This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft File: fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json) Hash identifier: B4g1bqVHbnHJuuukSexuP9/YLQIx/COGyzoCa6Lx33Q= Subject key identifier: A9:44:3A:F5:CC:01:99:C0:83:FF:48:FC:F2:E1:46:B9:A4:1E:8F:A6 Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4 Certificate issuer: /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4 Certificate serial: 019B4DDFA57A7A957D9ACFB6141DED422705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 01:01:01 +0000 Manifest this update: Wed 24 Dec 2025 01:01:01 +0000 Manifest next update: Thu 25 Dec 2025 01:01:01 +0000 Files and hashes: 1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: pjJ5bEXgNXywVnezLUIj5yq8IbtImTurTtLvMWyOPf8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:a5:7a:7a:95:7d:9a:cf:b6:14:1d:ed:42:27:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4 Validity Not Before: Dec 24 01:01:01 2025 GMT Not After : Dec 25 01:01:01 2025 GMT Subject: CN=a9443af5cc0199c083ff48fcf2e146b9a41e8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:a8:2f:44:56:91:3f:29:87:5d:0e:30:dd: 76:1b:b3:d5:96:17:91:62:97:b4:51:01:6c:1f:6d: d6:d2:7b:17:ef:df:46:d8:23:25:5c:75:3d:31:6b: d6:07:2b:7a:37:b4:c7:59:0a:c7:a2:77:cc:58:04: 22:92:cc:49:e6:79:69:38:1b:9b:ca:20:02:1b:2c: f2:61:69:3e:e6:0e:6c:1a:51:cc:df:91:16:3e:2d: f1:16:10:6f:61:e1:aa:f9:91:26:a4:71:21:b2:72: cf:5a:15:6a:7e:9d:da:01:8d:6d:f9:68:95:fc:ac: e5:d3:78:bd:ff:8b:16:f7:88:c7:25:5d:c2:16:c8: 57:bc:63:b8:1d:23:80:76:52:5e:64:47:d1:2e:38: d1:49:e3:94:60:9f:3f:cf:6e:a6:1a:a3:e9:aa:00: 77:39:a1:fa:6b:e4:b0:5c:34:59:27:78:43:f6:8a: b8:2a:f1:6b:f8:26:3a:ed:c8:35:fb:26:7e:46:f8: cf:04:88:01:cf:8d:25:1f:82:6d:18:fb:b9:10:a2: 45:3b:66:bd:27:b3:65:7f:7c:fc:ed:ea:4c:a3:51: 07:e2:f8:67:09:fe:11:61:87:13:8a:16:49:d6:fa: 9d:69:76:13:5f:8a:81:4d:7b:ae:a3:91:22:14:55: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:3A:F5:CC:01:99:C0:83:FF:48:FC:F2:E1:46:B9:A4:1E:8F:A6 X509v3 Authority Key Identifier: keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:39:b2:a3:42:78:5e:3a:0d:fa:dd:6e:27:2a:36:14:35:6d: 3a:17:e1:ba:8b:dd:3c:f2:1a:e7:e7:6d:cb:87:6c:4c:44:6c: 0a:a0:76:55:5f:53:d0:80:57:0a:c4:ff:20:c2:2c:29:80:5f: 59:a4:e3:df:61:cb:5b:f9:9b:9c:1a:d4:c3:19:c3:22:c5:39: 77:02:c8:23:0a:44:ce:a7:9e:5a:c4:e8:96:cd:ee:7f:8b:f3: 9c:8c:92:31:9d:e5:df:25:5e:d8:76:9d:72:04:f5:e1:90:32: 44:89:72:ee:4f:5a:5a:83:03:72:0d:44:8b:7e:a9:0f:3f:39: 89:8e:e7:fd:72:91:f5:4a:d4:3f:ed:34:5a:f0:04:90:b1:dc: 18:62:ae:32:11:e9:79:28:ac:09:c2:1b:e5:eb:ca:85:74:86: 52:ff:36:fa:b7:97:9f:77:3e:03:ac:ba:a8:f2:f4:93:78:65: 8d:da:c5:f4:cd:c8:74:51:fd:3d:c8:18:22:c9:e9:be:ce:58: 8e:ef:bc:d3:95:a3:1f:67:f1:65:3c:e3:f3:3a:30:b1:a2:b8: 4d:1a:de:e8:ac:55:f4:32:f5:14:f6:2c:65:2f:74:54:ea:5b: 9d:4b:b7:96:0d:eb:c3:ee:d0:e0:43:0d:c9:7f:04:c2:85:a1: e4:b9:38:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN36V6epV9ms+2FB3tQicFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDRkZDljODJiMTkxYTVmMDlkNjA2Y2E1NTBjMDE3Nzg1 YWVlYzQwHhcNMjUxMjI0MDEwMTAxWhcNMjUxMjI1MDEwMTAxWjAzMTEwLwYDVQQD EyhhOTQ0M2FmNWNjMDE5OWMwODNmZjQ4ZmNmMmUxNDZiOWE0MWU4ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraqoL0RWkT8ph10OMN12G7PVlheR Ype0UQFsH23W0nsX799G2CMlXHU9MWvWByt6N7THWQrHonfMWAQiksxJ5nlpOBub yiACGyzyYWk+5g5sGlHM35EWPi3xFhBvYeGq+ZEmpHEhsnLPWhVqfp3aAY1t+WiV /Kzl03i9/4sW94jHJV3CFshXvGO4HSOAdlJeZEfRLjjRSeOUYJ8/z26mGqPpqgB3 OaH6a+SwXDRZJ3hD9oq4KvFr+CY67cg1+yZ+RvjPBIgBz40lH4JtGPu5EKJFO2a9 J7Nlf3z87epMo1EH4vhnCf4RYYcTihZJ1vqdaXYTX4qBTXuuo5EiFFUXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlEOvXMAZnAg/9I/PLhRrmkHo+mMB8GA1UdIwQY MBaAFH4E3ZyCsZGl8J1gbKVQwBd4Wu7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWI4YjItMThkNC00NTI3LThmNmIt NTZlNDRmOWY5OTE0LzEvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81NWI4YjItMThkNC00NTI3LThmNmItNTZlNDRmOWY5OTE0 LzEvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjmyo0J4 XjoN+t1uJyo2FDVtOhfhuovdPPIa5+dty4dsTERsCqB2VV9T0IBXCsT/IMIsKYBf WaTj32HLW/mbnBrUwxnDIsU5dwLIIwpEzqeeWsTols3uf4vznIySMZ3l3yVe2Had cgT14ZAyRIly7k9aWoMDcg1Ei36pDz85iY7n/XKR9UrUP+00WvAEkLHcGGKuMhHp eSisCcIb5evKhXSGUv82+reXn3c+A6y6qPL0k3hljdrF9M3IdFH9PcgYIsnpvs5Y ju+805WjH2fxZTzj8zowsaK4TRre6KxV9DL1FPYsZS90VOpbnUu3lg3rw+7Q4EMN yX8EwoWh5Lk40Q== -----END CERTIFICATE-----Generated at Mon Jan 12 09:57:19 2026 by rpki-client