23:3f:ef: fb:d1:0c:1c:fb:6a:aa:90:e1:77:a8:d3:81:a7:31:c8:b5:e1: 5f:f1:be:d2:59:10:2e:51:a2:be:8b:3e:9b:69:8a:56:29:ff: a9:86:00:02:02:39:d6:05:55:a9:5e:68:72:74:2f:b0:99:91: b4:da:e0:f2:0f:76:11:41:50:e9:ee:ef:3d:97:6d:11:80:f6: c4:31:f9:14:29:e8:4b:21:cb:16:81:1d:16:78:e7:a8:02:bd: 7d:e4:c4:ba:3e:d6:28:62:bd:72:30:e7:3c:e9:4b:94:4e:8f: 94:42:59:4d:27:7c:2c:ed:c4:19:4e:46:e9:fa:19:88:47:f8: 42:da:2f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfoMVQQe74Q3YyPczzw/37aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjQ3ZmE5MmI3MmM0OWVhMGFjNTM3MWRlMzUzYjFlMjcx ZGM1ZDAwHhcNMjUwNzA4MDQwMDM2WhcNMjUwNzA5MDQwMDM2WjAzMTEwLwYDVQQD Eyg4NDUyMzFiOGM5MzNlYTIzZDMyM2U3NzUxYWRlN2U3ODM2ZTY0Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o6N8cmJdWqnvGDiwK6mldKLeeQJ shQqp9bYY28fCbxkAtTlCp3UlqaJ/ClV+2W6iA0aTNQtPkIGrPB8ClmIhgJpOxUU +u2O4NpiBooBDmg82GWfygmoAkuFmbLtV4vDAR15QP331w5VaQy9Uedt2FIjmjVJ ZybEpBZHMqCjjpUywTaT7tgiwLjQux7DqK1PuIZptXr9KX56XVwhLsTpW98n+wxw jE/9QR6uPw83i7KByL7lCZzkuRms8NnQlEHZfdyPEibQP7FHwPMt7uaSOjzjRA39 qNy+JUNGt2nzf5l+Y3ZMiis/C64PyCkGgDAXl3SNoJ9TTk7+hunqDFzYrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRSMbjJM+oj0yPndRrefng25kKEMB8GA1UdIwQY MBaAFKO0f6krcsSeoKxTcd41Ox4nHcXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTQ4ZjMtNjdkOS00ZjM1LTllMGQt YmM2ZDFiM2Y4NmI5LzEvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOTQ4ZjMtNjdkOS00ZjM1LTllMGQtYmM2ZDFiM2Y4NmI5 LzEvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGvhkw5E mP7wJYrrwQ19sf/VH/R1sSApb7quUGWJpTUPxHiGzCVIYt1Jk4MXqU37LzD4xi5P cQebrgkuZEnknWzu1cNk1L0l2aAGcTW6VeeQvXMTBERi6Z4M4W0Uf/Gl6VnblhOE bYOAnAQ1rdEN0+tO9cXdNQXM+WWVIz/v+9EMHPtqqpDhd6jTgacxyLXhX/G+0lkQ LlGivos+m2mKVin/qYYAAgI51gVVqV5ocnQvsJmRtNrg8g92EUFQ6e7vPZdtEYD2 xDH5FCnoSyHLFoEdFnjnqAK9feTEuj7WKGK9cjDnPOlLlE6PlEJZTSd8LO3EGU5G 6foZiEf4Qtov/w== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:34 2025 by rpki-client