This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft File: FPsZA22DNH9Rl66gLaSmlbkYlYw.mft (raw, json) Hash identifier: Kn5jj1j+genpAdmovagRzh2g1Pngi9EKRYqYDkvP7lY= Subject key identifier: 1A:22:16:D2:73:C5:9D:4B:50:A4:24:B7:77:F8:A3:6E:99:E7:59:A8 Authority key identifier: 14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C Certificate issuer: /CN=14fb19036d83347f5197aea02da4a695b918958c Certificate serial: 019710F9EBEA378866410A23D84E94C8CE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft Manifest number: 0433 Signing time: Tue 27 May 2025 09:01:43 +0000 Manifest this update: Tue 27 May 2025 09:01:43 +0000 Manifest next update: Wed 28 May 2025 09:01:43 +0000 Files and hashes: 1: FPsZA22DNH9Rl66gLaSmlbkYlYw.crl (hash: vIUqynNKUmeeOniDF0XYMhEeS+YZgbqln8bGQuI7uco=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:10:f9:eb:ea:37:88:66:41:0a:23:d8:4e:94:c8:ce:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14fb19036d83347f5197aea02da4a695b918958c Validity Not Before: May 27 09:01:43 2025 GMT Not After : May 28 09:01:43 2025 GMT Subject: CN=1a2216d273c59d4b50a424b777f8a36e99e759a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:b3:b8:04:d4:65:21:80:de:b6:6e:d7:b4: 36:e0:e8:b5:3d:0e:d0:b6:d8:36:36:1b:dd:9e:b8: 84:2d:e2:6e:ef:e4:7b:2f:c3:e0:ab:76:ae:1b:cd: b8:f4:0a:f5:b7:c7:35:c4:4f:35:12:7b:73:4f:bc: 83:c0:af:85:02:81:90:e1:f4:07:ad:9f:f6:d5:ee: 38:6e:e0:53:58:5e:f7:03:71:dc:98:e2:4f:04:b6: fa:5d:28:b9:1c:73:88:72:d1:6c:3b:89:fb:31:23: 3d:7f:d8:f7:b0:b3:aa:d0:f9:34:33:85:2a:0d:b9: 01:45:04:0f:82:42:92:ec:bd:79:6a:f1:18:11:a9: 8c:68:e0:b4:39:bf:43:16:c8:60:5c:1e:cb:1d:18: 6b:7d:81:9d:ea:f5:e0:46:61:40:4d:8d:27:c6:c9: e0:e7:a9:af:63:11:c8:f9:28:5e:0f:ec:eb:3a:1d: 73:82:8f:1b:ae:a3:5c:09:3a:cf:e2:02:7b:99:10: 9b:f3:64:92:66:b9:fb:83:60:76:69:30:9e:31:5c: c0:83:fa:b5:79:c2:8b:5c:63:05:57:47:6d:13:4b: f8:cf:05:b5:12:11:65:e2:8c:4e:63:e3:a7:c8:81: b1:a1:5c:20:4d:03:2f:eb:76:e5:c0:4c:a6:32:49: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:22:16:D2:73:C5:9D:4B:50:A4:24:B7:77:F8:A3:6E:99:E7:59:A8 X509v3 Authority Key Identifier: keyid:14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cb:f5:04:f9:47:6f:e5:df:73:82:e7:73:67:e3:e4:1d:8c: f7:44:2c:7c:99:08:d1:03:ad:a3:64:fa:e2:0c:8e:85:35:d0: 2d:b6:7b:ee:7d:b7:89:da:5f:19:5f:29:0d:75:20:e6:0f:3e: 7b:89:0c:6d:09:51:2f:cc:75:e4:53:2d:68:87:18:d0:f1:cc: a7:51:a1:4c:62:22:30:d2:52:33:2d:e7:a7:7a:75:1d:33:9b: c8:02:ba:74:48:7e:fa:d6:13:00:28:b7:84:d2:5e:eb:3f:e7: 98:dc:ee:75:b1:75:c5:d5:f9:81:ea:b7:2b:d4:2f:03:0a:c3: a4:00:21:41:71:49:18:cb:42:95:8b:be:c8:ee:55:22:7b:75: 34:ae:0e:78:a0:2d:ae:48:ab:89:74:e1:df:00:63:a7:7d:ec: ab:27:a8:d0:8b:36:64:8b:b3:2c:fe:a7:bd:02:99:4f:da:7a: 30:08:22:7b:b6:2a:12:02:db:85:20:31:cf:f7:e1:94:44:84: 35:c4:15:7f:ab:cd:fe:c2:c5:b6:d2:c8:b2:74:4e:c5:29:e5: 0d:4f:02:88:f4:84:d1:db:69:0a:32:ef:2a:e6:75:1b:21:7e: 39:fe:a5:57:95:ed:01:f5:96:4e:a2:ae:42:b7:82:38:14:1c: 35:ad:eb:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcQ+evqN4hmQQoj2E6UyM6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZmIxOTAzNmQ4MzM0N2Y1MTk3YWVhMDJkYTRhNjk1Yjkx ODk1OGMwHhcNMjUwNTI3MDkwMTQzWhcNMjUwNTI4MDkwMTQzWjAzMTEwLwYDVQQD EygxYTIyMTZkMjczYzU5ZDRiNTBhNDI0Yjc3N2Y4YTM2ZTk5ZTc1OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjizuATUZSGA3rZu17Q24Oi1PQ7Q ttg2NhvdnriELeJu7+R7L8Pgq3auG8249Ar1t8c1xE81EntzT7yDwK+FAoGQ4fQH rZ/21e44buBTWF73A3HcmOJPBLb6XSi5HHOIctFsO4n7MSM9f9j3sLOq0Pk0M4Uq DbkBRQQPgkKS7L15avEYEamMaOC0Ob9DFshgXB7LHRhrfYGd6vXgRmFATY0nxsng 56mvYxHI+SheD+zrOh1zgo8brqNcCTrP4gJ7mRCb82SSZrn7g2B2aTCeMVzAg/q1 ecKLXGMFV0dtE0v4zwW1EhFl4oxOY+OnyIGxoVwgTQMv63blwEymMkmB0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoiFtJzxZ1LUKQkt3f4o26Z51moMB8GA1UdIwQY MBaAFBT7GQNtgzR/UZeuoC2kppW5GJWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlBzWkEyMkROSDlSbDY2Z0xhU21sYmtZbFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMWQ3ZGEtZWRjMi00Njc0LWFlOGQt MjllNjYzZWRkZGRlLzEvRlBzWkEyMkROSDlSbDY2Z0xhU21sYmtZbFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMWQ3ZGEtZWRjMi00Njc0LWFlOGQtMjllNjYzZWRkZGRl LzEvRlBzWkEyMkROSDlSbDY2Z0xhU21sYmtZbFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMv1BPlH b+Xfc4Lnc2fj5B2M90QsfJkI0QOto2T64gyOhTXQLbZ77n23idpfGV8pDXUg5g8+ e4kMbQlRL8x15FMtaIcY0PHMp1GhTGIiMNJSMy3np3p1HTObyAK6dEh++tYTACi3 hNJe6z/nmNzudbF1xdX5geq3K9QvAwrDpAAhQXFJGMtClYu+yO5VInt1NK4OeKAt rkiriXTh3wBjp33sqyeo0Is2ZIuzLP6nvQKZT9p6MAgie7YqEgLbhSAxz/fhlESE NcQVf6vN/sLFttLIsnROxSnlDU8CiPSE0dtpCjLvKuZ1GyF+Of6lV5XtAfWWTqKu QreCOBQcNa3rQw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:16 2026 by rpki-client