This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json) Hash identifier: qmH1dxBj6lKgeeoslCW/gA8+ENfyI2OvhqDVTJNMfXM= Subject key identifier: AD:B4:91:6E:1E:7E:63:2C:11:C9:A9:BF:2F:17:2A:9E:A6:1A:62:6E Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81 Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081 Certificate serial: 019B72FF27E1D562774490E36B23313980CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft Manifest number: 083E Signing time: Wed 31 Dec 2025 06:01:23 +0000 Manifest this update: Wed 31 Dec 2025 06:01:23 +0000 Manifest next update: Thu 01 Jan 2026 06:01:23 +0000 Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: b45SlwYEPzJqZk/DQ4i37cwhAxfzodh4C1Ijtpq2y+Y=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:ff:27:e1:d5:62:77:44:90:e3:6b:23:31:39:80:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081 Validity Not Before: Dec 31 06:01:23 2025 GMT Not After : Jan 1 06:01:23 2026 GMT Subject: CN=adb4916e1e7e632c11c9a9bf2f172a9ea61a626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:a7:06:a3:a6:15:86:f0:42:99:d9:14:d3: 54:40:66:7f:15:0a:68:bb:32:d4:a4:1f:fc:41:02: 83:fc:13:40:74:b7:19:2f:0a:58:82:00:cd:7f:0c: 4f:b4:4a:1c:7f:ee:85:ec:4f:43:46:0b:b6:cf:bf: 60:d9:32:9f:6b:40:9b:e3:76:eb:a6:0e:5b:75:aa: c9:ac:4d:97:2a:46:4d:37:e8:53:03:07:87:65:73: cf:80:6b:d2:9a:c4:3e:af:74:bd:c8:29:54:2e:11: 42:4c:2b:7b:fe:f9:13:a1:3c:3e:fb:c2:7e:fa:37: 32:32:d5:61:4f:6d:03:46:bf:90:8f:43:a3:d0:3f: dd:4a:53:d4:c4:55:bf:32:f7:e7:f2:d1:c9:63:70: 95:6a:a7:15:56:37:a6:60:a0:c5:62:6c:5d:5b:b2: 97:c6:40:b1:76:7b:0d:e5:f0:f3:54:63:e5:5d:31: 39:4f:3f:0e:06:ca:0b:49:71:82:21:a7:fd:54:80: 93:bc:c2:9c:00:1e:1e:e0:25:4f:7f:a4:77:71:27: d0:fd:41:e6:fb:78:05:af:ab:a9:4b:4f:f5:09:fd: 6d:b9:6f:7b:36:6d:f8:90:9c:38:cd:61:b9:5f:4f: d0:6a:a4:cf:91:8c:cf:56:86:01:88:0a:02:c3:24: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B4:91:6E:1E:7E:63:2C:11:C9:A9:BF:2F:17:2A:9E:A6:1A:62:6E X509v3 Authority Key Identifier: keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d2:b3:d0:56:7c:c8:ec:c9:5f:3f:36:d5:55:a5:17:31:3a: 79:d9:4b:d2:d3:9c:80:75:38:19:70:01:40:26:7c:c2:3d:ab: 23:b2:0e:d9:5d:f3:82:02:47:e2:c0:1c:32:42:4b:98:b0:e0: 6b:b7:ab:ab:d3:f5:83:e5:2a:7c:e7:f7:1d:7f:9a:12:7b:d8: 54:20:c6:ed:51:9a:1f:6d:b2:2c:12:0c:05:2a:84:57:d1:4a: fc:73:92:2b:c3:ff:ac:d4:e2:d5:df:88:bb:a0:61:92:2d:7f: 78:9a:e4:04:32:95:81:f3:da:66:4b:51:4b:f5:d4:dd:d8:fc: d0:58:ee:2b:f9:cb:3f:43:55:f2:ba:2c:f8:a3:78:8b:ba:d7: 4b:4e:e8:8b:e5:26:1d:5b:ef:7d:6f:e0:c1:2f:e7:b4:2d:20: 8d:ac:91:f4:2f:0d:b7:4d:a9:fe:e3:db:b1:c3:a3:5f:5e:a6: b7:4e:a9:ca:81:3f:84:6b:7d:90:9b:ba:e5:3e:ad:ba:3e:ce: 5c:8c:5b:77:68:1b:75:48:ab:df:79:8e:2c:c3:4a:20:3b:88: bb:54:a9:a4:57:32:06:c1:a9:3f:bf:40:9b:2b:40:8a:2a:48: f9:ae:3a:0d:8c:5e:94:11:e1:e6:06:cc:53:e6:11:45:44:5b: 9b:ef:96:54 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZty/yfh1WJ3RJDjayMxOYDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2 NDQwODEwHhcNMjUxMjMxMDYwMTIzWhcNMjYwMTAxMDYwMTIzWjAzMTEwLwYDVQQD EyhhZGI0OTE2ZTFlN2U2MzJjMTFjOWE5YmYyZjE3MmE5ZWE2MWE2MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ynBqOmFYbwQpnZFNNUQGZ/FQpo uzLUpB/8QQKD/BNAdLcZLwpYggDNfwxPtEocf+6F7E9DRgu2z79g2TKfa0Cb43br pg5bdarJrE2XKkZNN+hTAweHZXPPgGvSmsQ+r3S9yClULhFCTCt7/vkToTw++8J+ +jcyMtVhT20DRr+Qj0Oj0D/dSlPUxFW/Mvfn8tHJY3CVaqcVVjemYKDFYmxdW7KX xkCxdnsN5fDzVGPlXTE5Tz8OBsoLSXGCIaf9VICTvMKcAB4e4CVPf6R3cSfQ/UHm +3gFr6upS0/1Cf1tuW97Nm34kJw4zWG5X0/QaqTPkYzPVoYBiAoCwyTuDwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK20kW4efmMsEcmpvy8XKp6mGmJuMB8GA1UdIwQY MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStKz 0FZ8yOzJXz821VWlFzE6edlL0tOcgHU4GXABQCZ8wj2rI7IO2V3zggJH4sAcMkJL mLDga7erq9P1g+UqfOf3HX+aEnvYVCDG7VGaH22yLBIMBSqEV9FK/HOSK8P/rNTi 1d+Iu6Bhki1/eJrkBDKVgfPaZktRS/XU3dj80FjuK/nLP0NV8ros+KN4i7rXS07o i+UmHVvvfW/gwS/ntC0gjayR9C8Nt02p/uPbscOjX16mt06pyoE/hGt9kJu65T6t uj7OXIxbd2gbdUir33mOLMNKIDuIu1SppFcyBsGpP79AmytAiipI+a46DYxelBHh 5gbMU+YRRURbm++WVA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:09:08 2025 by rpki-client