This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json) Hash identifier: Y7GvZUHaMhYF4klcNyp1hX9mHdlT5e6i3dwsBbrF2gA= Subject key identifier: 90:80:6E:3E:CB:38:06:A3:32:81:3E:CC:DB:21:20:BD:AE:1B:B4:44 Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c Certificate serial: 019A58D3F83FD06C3F7621A555002B30AFCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft Manifest number: 0705 Signing time: Thu 06 Nov 2025 11:01:17 +0000 Manifest this update: Thu 06 Nov 2025 11:01:17 +0000 Manifest next update: Fri 07 Nov 2025 11:01:17 +0000 Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=) 2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: FD9w1Z/pU2azif+vGrr78Capeo1m8EGhGWIEh3FOogs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:d3:f8:3f:d0:6c:3f:76:21:a5:55:00:2b:30:af:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab33743a654906143399f903704801682638e7c Validity Not Before: Nov 6 11:01:17 2025 GMT Not After : Nov 7 11:01:17 2025 GMT Subject: CN=90806e3ecb3806a332813eccdb2120bdae1bb444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:aa:c1:7c:ea:e7:c5:6a:c5:7a:09:3c:57: 1b:fa:b8:d4:a6:6d:ba:68:eb:dd:d4:45:8c:75:12: d2:97:2d:31:96:36:71:b7:10:40:72:89:0f:08:43: 66:8a:83:a8:8c:f6:77:56:05:35:6e:c0:5d:b3:31: 79:b9:1a:a2:54:03:0f:ca:b7:14:d6:5b:16:2c:3c: 4e:e7:7e:46:2d:6c:cf:6c:f2:6b:2e:94:8e:db:b7: 88:b0:9f:12:8e:18:03:f7:ba:54:28:e5:4c:89:dc: 5c:29:45:47:b6:f2:e6:6e:82:dd:18:3e:17:fc:2d: b3:e3:0e:81:53:f9:e2:d7:88:7c:96:44:6b:23:77: 53:43:e6:ad:96:71:06:16:36:64:d8:44:7d:1f:67: 9f:59:69:c1:78:ac:a0:8f:7b:95:35:e0:0b:af:d5: 01:58:f8:b3:8f:d1:07:c4:40:a5:6f:16:c6:98:e8: ad:54:42:1a:f7:67:9f:3e:e3:e3:2f:c8:74:0b:9c: b0:3c:3d:2d:d2:35:3f:01:43:91:d3:2e:d0:8c:32: 76:36:9b:21:1e:eb:51:a7:a5:78:8c:02:93:28:eb: 5c:10:4d:b9:3d:f7:1b:6b:9a:58:5e:49:e1:52:cf: 80:9d:7d:0c:fd:e6:65:46:2f:61:82:a0:66:21:29: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:6E:3E:CB:38:06:A3:32:81:3E:CC:DB:21:20:BD:AE:1B:B4:44 X509v3 Authority Key Identifier: keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ce:cb:5c:76:4d:fa:d6:c3:25:0c:38:c0:45:cc:54:c6:13: dc:08:6a:97:d8:c2:41:7e:04:52:7d:fc:05:d4:4e:2a:40:be: 40:b6:5a:fc:7b:1b:3c:61:7e:16:15:c1:4c:89:a2:69:f2:ff: 8e:68:61:77:f8:a8:9b:54:8b:88:5a:14:f5:9e:09:c3:fc:2f: 5b:6d:6b:99:5a:3a:56:09:e2:70:81:03:3e:f5:4e:b6:85:0d: 1f:6f:03:9f:ce:9c:75:f4:d3:79:b8:31:40:60:a0:12:55:96: f2:8d:e0:29:1d:7f:1e:45:82:c3:bf:2a:0d:52:a9:5e:45:e6: db:ed:ee:33:6c:97:ee:af:e6:b2:f8:dd:ea:47:a5:56:ac:8a: d9:d7:1c:f9:f7:5a:dc:a1:40:59:d2:f3:ff:cd:d2:4e:d9:79: 90:9e:d9:0a:22:ea:e1:93:be:24:71:8f:f1:8a:00:f3:68:e5: 29:12:da:7b:05:bd:03:95:df:d9:45:7c:91:01:a9:24:5e:32: 37:41:a3:40:28:14:29:2b:a8:40:6f:fa:32:45:74:c2:14:eb: fc:73:ac:d0:15:77:28:50:f3:55:78:a6:2d:94:8b:12:3a:c9: a1:2a:3c:0f:ff:2e:10:8e:44:ef:3a:57:0b:92:83:8a:3e:9a: 1c:e4:e3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpY0/g/0Gw/diGlVQArMK/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjMzNzQzYTY1NDkwNjE0MzM5OWY5MDM3MDQ4MDE2ODI2 MzhlN2MwHhcNMjUxMTA2MTEwMTE3WhcNMjUxMTA3MTEwMTE3WjAzMTEwLwYDVQQD Eyg5MDgwNmUzZWNiMzgwNmEzMzI4MTNlY2NkYjIxMjBiZGFlMWJiNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfyqwXzq58VqxXoJPFcb+rjUpm26 aOvd1EWMdRLSly0xljZxtxBAcokPCENmioOojPZ3VgU1bsBdszF5uRqiVAMPyrcU 1lsWLDxO535GLWzPbPJrLpSO27eIsJ8SjhgD97pUKOVMidxcKUVHtvLmboLdGD4X /C2z4w6BU/ni14h8lkRrI3dTQ+atlnEGFjZk2ER9H2efWWnBeKygj3uVNeALr9UB WPizj9EHxEClbxbGmOitVEIa92efPuPjL8h0C5ywPD0t0jU/AUOR0y7QjDJ2Npsh HutRp6V4jAKTKOtcEE25Pfcba5pYXknhUs+AnX0M/eZlRi9hgqBmISl6SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCAbj7LOAajMoE+zNshIL2uG7REMB8GA1UdIwQY MBaAFJqzN0OmVJBhQzmfkDcEgBaCY458MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2Mjgt ZDhmOTM1MzZhZjYzLzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2MjgtZDhmOTM1MzZhZjYz LzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb87LXHZN +tbDJQw4wEXMVMYT3Ahql9jCQX4EUn38BdROKkC+QLZa/HsbPGF+FhXBTImiafL/ jmhhd/iom1SLiFoU9Z4Jw/wvW21rmVo6VgnicIEDPvVOtoUNH28Dn86cdfTTebgx QGCgElWW8o3gKR1/HkWCw78qDVKpXkXm2+3uM2yX7q/msvjd6kelVqyK2dcc+fda 3KFAWdLz/83STtl5kJ7ZCiLq4ZO+JHGP8YoA82jlKRLaewW9A5Xf2UV8kQGpJF4y N0GjQCgUKSuoQG/6MkV0whTr/HOs0BV3KFDzVXimLZSLEjrJoSo8D/8uEI5E7zpX C5KDij6aHOTjFQ== -----END CERTIFICATE-----Generated at Mon Dec 29 13:24:12 2025 by rpki-client