This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json) Hash identifier: eFkdvmosbIbC0906ZTuRfdXOgP0kDW/f8GkZqJ8EkS4= Subject key identifier: 9B:ED:C1:56:47:44:AE:3A:87:68:4D:7A:C5:7C:76:8E:08:D2:FF:92 Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc Certificate serial: 019B440079DD8F51BE047C90BBB98E274FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft Manifest number: 0826 Signing time: Mon 22 Dec 2025 03:00:40 +0000 Manifest this update: Mon 22 Dec 2025 03:00:40 +0000 Manifest next update: Tue 23 Dec 2025 03:00:40 +0000 Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: M0HEVtI4DtPmPCRl7Fca8+qj79r/oRt0BIDuUBX69GQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:79:dd:8f:51:be:04:7c:90:bb:b9:8e:27:4f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc Validity Not Before: Dec 22 03:00:40 2025 GMT Not After : Dec 23 03:00:40 2025 GMT Subject: CN=9bedc1564744ae3a87684d7ac57c768e08d2ff92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:42:bb:f2:05:a9:09:f9:fb:3b:c0:10:84: 91:d5:ca:44:44:8f:3e:d0:c2:31:a0:64:9e:e1:db: 72:eb:03:e2:28:a3:d1:20:fc:d3:30:b8:15:f2:f1: bf:d2:ae:8d:78:79:79:cd:92:0e:8e:6b:fd:4e:13: a4:67:88:05:96:34:a7:09:54:34:f6:ab:61:cc:ae: 7c:35:2f:e0:75:51:f6:7b:61:4f:ac:8b:86:6c:75: a2:85:63:4a:b7:ca:fe:ac:34:e2:53:2d:cd:13:d6: d2:03:b1:db:d5:57:4a:b7:04:93:9e:fb:82:6d:9c: 3c:e8:2f:45:ed:1e:4a:be:72:a4:48:fd:f3:df:b9: 80:d5:a2:20:23:20:c5:a3:bc:21:c5:f0:fc:08:23: 18:ab:2a:85:fb:6d:b2:fa:57:13:b1:eb:55:8d:65: 60:7a:a3:6b:de:ea:d0:ff:e1:e5:b3:b3:62:09:a9: 74:21:61:de:f1:c0:8a:c4:1c:bf:e9:bf:60:f9:3e: 60:e6:50:74:bf:77:ab:3c:b0:9f:29:70:2e:e6:4a: a9:d7:c5:e5:32:73:e7:69:25:6f:5e:58:6c:0b:cd: 4e:8c:2d:77:45:37:f5:71:ee:b0:33:22:a0:67:39: 8c:fa:7e:aa:15:ee:93:74:70:f5:b8:e7:32:e8:49: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:C1:56:47:44:AE:3A:87:68:4D:7A:C5:7C:76:8E:08:D2:FF:92 X509v3 Authority Key Identifier: keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:71:41:cd:42:6b:0f:4c:43:51:ae:04:89:53:40:e4:64:94: 5c:46:a2:6d:8e:ae:be:63:3c:be:db:26:29:59:5d:5f:97:c2: 3c:07:6a:c4:27:81:1d:50:98:fc:76:93:d8:4c:0f:9c:24:53: a5:f6:15:ca:a3:e4:03:77:69:2b:5c:eb:19:b0:ca:53:df:fb: ec:60:5e:97:b4:bd:c5:fb:7d:10:06:b2:52:90:83:cc:5d:87: 45:f8:45:da:70:87:fb:b0:6d:cd:90:7f:83:e9:bd:7d:64:14: 09:14:ff:83:d5:8d:da:04:46:0e:fc:6d:8b:e2:96:e7:de:0a: 2d:87:ac:d9:4e:87:e8:17:2f:db:e7:bc:f2:8c:b3:a3:07:9f: 2c:e4:ae:79:51:ac:91:8f:9d:6c:dd:e8:07:eb:43:70:d7:28: af:36:f9:99:09:fc:68:e1:0c:a4:51:66:66:e0:48:d7:c5:01: e7:ce:75:13:35:4f:72:c8:b7:45:74:a3:32:10:e5:81:b0:c5: 18:ac:4f:3f:11:79:6c:8b:40:74:ad:e4:33:b4:85:de:61:94: ae:96:7c:32:24:68:74:87:62:d4:fe:97:b0:7e:e8:8d:e4:13: f6:e0:16:f3:45:fb:22:df:44:4d:f3:06:1e:6b:7e:db:4f:e8: e6:45:50:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAHndj1G+BHyQu7mOJ0/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzY2M2M1ZTE0ZjEzNzQ2YzgwZjYwYmEzNjM0OTNkOWE0 OTM0Y2MwHhcNMjUxMjIyMDMwMDQwWhcNMjUxMjIzMDMwMDQwWjAzMTEwLwYDVQQD Eyg5YmVkYzE1NjQ3NDRhZTNhODc2ODRkN2FjNTdjNzY4ZTA4ZDJmZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqlCu/IFqQn5+zvAEISR1cpERI8+ 0MIxoGSe4dty6wPiKKPRIPzTMLgV8vG/0q6NeHl5zZIOjmv9ThOkZ4gFljSnCVQ0 9qthzK58NS/gdVH2e2FPrIuGbHWihWNKt8r+rDTiUy3NE9bSA7Hb1VdKtwSTnvuC bZw86C9F7R5KvnKkSP3z37mA1aIgIyDFo7whxfD8CCMYqyqF+22y+lcTsetVjWVg eqNr3urQ/+Hls7NiCal0IWHe8cCKxBy/6b9g+T5g5lB0v3erPLCfKXAu5kqp18Xl MnPnaSVvXlhsC81OjC13RTf1ce6wMyKgZzmM+n6qFe6TdHD1uOcy6EmWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvtwVZHRK46h2hNesV8do4I0v+SMB8GA1UdIwQY MBaAFNh2Y8XhTxN0bID2C6NjST2aSTTMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhaanhlRlBFM1JzZ1BZTG8yTkpQWnBKTk13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMGVmMTctZTEwNy00OWRhLTgxOTAt ZDk5ZGE5NzBmZmEyLzEvMkhaanhlRlBFM1JzZ1BZTG8yTkpQWnBKTk13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xMGVmMTctZTEwNy00OWRhLTgxOTAtZDk5ZGE5NzBmZmEy LzEvMkhaanhlRlBFM1JzZ1BZTG8yTkpQWnBKTk13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXFBzUJr D0xDUa4EiVNA5GSUXEaibY6uvmM8vtsmKVldX5fCPAdqxCeBHVCY/HaT2EwPnCRT pfYVyqPkA3dpK1zrGbDKU9/77GBel7S9xft9EAayUpCDzF2HRfhF2nCH+7BtzZB/ g+m9fWQUCRT/g9WN2gRGDvxti+KW594KLYes2U6H6Bcv2+e88oyzowefLOSueVGs kY+dbN3oB+tDcNcorzb5mQn8aOEMpFFmZuBI18UB5851EzVPcsi3RXSjMhDlgbDF GKxPPxF5bItAdK3kM7SF3mGUrpZ8MiRodIdi1P6XsH7ojeQT9uAW80X7It9ETfMG Hmt+20/o5kVQWA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:32:21 2025 by rpki-client