This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json) Hash identifier: /8jhwBRWDldTa6K+PECUmpTLJv10VSSsqVoEhalyY2I= Subject key identifier: 10:73:DE:D8:74:3E:F5:27:C7:B9:CF:FD:38:DD:CD:6D:5F:E9:1F:0F Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a Certificate serial: 019B45B83BDAE33329441C69A37FF469AF88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft Manifest number: 03B7 Signing time: Mon 22 Dec 2025 11:01:00 +0000 Manifest this update: Mon 22 Dec 2025 11:01:00 +0000 Manifest next update: Tue 23 Dec 2025 11:01:00 +0000 Files and hashes: 1: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: vKF7282WIXgplt2f2E78L69DynI/IOPIkKaljyVR9Dw=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:3b:da:e3:33:29:44:1c:69:a3:7f:f4:69:af:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a Validity Not Before: Dec 22 11:01:00 2025 GMT Not After : Dec 23 11:01:00 2025 GMT Subject: CN=1073ded8743ef527c7b9cffd38ddcd6d5fe91f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:e7:9c:8f:0e:e9:bf:48:52:29:84:02:cb: 84:bf:2e:f4:eb:1f:1b:a1:2d:4b:e0:65:67:d8:47: c7:8b:57:52:86:15:36:4b:33:45:23:59:f7:96:3d: 39:f7:79:d0:b6:6a:e3:72:94:3e:93:02:ea:dc:a3: 89:35:95:b5:c5:00:ac:b3:6d:0d:dc:27:e3:77:83: 26:89:e7:77:ed:84:ed:cb:78:df:82:53:0a:69:0f: 06:af:fa:67:e0:b3:a8:69:b1:d1:4e:43:2a:fd:fe: e1:68:09:3b:7c:b7:2d:49:89:f3:13:bb:66:e2:e5: 2f:eb:c8:61:4a:49:df:41:dc:76:d9:00:cf:ca:e7: 48:96:14:09:b9:1e:94:bf:05:a8:83:cf:62:9b:fc: fa:60:06:1a:d0:53:f5:80:89:59:15:91:30:d4:0e: 9c:d3:f1:a6:10:89:7e:4b:34:3a:a3:3e:1c:60:6f: bd:96:00:4d:91:f1:1f:1a:d2:ab:97:c2:53:ab:87: ab:a5:fa:30:9c:5f:0a:57:70:31:97:57:30:55:cd: 71:45:85:f8:7f:8e:7c:b3:00:d7:44:d5:6a:c1:14: 66:9a:33:8d:52:b6:f7:d3:6f:95:2e:5a:c6:f0:9d: 27:2a:8f:dc:93:20:3e:c5:99:d3:b5:f7:ee:e6:1c: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:73:DE:D8:74:3E:F5:27:C7:B9:CF:FD:38:DD:CD:6D:5F:E9:1F:0F X509v3 Authority Key Identifier: keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:ca:10:d0:f9:35:0f:51:77:ee:fe:0a:ec:ad:b9:5e:cf: 6c:e1:56:f2:24:86:c6:20:a7:87:c9:f3:e2:ed:da:9a:5a:1a: 21:d2:24:dd:b9:d7:46:28:74:c7:01:a5:47:72:7a:a8:39:85: b7:07:e0:fa:d0:75:43:03:37:80:e6:87:92:ff:11:44:f7:f7: 13:5b:de:65:a5:4c:c0:2f:b4:ac:0a:c7:33:a3:b8:85:b8:05: a0:4f:31:c8:aa:d1:a8:25:6d:25:bf:88:2e:c7:e6:4c:9b:e5: 9e:c2:b1:a0:38:23:04:29:4d:a5:2c:81:19:05:26:69:d2:cb: ea:3b:c8:f6:3a:f6:ef:ae:05:b2:f9:f3:80:ee:d4:80:9c:68: f7:a7:87:c1:d7:68:ac:ad:f0:58:cf:0b:59:f1:47:b2:bf:86: 5d:0a:b7:1e:ed:b7:06:48:96:da:82:77:40:62:73:f3:4d:a4: a9:d9:84:c4:ae:e4:fc:c3:69:09:5c:f7:95:de:84:2f:04:8c: 47:e2:0e:0a:70:e9:eb:9e:82:fc:3d:bc:3f:28:99:04:c9:8c: ad:d2:44:85:6e:58:85:7d:5d:de:a8:f1:fd:c7:8e:6e:01:3a: 1c:11:11:af:55:d4:29:c9:ec:53:f2:5f:be:77:31:ac:2b:bf: 54:4c:50:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuDva4zMpRBxpo3/0aa+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWU3M2YxMmRlMjJiNjM0MDY4ZDJjZThiN2E2ZmFlMjI5 MTg2MmEwHhcNMjUxMjIyMTEwMTAwWhcNMjUxMjIzMTEwMTAwWjAzMTEwLwYDVQQD EygxMDczZGVkODc0M2VmNTI3YzdiOWNmZmQzOGRkY2Q2ZDVmZTkxZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkDnnI8O6b9IUimEAsuEvy706x8b oS1L4GVn2EfHi1dShhU2SzNFI1n3lj0593nQtmrjcpQ+kwLq3KOJNZW1xQCss20N 3Cfjd4Mmied37YTty3jfglMKaQ8Gr/pn4LOoabHRTkMq/f7haAk7fLctSYnzE7tm 4uUv68hhSknfQdx22QDPyudIlhQJuR6UvwWog89im/z6YAYa0FP1gIlZFZEw1A6c 0/GmEIl+SzQ6oz4cYG+9lgBNkfEfGtKrl8JTq4erpfownF8KV3Axl1cwVc1xRYX4 f458swDXRNVqwRRmmjONUrb302+VLlrG8J0nKo/ckyA+xZnTtffu5hwFVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBz3th0PvUnx7nP/TjdzW1f6R8PMB8GA1UdIwQY MBaAFDbuc/Et4itjQGjSzot6b64ikYYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnU1ejhTM2lLMk5BYU5MT2kzcHZyaUtSaGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wNGEyMjMtZTFjMC00ZTEyLTkxZmQt ZDE5OGYwMTBiMTVhLzEvTnU1ejhTM2lLMk5BYU5MT2kzcHZyaUtSaGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wNGEyMjMtZTFjMC00ZTEyLTkxZmQtZDE5OGYwMTBiMTVh LzEvTnU1ejhTM2lLMk5BYU5MT2kzcHZyaUtSaGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkTKEND5 NQ9Rd+7+CuytuV7PbOFW8iSGxiCnh8nz4u3amloaIdIk3bnXRih0xwGlR3J6qDmF twfg+tB1QwM3gOaHkv8RRPf3E1veZaVMwC+0rArHM6O4hbgFoE8xyKrRqCVtJb+I LsfmTJvlnsKxoDgjBClNpSyBGQUmadLL6jvI9jr2764FsvnzgO7UgJxo96eHwddo rK3wWM8LWfFHsr+GXQq3Hu23BkiW2oJ3QGJz802kqdmExK7k/MNpCVz3ld6ELwSM R+IOCnDp656C/D28PyiZBMmMrdJEhW5YhX1d3qjx/ceObgE6HBERr1XUKcnsU/Jf vncxrCu/VExQWQ== -----END CERTIFICATE-----Generated at Mon Dec 29 19:23:00 2025 by rpki-client