This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json) Hash identifier: obKKBrxDsNMueJ6w58yHj1cs8C0d0aswuUS+H2L3GVo= Subject key identifier: D1:8F:D5:84:51:35:6A:C8:50:ED:AB:95:E7:64:57:7C:EE:48:D5:FE Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f Certificate serial: 019A8F547057490080F79393E02D5A361C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft Manifest number: 0386 Signing time: Mon 17 Nov 2025 01:01:06 +0000 Manifest this update: Mon 17 Nov 2025 01:01:06 +0000 Manifest next update: Tue 18 Nov 2025 01:01:06 +0000 Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: Ts5MDq77Exz8nE+5+I4Cxpf5suDGTPy36C/yhIhFJEg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8f:54:70:57:49:00:80:f7:93:93:e0:2d:5a:36:1c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f Validity Not Before: Nov 17 01:01:06 2025 GMT Not After : Nov 18 01:01:06 2025 GMT Subject: CN=d18fd58451356ac850edab95e764577cee48d5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:4e:88:25:98:cf:56:4d:76:f1:5f:d4:cd: 58:a6:42:bd:80:9b:87:52:34:62:ad:13:4e:19:d9: 7a:c1:35:5c:41:c0:3a:50:6c:00:b0:5f:68:32:dc: 32:b1:63:45:80:1d:9e:b5:4a:85:73:6b:3b:96:44: 26:d4:80:63:0c:fc:99:20:1b:ec:c2:ee:f9:bd:7a: b9:6a:0a:db:a7:26:cf:0a:cf:7b:b9:f3:2b:85:79: a5:fc:57:f3:6e:d7:10:15:f6:99:f0:9d:d1:5c:77: 15:68:c7:93:a0:36:e2:9d:7f:99:3c:ba:0c:9a:c2: 3b:4e:90:c4:1c:ec:93:36:60:e0:f1:52:da:c1:85: db:6e:44:06:6f:02:96:30:f1:7e:50:30:14:33:1b: fd:c4:0f:15:f2:07:4b:a2:37:c1:4d:c8:95:11:cd: 2c:fa:fe:54:18:c5:fe:a7:b3:9f:49:7c:5f:4d:8b: f5:1d:4c:e6:1c:2a:b0:e7:78:9a:c6:85:c3:71:bd: 48:17:2f:3b:c4:96:5f:8a:72:53:c9:3c:5f:3a:31: 07:06:ef:0c:d4:97:90:07:45:64:f0:6a:cb:5b:df: 9c:cc:68:1b:ae:02:37:b7:98:b4:c4:4e:c3:6b:de: dd:eb:21:5b:2b:ae:ab:b6:33:99:2e:5f:4b:85:1e: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8F:D5:84:51:35:6A:C8:50:ED:AB:95:E7:64:57:7C:EE:48:D5:FE X509v3 Authority Key Identifier: keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:64:57:3c:f6:10:1b:8b:53:35:0a:9a:e1:0e:6d:8a:61: 7c:df:c5:7c:54:45:e1:7f:b1:14:83:bc:34:f5:82:9c:5f:aa: 82:0f:65:b1:ff:89:61:db:5c:78:29:52:af:8c:19:95:7b:69: 45:e5:0b:40:3b:29:c6:df:8f:6e:5f:e9:0f:6a:e7:07:96:69: 1d:67:73:43:83:7f:87:08:9a:74:b7:93:56:70:02:85:26:26: 79:dc:d2:05:19:11:9f:ae:66:cc:6a:36:30:c5:44:e1:2d:80: e8:c5:a6:d0:d9:fd:bf:b8:7e:e3:56:36:bc:b3:5e:00:51:b7: b1:ec:94:36:d7:88:d1:5b:ca:a3:21:bc:f5:26:bb:cc:2d:f8: 40:bc:24:59:d4:29:f2:9a:70:b2:e9:8c:ae:3a:13:49:7c:dc: 19:98:50:fa:32:2d:41:bd:00:6e:ad:68:4c:1e:f8:80:7d:14: a7:13:cf:29:ba:e8:4b:69:62:a8:ab:8c:20:82:60:56:68:1d: e1:1c:a1:82:7d:d6:34:70:33:6d:7f:fe:5b:7a:d3:3a:96:cf: 5a:ac:3a:fa:13:e1:fc:11:ad:9c:93:a1:f4:25:94:ce:17:3e: af:f6:7a:43:b3:3b:44:c5:a0:3d:b4:75:aa:0f:10:44:9e:b4: a9:70:3d:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqPVHBXSQCA95OT4C1aNhw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0M2UyYjlmYmM4YjQ3NzJjZjgwMDA3NDhjNDdkZDQzN2Iz YzU5OGYwHhcNMjUxMTE3MDEwMTA2WhcNMjUxMTE4MDEwMTA2WjAzMTEwLwYDVQQD EyhkMThmZDU4NDUxMzU2YWM4NTBlZGFiOTVlNzY0NTc3Y2VlNDhkNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGNOiCWYz1ZNdvFf1M1YpkK9gJuH UjRirRNOGdl6wTVcQcA6UGwAsF9oMtwysWNFgB2etUqFc2s7lkQm1IBjDPyZIBvs wu75vXq5agrbpybPCs97ufMrhXml/FfzbtcQFfaZ8J3RXHcVaMeToDbinX+ZPLoM msI7TpDEHOyTNmDg8VLawYXbbkQGbwKWMPF+UDAUMxv9xA8V8gdLojfBTciVEc0s +v5UGMX+p7OfSXxfTYv1HUzmHCqw53iaxoXDcb1IFy87xJZfinJTyTxfOjEHBu8M 1JeQB0Vk8GrLW9+czGgbrgI3t5i0xE7Da97d6yFbK66rtjOZLl9LhR6EOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGP1YRRNWrIUO2rledkV3zuSNX+MB8GA1UdIwQY MBaAFKQ+K5+8i0dyz4AAdIxH3UN7PFmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOGY5ZDktNGYyNS00ODE4LWIzM2Mt YjAwMWU1YmFkMDE3LzEvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iOGY5ZDktNGYyNS00ODE4LWIzM2MtYjAwMWU1YmFkMDE3 LzEvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLJkVzz2 EBuLUzUKmuEObYphfN/FfFRF4X+xFIO8NPWCnF+qgg9lsf+JYdtceClSr4wZlXtp ReULQDspxt+Pbl/pD2rnB5ZpHWdzQ4N/hwiadLeTVnAChSYmedzSBRkRn65mzGo2 MMVE4S2A6MWm0Nn9v7h+41Y2vLNeAFG3seyUNteI0VvKoyG89Sa7zC34QLwkWdQp 8ppwsumMrjoTSXzcGZhQ+jItQb0Abq1oTB74gH0UpxPPKbroS2liqKuMIIJgVmgd 4Ryhgn3WNHAzbX/+W3rTOpbPWqw6+hPh/BGtnJOh9CWUzhc+r/Z6Q7M7RMWgPbR1 qg8QRJ60qXA9aw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:22 2025 by rpki-client