This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json) Hash identifier: 5G75GJHJ8N0C74MdxrYYC7VlliRCNHXu9UrmFnxdzgY= Subject key identifier: 0F:57:18:94:8E:93:CD:E4:77:C5:9A:0A:CD:CE:7A:EA:E9:8D:DE:60 Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4 Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4 Certificate serial: 019A812A9EB7000B1B0BDBFC5ED4AF74970C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft Manifest number: 0410 Signing time: Fri 14 Nov 2025 07:00:45 +0000 Manifest this update: Fri 14 Nov 2025 07:00:45 +0000 Manifest next update: Sat 15 Nov 2025 07:00:45 +0000 Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: 2xg3ckOLhQbaFV4UsNb7RnL1d2k6kUuIyWqb3a2xkDM=) 2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:2a:9e:b7:00:0b:1b:0b:db:fc:5e:d4:af:74:97:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4 Validity Not Before: Nov 14 07:00:45 2025 GMT Not After : Nov 15 07:00:45 2025 GMT Subject: CN=0f5718948e93cde477c59a0acdce7aeae98dde60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:1b:64:71:5a:4d:57:2f:79:e8:84:46:c3: ad:01:a1:45:aa:01:e7:7f:99:39:81:18:24:00:a0: 2f:60:2c:c3:ef:be:cd:4c:26:70:46:f7:8f:41:72: 73:df:53:35:26:1d:72:66:51:bc:d2:41:ab:b5:17: 3f:6a:0b:6f:ad:a9:c6:6f:d0:00:d0:77:dc:8d:70: 37:cc:9e:ce:f7:49:58:8f:16:d2:f2:42:ea:e4:c1: 2d:c7:88:42:9d:95:88:a9:f5:a9:ef:87:97:97:7f: 8c:5b:3e:ac:78:f2:bd:7b:8c:b9:bb:47:66:91:da: bd:ff:e4:45:c1:a8:f3:fa:dc:93:0d:10:a2:86:25: f1:9e:da:ab:98:0d:6e:06:a2:e2:48:3b:92:ea:bb: 49:9b:4e:1e:36:c0:cd:52:4d:fa:5b:0a:f0:b2:14: 2a:a1:3e:a8:d4:0d:70:f6:3f:ee:c2:62:c2:a5:a1: d4:54:fd:54:ac:50:af:7c:3c:ff:97:ed:98:81:9c: 32:94:be:6f:2b:b6:bc:90:bc:2a:f0:b9:79:58:84: 5a:8f:f9:ab:f9:27:08:48:e2:60:ae:99:dd:31:79: 65:14:c4:b2:fb:8f:f3:e5:66:d4:1d:21:62:51:ee: a2:a0:12:a3:8c:bc:16:eb:70:dc:fa:05:9f:45:bc: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:18:94:8E:93:CD:E4:77:C5:9A:0A:CD:CE:7A:EA:E9:8D:DE:60 X509v3 Authority Key Identifier: keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:99:63:6e:53:c1:2f:8b:84:c4:e9:75:1c:0f:33:d0:94: cf:17:63:de:34:d0:19:f2:b3:5f:48:5e:31:86:5f:d2:08:65: 22:e1:24:2a:c0:33:05:0e:e3:bb:dd:19:93:f2:2a:a0:ef:7a: 57:5c:71:a6:a7:7d:6c:d2:2f:d8:c9:7a:a8:41:f7:85:fa:78: 4c:2d:09:10:aa:39:20:43:11:7f:51:d3:df:71:d9:79:9b:f7: a0:47:a5:6a:58:d0:cf:e0:6a:ee:a2:60:03:73:1a:43:a3:ee: 23:ef:79:ce:f2:09:91:5a:c1:2a:8a:4c:a4:71:f9:93:0f:3f: 54:fc:97:2a:a2:be:a9:36:a9:1d:92:e1:46:77:eb:22:33:65: ba:b7:30:46:20:b4:c9:04:42:07:8f:c3:c9:4f:07:78:d6:40: 23:6d:b0:28:c1:44:49:86:38:92:69:d3:fa:64:c6:38:2f:ae: 6f:83:e2:56:12:9d:0e:a4:d0:b7:6b:78:e8:c3:67:e8:58:20: 84:4a:38:4c:d5:a7:c5:3f:54:18:2c:84:74:44:4f:4c:25:d0: 21:6a:51:45:04:b3:be:5a:50:5d:5a:01:4a:1f:16:21:9d:da: 13:15:14:37:97:2f:dc:72:f7:5f:17:bd:b9:3a:b5:3d:18:2c: 1b:bf:34:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqBKp63AAsbC9v8XtSvdJcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMmQ5NGJiM2RjNTM0YTY0MjdmZTlhNjczMDBkOGY0YzQ5 MTQ2YzQwHhcNMjUxMTE0MDcwMDQ1WhcNMjUxMTE1MDcwMDQ1WjAzMTEwLwYDVQQD EygwZjU3MTg5NDhlOTNjZGU0NzdjNTlhMGFjZGNlN2FlYWU5OGRkZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40IbZHFaTVcveeiERsOtAaFFqgHn f5k5gRgkAKAvYCzD777NTCZwRvePQXJz31M1Jh1yZlG80kGrtRc/agtvranGb9AA 0HfcjXA3zJ7O90lYjxbS8kLq5MEtx4hCnZWIqfWp74eXl3+MWz6sePK9e4y5u0dm kdq9/+RFwajz+tyTDRCihiXxntqrmA1uBqLiSDuS6rtJm04eNsDNUk36WwrwshQq oT6o1A1w9j/uwmLCpaHUVP1UrFCvfDz/l+2YgZwylL5vK7a8kLwq8Ll5WIRaj/mr +ScISOJgrpndMXllFMSy+4/z5WbUHSFiUe6ioBKjjLwW63Dc+gWfRbyT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9XGJSOk83kd8WaCs3Oeurpjd5gMB8GA1UdIwQY MBaAFPEtlLs9xTSmQn/ppnMA2PTEkUbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEt YTNhYmRiZDFkYTA2LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEtYTNhYmRiZDFkYTA2 LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtyZY25T wS+LhMTpdRwPM9CUzxdj3jTQGfKzX0heMYZf0ghlIuEkKsAzBQ7ju90Zk/IqoO96 V1xxpqd9bNIv2Ml6qEH3hfp4TC0JEKo5IEMRf1HT33HZeZv3oEelaljQz+Bq7qJg A3MaQ6PuI+95zvIJkVrBKopMpHH5kw8/VPyXKqK+qTapHZLhRnfrIjNlurcwRiC0 yQRCB4/DyU8HeNZAI22wKMFESYY4kmnT+mTGOC+ub4PiVhKdDqTQt2t46MNn6Fgg hEo4TNWnxT9UGCyEdERPTCXQIWpRRQSzvlpQXVoBSh8WIZ3aExUUN5cv3HL3Xxe9 uTq1PRgsG780fw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:46 2025 by rpki-client