This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json) Hash identifier: 50aGhXCJqjvq3AF4+Bo6kN9VnYWQfNwpFgsNti6IfMA= Subject key identifier: 31:A1:EF:D0:3F:5F:0A:DE:4B:4A:ED:D4:19:2B:14:34:47:CD:02:D8 Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66 Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66 Certificate serial: 019A8F54B15CE0C470DC2299E77D8A6DF50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft Manifest number: 16E0 Signing time: Mon 17 Nov 2025 01:01:23 +0000 Manifest this update: Mon 17 Nov 2025 01:01:23 +0000 Manifest next update: Tue 18 Nov 2025 01:01:23 +0000 Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: xswdUEfrRF+tBwGHmSz521fwXqO2wSZ7DcpABkJ2esU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8f:54:b1:5c:e0:c4:70:dc:22:99:e7:7d:8a:6d:f5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66 Validity Not Before: Nov 17 01:01:23 2025 GMT Not After : Nov 18 01:01:23 2025 GMT Subject: CN=31a1efd03f5f0ade4b4aedd4192b143447cd02d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:68:94:91:bb:b9:e8:5a:6d:7e:66:d3:e6:06: bb:76:02:ef:f7:1c:47:3f:25:74:54:25:f4:9f:69: 4a:ff:be:88:74:39:0f:0a:d2:c4:d6:c1:eb:65:92: 30:69:3f:ba:ff:70:b6:77:49:17:b1:78:80:96:60: cb:84:8a:50:31:b2:42:af:4a:0c:21:95:2f:2d:57: ea:28:3c:18:04:50:79:be:e0:2c:30:71:3e:38:7d: 0e:b5:fd:71:cc:64:e0:d0:4a:7c:3d:65:c5:f1:0c: 01:f8:be:5c:f9:2a:be:c9:68:fa:57:e5:f7:c2:9c: 30:52:c1:87:2a:2e:2f:52:e5:8a:d2:3f:54:37:73: a9:83:b0:63:43:16:21:f7:0d:d7:7e:fa:8f:50:76: 47:79:4c:0e:32:59:76:4d:d7:be:ed:a5:d9:85:d4: db:6e:c3:99:0f:3f:d3:9d:05:f8:4b:fc:f8:04:89: 26:c6:51:ef:8b:89:a8:d8:8f:cf:9c:40:d5:0e:5b: 62:d6:af:02:b3:3d:38:d9:46:65:f5:98:78:e5:c2: 1e:33:df:8f:26:2c:cd:31:74:2b:00:d4:e1:00:55: 07:25:1f:f7:1f:e7:49:b1:ef:52:0c:0f:55:0b:d9: 63:a2:f8:b1:59:8d:c0:0e:12:da:d3:a9:b2:e1:67: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:EF:D0:3F:5F:0A:DE:4B:4A:ED:D4:19:2B:14:34:47:CD:02:D8 X509v3 Authority Key Identifier: keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:90:c1:20:5a:0b:8d:90:76:df:9b:7d:89:40:a9:0c:1a:cb: 82:72:6c:aa:0c:e8:bf:fd:07:08:88:e9:e8:4d:b6:48:09:1d: fa:95:d5:ac:ed:d1:ff:aa:6a:15:66:ec:53:99:bd:cd:c2:16: af:2e:89:0a:8b:ea:c4:a1:ac:5b:a8:5e:64:c9:e8:f3:c8:5c: cb:a5:4c:6c:aa:7c:d6:05:5b:d1:82:a4:32:2c:d3:eb:86:68: cd:b2:8d:9b:7b:db:7d:bf:2b:69:2d:bd:43:6a:f1:3e:41:9f: e8:36:ca:05:58:a8:2e:f2:7b:31:b8:6d:a2:d0:e1:d8:09:14: 16:50:23:a7:47:90:76:13:17:8d:45:b6:5c:d3:20:4a:c7:dd: b3:41:df:46:b0:08:08:32:0c:cb:c3:1a:cb:0b:83:7c:7d:37: 8b:7e:b4:af:85:ef:d0:18:ef:94:b5:0d:72:04:7f:5c:50:88: f8:b3:48:13:f8:f5:b9:eb:fd:0e:f9:02:a6:66:47:23:16:dc: e4:aa:6a:97:83:9f:eb:51:d7:b1:8f:75:fd:94:d9:b8:d4:09: bd:7c:0c:c5:84:19:ce:65:9a:81:7c:79:bd:99:56:30:31:6f: 6a:1a:af:11:34:d2:40:bc:17:01:15:8c:23:46:04:fb:96:da: e1:5b:f6:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqPVLFc4MRw3CKZ532KbfUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOTljY2NkNmYwZmYyNmRlOGVkMzkzNmY0YTY0YmVlOThk OWRjNjYwHhcNMjUxMTE3MDEwMTIzWhcNMjUxMTE4MDEwMTIzWjAzMTEwLwYDVQQD EygzMWExZWZkMDNmNWYwYWRlNGI0YWVkZDQxOTJiMTQzNDQ3Y2QwMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WiUkbu56FptfmbT5ga7dgLv9xxH PyV0VCX0n2lK/76IdDkPCtLE1sHrZZIwaT+6/3C2d0kXsXiAlmDLhIpQMbJCr0oM IZUvLVfqKDwYBFB5vuAsMHE+OH0Otf1xzGTg0Ep8PWXF8QwB+L5c+Sq+yWj6V+X3 wpwwUsGHKi4vUuWK0j9UN3Opg7BjQxYh9w3XfvqPUHZHeUwOMll2Tde+7aXZhdTb bsOZDz/TnQX4S/z4BIkmxlHvi4mo2I/PnEDVDlti1q8Csz042UZl9Zh45cIeM9+P JizNMXQrANThAFUHJR/3H+dJse9SDA9VC9ljovixWY3ADhLa06my4WcwwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGh79A/XwreS0rt1BkrFDRHzQLYMB8GA1UdIwQY MBaAFG6ZzM1vD/Jt6O05NvSmS+6Y2dxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUt ZTdmMGI3ODliYzczLzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUtZTdmMGI3ODliYzcz LzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5DBIFoL jZB235t9iUCpDBrLgnJsqgzov/0HCIjp6E22SAkd+pXVrO3R/6pqFWbsU5m9zcIW ry6JCovqxKGsW6heZMno88hcy6VMbKp81gVb0YKkMizT64ZozbKNm3vbfb8raS29 Q2rxPkGf6DbKBVioLvJ7MbhtotDh2AkUFlAjp0eQdhMXjUW2XNMgSsfds0HfRrAI CDIMy8MaywuDfH03i360r4Xv0BjvlLUNcgR/XFCI+LNIE/j1uev9DvkCpmZHIxbc 5Kpql4Of61HXsY91/ZTZuNQJvXwMxYQZzmWagXx5vZlWMDFvahqvETTSQLwXARWM I0YE+5ba4Vv2Rg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:12:20 2025 by rpki-client