This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json) Hash identifier: ujR+swyzMPOk7ekImjZ+d5SF7B22yfso2i0OmVCktc0= Subject key identifier: 3B:9A:F7:D8:29:5B:2B:95:55:78:A8:9B:86:4C:EA:03:5A:01:B6:E3 Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a Certificate serial: 019AE7847BD3F23718F2F0DE8E168E9CFF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft Manifest number: 08A7 Signing time: Thu 04 Dec 2025 04:00:10 +0000 Manifest this update: Thu 04 Dec 2025 04:00:10 +0000 Manifest next update: Fri 05 Dec 2025 04:00:10 +0000 Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=) 2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: VFXaCjuu0gCsmuhHtEUqBn5C5l84ogGO+qNMXH6Qs+k=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:84:7b:d3:f2:37:18:f2:f0:de:8e:16:8e:9c:ff:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a Validity Not Before: Dec 4 04:00:10 2025 GMT Not After : Dec 5 04:00:10 2025 GMT Subject: CN=3b9af7d8295b2b955578a89b864cea035a01b6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:44:50:92:94:d8:69:61:23:b6:d6:82:7d: b7:f8:1f:9b:1f:09:38:4c:69:7d:04:d9:9a:05:c8: b6:5c:34:e2:6f:97:c4:a4:87:f7:27:98:ab:fc:39: 32:ca:a5:a5:f3:74:f8:fa:86:cf:4f:08:5e:ee:93: 41:55:08:75:fc:6b:8a:06:10:00:2c:41:44:53:06: 7a:43:ae:f6:a2:4f:06:91:29:7f:f3:b2:8a:ed:06: bc:2b:e7:9c:77:80:fb:53:56:8a:e7:6a:c8:e3:28: 04:3e:60:7a:63:9f:9d:e2:55:bf:05:37:a0:af:75: 06:19:28:36:b9:34:16:78:b1:a3:ec:2a:17:47:6f: ea:6c:89:9b:90:e4:de:29:a4:a8:80:3b:6f:77:0a: 51:67:b5:aa:b6:b0:d9:02:99:38:4e:74:6c:df:eb: 22:12:8c:2b:6c:90:ac:b4:79:d6:f6:81:72:b6:52: 24:a7:9c:10:a9:bc:cb:7d:ad:08:57:a3:fc:b8:c1: 8a:37:5d:86:5d:97:ba:36:f7:e0:6e:e8:85:65:03: 3a:ec:df:b9:94:27:ec:d9:0d:79:6f:6b:3c:ec:52: 52:a7:e9:9c:47:23:22:02:fd:5f:e3:a5:72:91:44: 50:ef:5a:07:3d:10:d9:5c:59:8b:98:7c:ef:ce:0a: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:F7:D8:29:5B:2B:95:55:78:A8:9B:86:4C:EA:03:5A:01:B6:E3 X509v3 Authority Key Identifier: keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e7:ca:25:a6:37:85:a0:dc:b7:f2:d3:8a:f7:06:16:81:ac: 83:2c:f2:c8:c5:02:5a:13:d8:3f:5c:f6:53:00:0c:0f:64:cc: 79:25:f2:93:90:1f:f7:b7:3b:53:66:78:bd:4c:fe:9b:78:89: 8b:34:e1:c8:b2:e5:d7:85:26:08:58:8d:31:cb:36:65:d5:94: 91:cd:bb:68:12:0e:e9:da:80:38:c5:e0:09:a3:63:0b:7b:fb: 97:4f:d8:5a:eb:d7:bc:ce:df:e6:ce:be:2b:39:83:23:f3:f9: b4:13:34:b5:a1:78:85:dd:97:fe:b3:3c:cb:bf:d5:b2:f1:13: 4c:ec:93:7e:98:bc:39:68:0e:1e:ad:52:b5:07:1c:0f:64:d0: 9e:7b:2e:39:30:65:3f:14:29:be:12:a0:bb:2a:7e:bb:bb:26: fc:0c:62:1d:46:47:b9:6e:d9:f6:d8:cb:07:20:c5:8b:89:9f: 20:0c:e2:61:29:30:84:98:2e:a5:de:21:c8:f2:05:89:55:18: 2b:d7:ac:af:a3:c6:19:6a:06:60:33:ce:af:1b:8b:fb:bd:c2: 7e:f2:a5:62:5e:a1:f1:30:50:80:2d:c0:6e:21:ff:84:b0:12: 6c:9c:de:20:08:97:99:f7:82:dc:a9:31:7b:77:e5:bf:da:a4: f5:ba:13:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnhHvT8jcY8vDejhaOnP9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYWVkZjJmODEyOGY0OGViODExM2JmYWY0ZDY3ZDkwMTA0 OTA5M2EwHhcNMjUxMjA0MDQwMDEwWhcNMjUxMjA1MDQwMDEwWjAzMTEwLwYDVQQD EygzYjlhZjdkODI5NWIyYjk1NTU3OGE4OWI4NjRjZWEwMzVhMDFiNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooJEUJKU2GlhI7bWgn23+B+bHwk4 TGl9BNmaBci2XDTib5fEpIf3J5ir/DkyyqWl83T4+obPTwhe7pNBVQh1/GuKBhAA LEFEUwZ6Q672ok8GkSl/87KK7Qa8K+ecd4D7U1aK52rI4ygEPmB6Y5+d4lW/BTeg r3UGGSg2uTQWeLGj7CoXR2/qbImbkOTeKaSogDtvdwpRZ7WqtrDZApk4TnRs3+si EowrbJCstHnW9oFytlIkp5wQqbzLfa0IV6P8uMGKN12GXZe6NvfgbuiFZQM67N+5 lCfs2Q15b2s87FJSp+mcRyMiAv1f46VykURQ71oHPRDZXFmLmHzvzgoF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDua99gpWyuVVXiom4ZM6gNaAbbjMB8GA1UdIwQY MBaAFKuu3y+BKPSOuBE7+vTWfZAQSQk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgt ZmM0NjBmZjk4ZTMxLzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgtZmM0NjBmZjk4ZTMx LzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+fKJaY3 haDct/LTivcGFoGsgyzyyMUCWhPYP1z2UwAMD2TMeSXyk5Af97c7U2Z4vUz+m3iJ izThyLLl14UmCFiNMcs2ZdWUkc27aBIO6dqAOMXgCaNjC3v7l0/YWuvXvM7f5s6+ KzmDI/P5tBM0taF4hd2X/rM8y7/VsvETTOyTfpi8OWgOHq1StQccD2TQnnsuOTBl PxQpvhKguyp+u7sm/AxiHUZHuW7Z9tjLByDFi4mfIAziYSkwhJgupd4hyPIFiVUY K9esr6PGGWoGYDPOrxuL+73CfvKlYl6h8TBQgC3AbiH/hLASbJzeIAiXmfeC3Kkx e3flv9qk9boT5Q== -----END CERTIFICATE-----Generated at Thu Dec 18 14:21:56 2025 by rpki-client