This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft File: gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json) Hash identifier: OgxYjwJhTB8nbOGGt+22jhceUE/owAAoyL8Lo45qZZA= Subject key identifier: D8:4E:C9:87:71:12:64:10:5C:2A:09:5B:5A:FA:6A:E3:32:49:E9:DB Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75 Certificate issuer: /CN=8174861ddef06a073523c9939168d5b7169d6875 Certificate serial: 0199A34B31650E912C8D34249504A21DA706 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft Manifest number: 08F3 Signing time: Thu 02 Oct 2025 05:00:37 +0000 Manifest this update: Thu 02 Oct 2025 05:00:37 +0000 Manifest next update: Fri 03 Oct 2025 05:00:37 +0000 Files and hashes: 1: E-w5M4eQP91wEOXM7w1SR0QOmxg.roa (hash: +jFSsPpUEMM2UeClDBFj9F6a9KDL4VbEDLgdyScKqB4=) 2: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: XRS1xfcZscKLCium+Yp/iz+UUVOAU8DlAmFd/876ki0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:a3:4b:31:65:0e:91:2c:8d:34:24:95:04:a2:1d:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875 Validity Not Before: Oct 2 05:00:37 2025 GMT Not After : Oct 3 05:00:37 2025 GMT Subject: CN=d84ec987711264105c2a095b5afa6ae33249e9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:89:63:8c:ca:5c:79:24:b3:02:a4:c1:3b: 3b:b1:51:16:0b:19:c3:ed:f3:06:cb:f5:56:9d:0f: 60:b9:43:86:89:7b:da:5d:1e:a6:7b:a7:a0:27:68: 00:c1:12:0f:9f:a3:b7:d9:17:02:7a:df:d2:d8:30: 1e:49:25:79:b5:b3:2d:f7:a4:06:d9:d8:31:87:c7: 93:65:8d:e8:33:46:e3:31:12:d0:eb:79:c8:36:c6: c8:de:70:37:db:5a:10:1f:96:42:fb:8a:97:77:cd: 46:87:e5:a3:83:82:0e:62:9d:cc:47:7a:d4:61:78: 7f:d0:7a:be:50:0f:c7:be:8c:f8:2a:e2:e4:69:62: b5:3b:a2:d7:d8:83:4b:eb:35:3c:1a:12:39:86:fe: 42:7f:70:89:81:29:9f:77:41:53:d1:31:02:c2:1d: 8b:00:e7:23:73:c1:00:e6:28:a7:b8:b9:96:b6:bc: 01:3d:f4:7a:47:2f:12:41:91:d5:df:9c:44:e4:0a: fd:b3:2d:d0:20:28:93:6c:02:a4:4f:52:fc:71:84: 30:08:24:d8:85:bf:69:b1:cd:06:27:5b:17:c9:5f: ee:22:20:1b:0f:60:1e:fd:07:17:c3:2c:21:13:ae: 9f:e3:c5:6f:2c:df:be:ae:55:8d:99:93:6c:1b:da: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:C9:87:71:12:64:10:5C:2A:09:5B:5A:FA:6A:E3:32:49:E9:DB X509v3 Authority Key Identifier: keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ed:3e:7f:bc:a3:c1:7f:63:89:54:10:5c:67:71:04:aa:53: f7:60:e6:54:85:a7:44:6b:6a:1f:df:d8:cf:64:ea:0a:39:8c: 05:b5:57:c8:51:a3:a5:b6:66:d8:e9:0f:74:d8:4e:37:8b:37: 5d:32:e8:5c:39:91:65:f3:df:c6:05:a0:82:b6:73:dc:cb:39: 44:1d:de:27:43:1a:4f:b8:bd:61:d0:ed:a4:5a:b4:dd:82:50: f7:8a:62:08:f3:08:8e:f3:d0:0f:4b:07:27:b0:06:a8:98:8a: 65:e5:fa:35:33:7f:06:10:43:e2:19:ad:cb:ab:93:6c:11:80: f5:96:04:0b:f7:e3:a8:2d:f0:10:64:31:21:2f:81:70:c5:4d: ba:a6:5d:24:0f:44:8a:17:1b:b7:9e:5d:6b:ba:bd:c1:10:ba: 87:bb:e5:de:98:3a:14:44:e9:3c:6f:88:d5:b4:70:a3:6e:c5: 96:44:72:7d:e8:fe:e7:71:8d:11:57:11:f1:4f:f8:90:4d:06: 62:19:01:8f:bc:3b:00:cb:59:7d:ab:fe:e6:a3:92:f9:33:f1: e4:ee:c0:c9:67:ef:df:61:41:62:6f:3b:16:47:da:fe:b8:74: 2e:14:1d:69:0c:44:b5:6c:44:a8:c5:1f:a3:4a:28:79:d1:9f: 99:13:80:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZmjSzFlDpEsjTQklQSiHacGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzQ4NjFkZGVmMDZhMDczNTIzYzk5MzkxNjhkNWI3MTY5 ZDY4NzUwHhcNMjUxMDAyMDUwMDM3WhcNMjUxMDAzMDUwMDM3WjAzMTEwLwYDVQQD EyhkODRlYzk4NzcxMTI2NDEwNWMyYTA5NWI1YWZhNmFlMzMyNDllOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk2JY4zKXHkkswKkwTs7sVEWCxnD 7fMGy/VWnQ9guUOGiXvaXR6me6egJ2gAwRIPn6O32RcCet/S2DAeSSV5tbMt96QG 2dgxh8eTZY3oM0bjMRLQ63nINsbI3nA321oQH5ZC+4qXd81Gh+Wjg4IOYp3MR3rU YXh/0Hq+UA/Hvoz4KuLkaWK1O6LX2INL6zU8GhI5hv5Cf3CJgSmfd0FT0TECwh2L AOcjc8EA5iinuLmWtrwBPfR6Ry8SQZHV35xE5Ar9sy3QICiTbAKkT1L8cYQwCCTY hb9psc0GJ1sXyV/uIiAbD2Ae/QcXwywhE66f48VvLN++rlWNmZNsG9qI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhOyYdxEmQQXCoJW1r6auMySenbMB8GA1UdIwQY MBaAFIF0hh3e8GoHNSPJk5Fo1bcWnWh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYmQxNWEtNGM0OS00MGZjLTkxOTIt YjJhNDdlZDQxNmIyLzEvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYmQxNWEtNGM0OS00MGZjLTkxOTItYjJhNDdlZDQxNmIy LzEvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu0+f7yj wX9jiVQQXGdxBKpT92DmVIWnRGtqH9/Yz2TqCjmMBbVXyFGjpbZm2OkPdNhON4s3 XTLoXDmRZfPfxgWggrZz3Ms5RB3eJ0MaT7i9YdDtpFq03YJQ94piCPMIjvPQD0sH J7AGqJiKZeX6NTN/BhBD4hmty6uTbBGA9ZYEC/fjqC3wEGQxIS+BcMVNuqZdJA9E ihcbt55da7q9wRC6h7vl3pg6FETpPG+I1bRwo27FlkRyfej+53GNEVcR8U/4kE0G YhkBj7w7AMtZfav+5qOS+TPx5O7AyWfv32FBYm87Fkfa/rh0LhQdaQxEtWxEqMUf o0ooedGfmROAoQ== -----END CERTIFICATE-----Generated at Mon Jan 12 03:00:27 2026 by rpki-client