This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json) Hash identifier: SBLhilUZXTbfmInhcoi33OFcl/qxydPFibHzV58nGc0= Subject key identifier: 75:87:9A:2E:35:B5:40:13:27:F1:30:BE:F8:7A:B3:57:AB:AD:1F:13 Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Certificate serial: 019B4F9706E164AD514906F821C41D214C50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft Manifest number: 0B6E Signing time: Wed 24 Dec 2025 09:00:56 +0000 Manifest this update: Wed 24 Dec 2025 09:00:56 +0000 Manifest next update: Thu 25 Dec 2025 09:00:56 +0000 Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: k0vGW0rs3jASfuQegnSz+FCYEEW+N9W9hrygaIVyCxo=) 2: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:06:e1:64:ad:51:49:06:f8:21:c4:1d:21:4c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Validity Not Before: Dec 24 09:00:56 2025 GMT Not After : Dec 25 09:00:56 2025 GMT Subject: CN=75879a2e35b5401327f130bef87ab357abad1f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:5e:2a:58:cc:30:b7:d9:7b:2c:56:98:9e: 82:30:56:cc:de:4a:b2:b9:33:33:f7:66:91:90:8f: 35:9e:6e:81:69:f7:db:fd:3e:d9:9d:0c:1f:2b:c3: d5:f6:0d:2f:22:1a:4c:51:8b:23:89:2a:15:dd:2d: 88:9d:a1:f8:8f:c4:cc:b4:d9:6e:b4:0a:e4:50:15: f1:93:e3:f0:81:e9:6c:b2:ad:ff:48:2c:00:bb:a0: d1:69:12:c2:d9:0d:5a:00:5c:45:99:54:bb:7c:89: ca:f5:0a:d7:fe:f5:b8:06:7f:d5:1a:3a:df:8d:ce: 7c:ef:bb:af:72:63:9d:1e:c3:cb:64:65:8c:bb:f9: 07:90:c3:be:b8:8a:17:ac:1d:01:75:7d:88:5b:29: 5d:a0:27:21:96:78:43:ad:d5:b6:57:a1:10:24:78: 80:5a:52:72:11:b1:cd:fa:33:b5:a8:e2:98:36:85: d6:06:10:ed:33:fc:6a:d4:95:16:98:56:50:77:94: 36:2b:29:17:88:63:76:85:e9:22:a6:61:37:e6:db: 54:47:6c:d1:5f:e8:ad:c9:35:f5:5f:d2:a0:ba:0c: b0:61:dd:a8:c7:65:dc:c4:d3:6e:99:55:0c:62:3f: bb:6b:2c:24:79:0d:8f:b4:b4:8a:be:82:da:9f:1f: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:9A:2E:35:B5:40:13:27:F1:30:BE:F8:7A:B3:57:AB:AD:1F:13 X509v3 Authority Key Identifier: keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:cb:86:6b:74:76:e2:d9:10:7d:46:ee:e4:24:0c:6d:44: 4c:98:c2:d8:35:62:50:cb:4a:bd:c5:2a:88:63:9b:84:14:38: 6a:99:8f:8b:68:df:fb:f1:12:10:b0:5a:25:e3:6c:d4:e5:da: a2:3d:4f:83:27:33:77:aa:64:c3:e1:b1:d5:06:69:64:8c:4e: 3a:13:45:03:70:29:b5:8d:99:a2:af:69:0c:0a:1f:21:c1:b5: 84:cc:7e:f7:77:f6:0e:67:fc:52:86:6f:66:89:5f:01:a3:d1: 06:f9:b1:46:95:d6:3f:70:ba:f5:88:f0:a3:fb:89:be:45:3d: 76:36:17:19:4b:ca:e4:4a:8f:52:1b:b9:48:c3:26:4f:d0:cf: 06:3f:92:e1:76:e8:5e:d2:1a:45:f0:2a:d5:c1:45:72:4e:3f: ea:1a:7b:dd:23:cd:64:04:c5:45:96:c8:a5:e5:1b:fd:cb:da: 57:80:76:76:ab:01:65:38:55:f1:b5:1a:e9:93:f3:23:2b:4f: 51:c5:e2:ef:95:34:54:9a:4d:9d:cf:30:1d:29:e5:df:fd:73: af:64:b7:c2:9d:01:f4:f3:c8:47:6c:5a:5f:16:e0:14:ff:08: 66:2c:c4:92:30:e9:e3:8c:39:08:ae:ae:ad:46:b2:5f:07:d9: 3f:14:7b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlwbhZK1RSQb4IcQdIUxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3 MWE5Y2IwHhcNMjUxMjI0MDkwMDU2WhcNMjUxMjI1MDkwMDU2WjAzMTEwLwYDVQQD Eyg3NTg3OWEyZTM1YjU0MDEzMjdmMTMwYmVmODdhYjM1N2FiYWQxZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCpeKljMMLfZeyxWmJ6CMFbM3kqy uTMz92aRkI81nm6Baffb/T7ZnQwfK8PV9g0vIhpMUYsjiSoV3S2InaH4j8TMtNlu tArkUBXxk+Pwgelssq3/SCwAu6DRaRLC2Q1aAFxFmVS7fInK9QrX/vW4Bn/VGjrf jc5877uvcmOdHsPLZGWMu/kHkMO+uIoXrB0BdX2IWyldoCchlnhDrdW2V6EQJHiA WlJyEbHN+jO1qOKYNoXWBhDtM/xq1JUWmFZQd5Q2KykXiGN2hekipmE35ttUR2zR X+ityTX1X9KgugywYd2ox2XcxNNumVUMYj+7aywkeQ2PtLSKvoLanx/crwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWHmi41tUATJ/Ewvvh6s1errR8TMB8GA1UdIwQY MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4 LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7LLhmt0 duLZEH1G7uQkDG1ETJjC2DViUMtKvcUqiGObhBQ4apmPi2jf+/ESELBaJeNs1OXa oj1Pgyczd6pkw+Gx1QZpZIxOOhNFA3AptY2Zoq9pDAofIcG1hMx+93f2Dmf8UoZv ZolfAaPRBvmxRpXWP3C69Yjwo/uJvkU9djYXGUvK5EqPUhu5SMMmT9DPBj+S4Xbo XtIaRfAq1cFFck4/6hp73SPNZATFRZbIpeUb/cvaV4B2dqsBZThV8bUa6ZPzIytP UcXi75U0VJpNnc8wHSnl3/1zr2S3wp0B9PPIR2xaXxbgFP8IZizEkjDp44w5CK6u rUayXwfZPxR7PQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:43 2025 by rpki-client