This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json) Hash identifier: NuM0CtrFCnStAdgQ/moyaW54/yicu4U75IcKjxd43Vs= Subject key identifier: F9:27:E4:F6:A1:6E:38:51:73:25:3C:3A:19:27:C1:BA:44:4A:2D:BA Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9 Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9 Certificate serial: 019B48B940F9C6E9E3EBFA1C664993222CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft Manifest number: 1799 Signing time: Tue 23 Dec 2025 01:00:58 +0000 Manifest this update: Tue 23 Dec 2025 01:00:58 +0000 Manifest next update: Wed 24 Dec 2025 01:00:58 +0000 Files and hashes: 1: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: LjBmNK016toEjmsvVIkQwZGfohns26hc38glQl4jAos=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:40:f9:c6:e9:e3:eb:fa:1c:66:49:93:22:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9 Validity Not Before: Dec 23 01:00:58 2025 GMT Not After : Dec 24 01:00:58 2025 GMT Subject: CN=f927e4f6a16e385173253c3a1927c1ba444a2dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:a8:1b:3c:92:29:95:68:b5:02:d4:c2:a8: 83:0b:68:4b:1f:54:fe:1d:52:db:4d:cd:08:41:46: f3:74:f5:01:eb:87:57:0a:9c:b3:86:71:13:1b:c4: d9:86:5d:21:7f:a8:e3:e0:0f:85:4a:fc:4d:69:6a: c9:39:89:42:9f:c3:52:1c:2a:3e:39:0b:74:50:ce: b6:77:70:17:9b:f6:70:70:ce:34:79:79:79:66:06: 78:85:70:e8:7e:75:cd:8c:e6:5a:fa:1b:0e:05:5f: c4:2e:e6:64:ce:8d:f7:47:69:ba:72:13:cb:5a:54: ca:39:8f:90:67:30:00:32:fd:2f:4a:11:55:52:21: 8b:9a:22:e1:33:56:83:db:92:22:3d:6c:d2:fd:17: 7a:b6:6a:16:e5:70:7a:42:5f:b4:b3:80:1c:ef:75: 91:25:97:30:f5:0b:80:d4:b7:5a:fa:e6:8f:e2:3d: 2b:8c:3a:73:60:04:f8:cf:fe:1b:9a:29:52:d7:0e: fc:61:75:52:24:64:0d:b4:57:a9:4f:ab:05:c8:5e: 92:20:9f:2c:c0:ac:66:81:9a:69:a0:35:19:92:cb: 70:81:d4:dd:97:90:95:5d:e2:e6:70:35:ff:ca:14: 50:ba:cd:d4:79:b6:0e:c6:97:f4:2f:79:d2:25:7b: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:27:E4:F6:A1:6E:38:51:73:25:3C:3A:19:27:C1:BA:44:4A:2D:BA X509v3 Authority Key Identifier: keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6c:3c:e3:e7:1b:a5:a3:9d:ec:62:03:4f:f2:59:23:69:d8: f4:e0:c1:7d:49:03:4a:63:ea:53:01:28:33:72:35:43:56:db: fc:32:ff:30:d4:fb:68:18:3b:fd:90:c6:ea:24:ca:4b:36:c6: 1d:54:6e:20:63:bb:82:9b:98:75:47:b1:7b:cb:68:4b:0b:c4: 8e:eb:b1:6c:71:8f:73:f8:5f:2a:c9:de:f4:03:d6:8a:85:d2: fb:cf:b4:c4:67:1f:46:99:66:15:e9:93:bc:3b:32:5b:bd:44: 50:01:73:98:6c:44:7b:eb:ec:87:ea:e9:67:5e:41:49:bd:60: ef:90:12:5c:26:22:4e:7c:55:97:34:06:3b:d4:11:15:70:41: b9:e1:e5:24:d0:70:42:86:67:a7:37:f7:30:22:d4:81:ff:ee: 51:04:1d:a4:84:4f:36:0e:d9:99:34:86:17:cb:3b:74:39:a0: 6a:7e:a0:49:8b:f9:67:ab:b1:d4:72:f4:fe:56:8a:dc:08:b2: 7a:bb:14:9a:ca:be:2b:8e:e6:1e:e0:f2:32:96:1b:0a:d0:df: 82:58:50:de:35:b2:20:44:59:1a:48:58:b4:d6:c9:c2:b9:97: 87:82:67:dd:60:e0:f1:54:cc:2c:39:f5:a6:58:26:f5:6c:1b: d9:4d:f8:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuUD5xunj6/ocZkmTIiymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OWI4NmY5OWUyZDZiZGUxNGZhODc5OWRlNzFjZTQxYjk4 MDIwYjkwHhcNMjUxMjIzMDEwMDU4WhcNMjUxMjI0MDEwMDU4WjAzMTEwLwYDVQQD EyhmOTI3ZTRmNmExNmUzODUxNzMyNTNjM2ExOTI3YzFiYTQ0NGEyZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIWoGzySKZVotQLUwqiDC2hLH1T+ HVLbTc0IQUbzdPUB64dXCpyzhnETG8TZhl0hf6jj4A+FSvxNaWrJOYlCn8NSHCo+ OQt0UM62d3AXm/ZwcM40eXl5ZgZ4hXDofnXNjOZa+hsOBV/ELuZkzo33R2m6chPL WlTKOY+QZzAAMv0vShFVUiGLmiLhM1aD25IiPWzS/Rd6tmoW5XB6Ql+0s4Ac73WR JZcw9QuA1Lda+uaP4j0rjDpzYAT4z/4bmilS1w78YXVSJGQNtFepT6sFyF6SIJ8s wKxmgZppoDUZkstwgdTdl5CVXeLmcDX/yhRQus3UebYOxpf0L3nSJXudXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkn5PahbjhRcyU8OhknwbpESi26MB8GA1UdIwQY MBaAFAWbhvmeLWveFPqHmd5xzkG5gCC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlp1Ry1aNHRhOTRVLW9lWjNuSE9RYm1BSUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNTg0MTYtMjc1Mi00MTU5LWFkZDYt Y2MzZmIzNTFlMzM2LzEvQlp1Ry1aNHRhOTRVLW9lWjNuSE9RYm1BSUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNTg0MTYtMjc1Mi00MTU5LWFkZDYtY2MzZmIzNTFlMzM2 LzEvQlp1Ry1aNHRhOTRVLW9lWjNuSE9RYm1BSUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGw84+cb paOd7GIDT/JZI2nY9ODBfUkDSmPqUwEoM3I1Q1bb/DL/MNT7aBg7/ZDG6iTKSzbG HVRuIGO7gpuYdUexe8toSwvEjuuxbHGPc/hfKsne9APWioXS+8+0xGcfRplmFemT vDsyW71EUAFzmGxEe+vsh+rpZ15BSb1g75ASXCYiTnxVlzQGO9QRFXBBueHlJNBw QoZnpzf3MCLUgf/uUQQdpIRPNg7ZmTSGF8s7dDmgan6gSYv5Z6ux1HL0/laK3Aiy ersUmsq+K47mHuDyMpYbCtDfglhQ3jWyIERZGkhYtNbJwrmXh4Jn3WDg8VTMLDn1 plgm9Wwb2U34yw== -----END CERTIFICATE-----Generated at Sun Dec 28 10:51:14 2025 by rpki-client