This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft File: GqwOVjNDfnAN-YWImWKGzydis5c.mft (raw, json) Hash identifier: wN3CyDcXtdcohyZW1M2E1TRiP8hkhZ+Ro1UHScwEzjM= Subject key identifier: 4D:68:D0:DC:71:EE:F3:A8:DD:1A:50:46:A2:CD:90:66:33:13:60:73 Authority key identifier: 1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97 Certificate issuer: /CN=1aac0e5633437e700df98588996286cf2762b397 Certificate serial: 019B3079CFAFCED8E2AF38BEDC553180A1EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft Manifest number: 0236 Signing time: Thu 18 Dec 2025 08:00:47 +0000 Manifest this update: Thu 18 Dec 2025 08:00:47 +0000 Manifest next update: Fri 19 Dec 2025 08:00:47 +0000 Files and hashes: 1: GqwOVjNDfnAN-YWImWKGzydis5c.crl (hash: B/EqK446xtgFmsIHQTc20ruYsdmHmrVT0Ejd7EcG138=) 2: Z7scd0bqOcooSWNO6P1-J8lD1ZI.roa (hash: KdiHC1KssZd8y+s+NZVmdEHh2GbufRCimiylYpM1VS8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:cf:af:ce:d8:e2:af:38:be:dc:55:31:80:a1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aac0e5633437e700df98588996286cf2762b397 Validity Not Before: Dec 18 08:00:47 2025 GMT Not After : Dec 19 08:00:47 2025 GMT Subject: CN=4d68d0dc71eef3a8dd1a5046a2cd906633136073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:26:7e:e8:c6:79:b3:a3:f8:58:bb:83:1c:e7: ab:60:75:06:40:21:e6:c3:19:38:5d:ab:a4:e7:7d: 7d:3a:a9:d0:39:0f:7b:b3:a9:18:ec:d3:e2:52:9b: bf:43:be:8d:db:e5:ba:5f:79:99:a8:c2:86:83:5c: e2:d1:f1:13:28:c1:04:a4:2d:a8:68:95:42:81:ff: d2:6e:90:c8:56:91:35:51:42:98:f5:97:aa:95:b4: 60:8a:08:d5:89:77:80:8f:ea:1d:1f:8d:76:01:40: 19:08:d8:4c:0a:8c:3d:00:ad:29:34:96:60:1b:0c: 75:7f:4f:3d:09:35:49:0f:d8:7d:5d:46:fc:dd:1f: 7b:23:cd:89:2c:86:92:70:93:d6:67:04:7e:6f:76: 9c:e8:eb:a4:57:9c:cb:2b:e5:a4:6b:34:a5:0e:8d: cb:d2:03:b2:13:12:65:77:aa:e7:e5:de:0a:eb:12: 8f:0a:14:a7:49:74:55:6e:80:39:5e:23:95:93:b9: 4f:ef:98:0d:fa:74:d0:c2:8c:37:55:3f:a9:cd:d3: d9:34:22:13:df:dd:16:4c:c3:09:b3:ac:4c:50:08: ac:d2:ac:d5:ce:af:6a:16:68:7e:7e:75:ed:47:eb: 1b:34:f4:d5:eb:b7:20:f9:58:22:f4:70:c9:da:93: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:D0:DC:71:EE:F3:A8:DD:1A:50:46:A2:CD:90:66:33:13:60:73 X509v3 Authority Key Identifier: keyid:1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:12:f0:a3:b4:2a:3d:9b:01:19:c7:fb:cb:03:4a:d7:a5:4c: 0f:fa:8d:4f:ea:13:d2:3b:7c:1e:58:ec:37:d3:13:ac:4e:72: 63:90:32:7d:37:17:93:a9:c8:ef:5c:02:ac:91:94:e1:c9:98: 31:74:fc:2a:d0:5a:6d:26:21:93:06:a1:6e:b0:df:eb:e4:19: 82:7b:f8:7b:6d:bd:ea:05:3f:54:92:b4:99:11:82:8f:c6:2d: 49:00:06:23:ce:83:93:73:d8:58:00:d6:a3:f0:7a:0f:88:34: 06:95:f5:49:f9:86:bc:df:78:84:3a:82:77:f2:f6:43:83:56: 3f:1c:0f:9c:ad:21:28:8f:6b:66:0e:84:0e:fe:ee:fb:ba:a3: 76:b6:33:e8:03:1c:62:7a:3b:92:fc:e5:3a:f8:c9:0e:9a:e6: 3e:ff:0d:25:24:27:3b:17:6a:c9:f7:3b:cc:fe:9f:07:f9:5c: 06:d8:eb:08:32:f7:32:f3:2f:cb:1e:c8:df:48:77:07:b9:84: c9:7c:74:b4:1c:22:60:ec:ed:ae:44:12:3e:bd:2f:ea:ba:d4: 72:1a:65:86:70:fb:cd:77:6e:95:7f:74:c4:fb:db:ed:02:1e: 2c:3d:07:e6:fb:53:e0:c7:90:1a:49:b7:16:89:34:f7:70:e8: 48:d5:f3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswec+vztjirzi+3FUxgKHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYWMwZTU2MzM0MzdlNzAwZGY5ODU4ODk5NjI4NmNmMjc2 MmIzOTcwHhcNMjUxMjE4MDgwMDQ3WhcNMjUxMjE5MDgwMDQ3WjAzMTEwLwYDVQQD Eyg0ZDY4ZDBkYzcxZWVmM2E4ZGQxYTUwNDZhMmNkOTA2NjMzMTM2MDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CZ+6MZ5s6P4WLuDHOerYHUGQCHm wxk4Xauk5319OqnQOQ97s6kY7NPiUpu/Q76N2+W6X3mZqMKGg1zi0fETKMEEpC2o aJVCgf/SbpDIVpE1UUKY9ZeqlbRgigjViXeAj+odH412AUAZCNhMCow9AK0pNJZg Gwx1f089CTVJD9h9XUb83R97I82JLIaScJPWZwR+b3ac6OukV5zLK+WkazSlDo3L 0gOyExJld6rn5d4K6xKPChSnSXRVboA5XiOVk7lP75gN+nTQwow3VT+pzdPZNCIT 390WTMMJs6xMUAis0qzVzq9qFmh+fnXtR+sbNPTV67cg+Vgi9HDJ2pPT1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1o0Nxx7vOo3RpQRqLNkGYzE2BzMB8GA1UdIwQY MBaAFBqsDlYzQ35wDfmFiJlihs8nYrOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYt NTNjZDAyNjllYjU1LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYtNTNjZDAyNjllYjU1 LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8hLwo7Qq PZsBGcf7ywNK16VMD/qNT+oT0jt8HljsN9MTrE5yY5AyfTcXk6nI71wCrJGU4cmY MXT8KtBabSYhkwahbrDf6+QZgnv4e2296gU/VJK0mRGCj8YtSQAGI86Dk3PYWADW o/B6D4g0BpX1SfmGvN94hDqCd/L2Q4NWPxwPnK0hKI9rZg6EDv7u+7qjdrYz6AMc Yno7kvzlOvjJDprmPv8NJSQnOxdqyfc7zP6fB/lcBtjrCDL3MvMvyx7I30h3B7mE yXx0tBwiYOztrkQSPr0v6rrUchplhnD7zXdulX90xPvb7QIeLD0H5vtT4MeQGkm3 Fok093DoSNXzaA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:15 2025 by rpki-client