This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json) Hash identifier: lpVaev28IAE7TI3nuwvBSMPlglAaThTNsGQvIEDrQu4= Subject key identifier: A1:98:38:5E:04:0C:F2:29:A7:D3:A2:8F:F3:D4:17:6C:AB:BD:66:D5 Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41 Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741 Certificate serial: 019B4513DB1097D1F4E0750119450BD59951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft Manifest number: 128C Signing time: Mon 22 Dec 2025 08:01:27 +0000 Manifest this update: Mon 22 Dec 2025 08:01:27 +0000 Manifest next update: Tue 23 Dec 2025 08:01:27 +0000 Files and hashes: 1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: mO2bTB5SrYJdTGQVQ4Nudzk4jyxuoUDvZTtD2IB8hxM=) 2: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (hash: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:db:10:97:d1:f4:e0:75:01:19:45:0b:d5:99:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741 Validity Not Before: Dec 22 08:01:27 2025 GMT Not After : Dec 23 08:01:27 2025 GMT Subject: CN=a198385e040cf229a7d3a28ff3d4176cabbd66d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:17:00:ea:15:7c:9a:22:b1:cc:f0:b7:bc:0b: 5d:30:ca:79:17:5f:cb:44:11:ba:16:96:6f:eb:5a: 11:c4:4d:6b:f0:5e:8c:ab:ee:bd:e2:68:c3:2a:ae: 48:10:c3:8b:88:2b:04:bf:c6:9d:f0:94:d4:5e:48: e0:32:9f:60:5c:24:37:8e:b8:10:c9:2f:4e:5d:df: d5:e2:37:38:c9:95:9f:d5:f7:b4:9f:65:71:c9:d1: 38:97:3c:3e:c8:23:d1:3c:ca:06:3e:7a:9b:d1:08: 61:4b:6c:e8:e7:8d:44:98:d5:2e:25:6f:ac:b4:9f: 3f:78:11:ee:cf:af:53:3d:f6:50:15:ef:3d:de:62: 7d:a4:0f:e5:be:b5:ac:25:36:99:d1:db:bf:8e:f3: 86:a5:ff:3b:6e:3b:f8:43:7f:ab:f2:f4:f6:ad:22: 0e:64:70:74:63:bf:3a:2a:b1:b6:e4:58:30:29:c7: 80:55:40:07:6f:ce:d0:6d:79:8d:7d:b3:41:a1:ca: b4:e0:a9:38:76:69:62:29:b9:40:25:89:d6:2b:86: 1b:a1:6e:96:49:61:65:34:07:7d:46:b2:05:9e:1a: 4b:8f:76:cf:5d:19:e3:ac:04:3e:80:d8:fd:08:63: ab:01:db:2c:f3:bb:b4:dd:9b:8e:9d:cb:38:20:4c: 60:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:38:5E:04:0C:F2:29:A7:D3:A2:8F:F3:D4:17:6C:AB:BD:66:D5 X509v3 Authority Key Identifier: keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:19:70:e2:4e:c4:ec:e8:ac:9b:1b:b0:70:ba:bb:a4:a9:e0: 31:d3:30:d3:ae:63:d2:e5:9d:2b:37:ae:b7:46:16:de:c3:82: d1:60:a7:48:09:88:7e:58:0e:b9:41:0b:17:44:d1:ce:24:fc: 59:53:79:c6:37:d1:a7:ca:f9:a5:24:7f:a7:35:1b:5a:01:a1: 90:78:5c:f4:96:13:f2:fd:1d:ac:8d:43:dd:9f:e9:2a:b0:21: d1:5a:7f:08:5c:42:a0:01:6d:a7:10:c8:cb:fc:12:a0:ee:f8: 0c:f5:b6:d4:0f:f8:e5:c7:85:ab:e2:63:f3:15:c2:90:76:5a: 26:5a:50:97:8f:f9:b9:18:01:f2:4d:68:96:19:5d:ab:f8:a5: 6d:b9:74:07:d4:27:dd:42:71:9a:fc:44:e7:1c:b7:27:df:48: 08:93:49:e7:8a:60:64:6a:1c:19:33:8d:01:3e:87:ee:b9:db: 6c:3d:5b:c9:51:f9:6b:f9:fe:06:d0:7b:b9:89:83:14:ef:c0: 44:37:7b:c0:60:1a:3f:09:bf:f7:86:b7:9b:b8:fc:bf:3c:b3: e2:90:27:02:34:4e:16:0c:3a:b9:25:b7:b8:30:24:ec:bf:d1: 23:2e:ec:14:6b:38:6d:04:28:83:0b:2c:72:fd:07:a1:18:4f: a6:19:a9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE9sQl9H04HUBGUUL1ZlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0 Y2U3NDEwHhcNMjUxMjIyMDgwMTI3WhcNMjUxMjIzMDgwMTI3WjAzMTEwLwYDVQQD EyhhMTk4Mzg1ZTA0MGNmMjI5YTdkM2EyOGZmM2Q0MTc2Y2FiYmQ2NmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BcA6hV8miKxzPC3vAtdMMp5F1/L RBG6FpZv61oRxE1r8F6Mq+694mjDKq5IEMOLiCsEv8ad8JTUXkjgMp9gXCQ3jrgQ yS9OXd/V4jc4yZWf1fe0n2VxydE4lzw+yCPRPMoGPnqb0QhhS2zo541EmNUuJW+s tJ8/eBHuz69TPfZQFe893mJ9pA/lvrWsJTaZ0du/jvOGpf87bjv4Q3+r8vT2rSIO ZHB0Y786KrG25FgwKceAVUAHb87QbXmNfbNBocq04Kk4dmliKblAJYnWK4YboW6W SWFlNAd9RrIFnhpLj3bPXRnjrAQ+gNj9CGOrAdss87u03ZuOncs4IExgUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGYOF4EDPIpp9Oij/PUF2yrvWbVMB8GA1UdIwQY MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt OTgxZmJiMzQ0MmRkLzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBlw4k7E 7OismxuwcLq7pKngMdMw065j0uWdKzeut0YW3sOC0WCnSAmIflgOuUELF0TRziT8 WVN5xjfRp8r5pSR/pzUbWgGhkHhc9JYT8v0drI1D3Z/pKrAh0Vp/CFxCoAFtpxDI y/wSoO74DPW21A/45ceFq+Jj8xXCkHZaJlpQl4/5uRgB8k1olhldq/ilbbl0B9Qn 3UJxmvxE5xy3J99ICJNJ54pgZGocGTONAT6H7rnbbD1byVH5a/n+BtB7uYmDFO/A RDd7wGAaPwm/94a3m7j8vzyz4pAnAjROFgw6uSW3uDAk7L/RIy7sFGs4bQQogwss cv0HoRhPphmp0Q== -----END CERTIFICATE-----Generated at Thu Dec 25 09:28:17 2025 by rpki-client