This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json) Hash identifier: 9/615zSRxzCF6KRgtxdKFwQwx8hMVfAJ2DsWsol8zFg= Subject key identifier: 2A:4B:C7:93:DE:70:26:A1:F9:CE:FE:1D:0E:36:55:54:78:A6:FC:D0 Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb Certificate serial: 019858D90EA41BDAEB4E186341204379C0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft Manifest number: 0ECE Signing time: Wed 30 Jul 2025 01:01:16 +0000 Manifest this update: Wed 30 Jul 2025 01:01:16 +0000 Manifest next update: Thu 31 Jul 2025 01:01:16 +0000 Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: Gg39qyio4P1phxqINvI849r1saUI4ZVSI3YQ+dcuG3s=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:58:d9:0e:a4:1b:da:eb:4e:18:63:41:20:43:79:c0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb Validity Not Before: Jul 30 01:01:16 2025 GMT Not After : Jul 31 01:01:16 2025 GMT Subject: CN=2a4bc793de7026a1f9cefe1d0e36555478a6fcd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:2f:d1:fc:99:37:92:3a:57:14:0f:6d:a1: 6a:18:9a:0a:ab:72:ef:a1:93:35:99:b3:9f:96:cb: 5a:24:95:5e:9e:13:1f:ae:90:60:cf:f7:a0:b3:9c: 57:2e:fc:91:27:4c:94:3d:b8:fd:33:a9:9b:1a:2b: cf:e2:e3:bf:22:00:5b:16:20:23:e2:14:07:9f:bf: cf:bc:f2:a9:08:e2:0a:7c:a4:a6:38:45:bf:24:64: c9:60:4b:10:34:53:2e:46:55:4f:e4:d7:54:77:eb: 35:87:2e:5f:2f:30:ce:7b:36:ba:66:c9:8c:43:2a: 2f:7e:d1:47:2c:f6:27:cf:bc:09:f8:b6:7b:ae:75: 55:92:04:8c:80:0c:78:78:be:42:fb:c1:59:41:b5: 98:a8:90:58:89:7a:73:9c:4e:64:9c:14:a0:57:93: 8d:bf:f6:1d:9e:af:49:cf:eb:8e:c5:04:cf:53:b1: 12:cb:e0:92:6e:b6:dd:a6:d2:14:1d:5a:a3:1a:a4: 54:28:c6:e6:9c:c2:7e:77:c6:dc:97:f3:b7:de:c6: 7c:21:fd:71:9e:44:fe:33:aa:8a:93:a1:50:97:82: 0d:d7:fd:ee:53:b9:2f:c9:77:1b:7d:83:15:f9:ff: 2a:35:52:cb:d3:f1:be:dc:5c:09:9e:59:e6:ae:14: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4B:C7:93:DE:70:26:A1:F9:CE:FE:1D:0E:36:55:54:78:A6:FC:D0 X509v3 Authority Key Identifier: keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ee:55:84:8e:d7:7c:e3:b3:ee:45:a1:62:5c:ed:cd:bc:6e: 68:c6:b6:8b:06:63:4b:bb:e0:ae:8e:ad:b4:44:1c:c7:d3:a2: 1e:34:12:cc:17:fb:d6:15:ab:03:26:f4:d7:a7:fa:b9:ad:2e: 01:20:39:54:b5:5d:f2:2d:fd:8c:27:6f:8e:b7:bd:82:11:ea: 1b:66:96:cb:13:03:67:cd:5b:a3:76:06:f5:5f:13:d5:c1:7e: 69:bd:f1:6d:db:0f:48:74:a5:cc:d0:19:bd:6a:31:54:5d:dc: 53:ba:d3:a9:4f:5f:0a:f3:cd:94:2c:db:37:ef:10:b4:4e:b7: 06:21:8f:a3:a2:74:0c:42:86:c3:8d:2b:23:e1:d2:13:0c:14: d1:78:9a:30:ec:36:46:2d:0c:5e:08:42:16:b0:a2:ea:23:9e: 67:41:b4:a4:ca:2b:42:9a:bf:e5:26:71:bc:92:a4:00:a9:82: 67:99:76:ee:c3:9a:19:cf:4b:db:de:61:95:23:e8:88:1f:83: 73:1d:1f:f1:b1:14:c9:36:be:02:23:5e:3f:bf:b4:c7:26:35: d3:f3:f5:00:30:a8:1b:24:3e:72:96:8c:05:b5:7a:ff:0d:26: bc:4f:ac:52:7b:0d:bf:91:75:1c:88:2b:39:23:16:13:ef:59: 83:39:75:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhY2Q6kG9rrThhjQSBDecDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZWUwNDg5MTU4ZmU5NWUxOTkxZmQ1Y2U3MjVlYTA2N2Ux MWExZmIwHhcNMjUwNzMwMDEwMTE2WhcNMjUwNzMxMDEwMTE2WjAzMTEwLwYDVQQD EygyYTRiYzc5M2RlNzAyNmExZjljZWZlMWQwZTM2NTU1NDc4YTZmY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIov0fyZN5I6VxQPbaFqGJoKq3Lv oZM1mbOflstaJJVenhMfrpBgz/egs5xXLvyRJ0yUPbj9M6mbGivP4uO/IgBbFiAj 4hQHn7/PvPKpCOIKfKSmOEW/JGTJYEsQNFMuRlVP5NdUd+s1hy5fLzDOeza6ZsmM QyovftFHLPYnz7wJ+LZ7rnVVkgSMgAx4eL5C+8FZQbWYqJBYiXpznE5knBSgV5ON v/Ydnq9Jz+uOxQTPU7ESy+CSbrbdptIUHVqjGqRUKMbmnMJ+d8bcl/O33sZ8If1x nkT+M6qKk6FQl4IN1/3uU7kvyXcbfYMV+f8qNVLL0/G+3FwJnlnmrhSiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpLx5PecCah+c7+HQ42VVR4pvzQMB8GA1UdIwQY MBaAFGTuBIkVj+leGZH9XOcl6gZ+EaH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xOGFlMDItZTcyZC00NDMwLTg1ZDgt NDczYzViYTU1MzYyLzEvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8xOGFlMDItZTcyZC00NDMwLTg1ZDgtNDczYzViYTU1MzYy LzEvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu5VhI7X fOOz7kWhYlztzbxuaMa2iwZjS7vgro6ttEQcx9OiHjQSzBf71hWrAyb016f6ua0u ASA5VLVd8i39jCdvjre9ghHqG2aWyxMDZ81bo3YG9V8T1cF+ab3xbdsPSHSlzNAZ vWoxVF3cU7rTqU9fCvPNlCzbN+8QtE63BiGPo6J0DEKGw40rI+HSEwwU0XiaMOw2 Ri0MXghCFrCi6iOeZ0G0pMorQpq/5SZxvJKkAKmCZ5l27sOaGc9L295hlSPoiB+D cx0f8bEUyTa+AiNeP7+0xyY10/P1ADCoGyQ+cpaMBbV6/w0mvE+sUnsNv5F1HIgr OSMWE+9Zgzl1QA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:36 2025 by rpki-client