This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json) Hash identifier: GOHcDhVVcHSbCkmgUFyG2yAnhcH7pNdAtPzSM4qvQtg= Subject key identifier: 27:A2:38:63:B2:C7:90:C1:50:64:9C:87:F3:0C:43:FF:E3:F8:EE:91 Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78 Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878 Certificate serial: 019AFC1E72A70FB49569E1CC38FE2BD3639C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft Manifest number: 1764 Signing time: Mon 08 Dec 2025 04:00:44 +0000 Manifest this update: Mon 08 Dec 2025 04:00:44 +0000 Manifest next update: Tue 09 Dec 2025 04:00:44 +0000 Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: iBZjx43U6xulmj2dKf5az6RSP349oUHpkXwEVHPGeJE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1e:72:a7:0f:b4:95:69:e1:cc:38:fe:2b:d3:63:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878 Validity Not Before: Dec 8 04:00:44 2025 GMT Not After : Dec 9 04:00:44 2025 GMT Subject: CN=27a23863b2c790c150649c87f30c43ffe3f8ee91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:f9:5f:01:46:d7:33:a9:72:16:bc:ac:5f: 21:9e:a1:7f:e5:06:4c:c8:37:f2:b8:4e:9d:7b:77: fd:04:36:dd:71:0e:d5:74:6b:a6:2f:41:0f:4a:ab: 4c:e5:91:20:48:be:bf:b7:96:ab:71:58:0a:64:d8: b4:0a:9a:81:9c:af:bb:ad:4e:9a:51:ed:e6:42:6d: a2:9a:b4:a0:dc:cc:36:3d:4c:e2:06:38:bd:4c:14: 9c:cc:7f:0d:3a:2e:c1:d7:17:57:58:12:8d:e3:bd: 19:14:83:0f:05:76:b6:06:a9:91:c1:80:bb:18:51: ee:f5:e4:8e:2f:de:ec:8b:8e:18:b6:b5:fb:31:af: fe:a5:d1:b4:43:e7:19:a1:3d:df:1d:68:7e:4a:04: 9a:0d:bf:fb:95:cb:80:8b:b6:7f:62:81:70:cc:8b: 42:24:ad:03:58:ec:f1:45:89:1b:71:51:0a:22:ab: e4:51:b5:43:4e:94:8c:7c:6f:d7:3d:3e:27:99:59: 9b:ad:aa:13:4a:3e:d9:2a:93:46:7c:bc:13:8b:fa: 75:b6:53:b4:0d:98:ac:14:26:c8:df:8d:2b:aa:cd: f0:f1:3d:14:b1:69:46:31:c4:79:c7:34:a8:2e:94: 6a:87:a6:52:09:a1:f5:ea:53:17:46:1f:19:39:7f: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A2:38:63:B2:C7:90:C1:50:64:9C:87:F3:0C:43:FF:E3:F8:EE:91 X509v3 Authority Key Identifier: keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8e:e0:d2:11:a5:51:57:73:75:87:d6:a0:9c:17:69:1f:e4: 5f:f0:2e:a5:32:32:ef:e0:e0:f5:82:a4:67:2e:ee:e1:ff:5e: 0f:3d:35:80:4c:16:88:9a:11:94:14:59:36:93:66:78:21:fb: a3:1b:db:00:0a:1d:d7:ff:26:87:4a:0c:8c:32:42:6e:e8:b5: d9:7f:f3:c4:0b:51:10:b9:ae:58:d3:58:97:7e:01:b0:77:a8: 04:68:1b:98:c0:76:ec:f4:8b:70:53:e1:e1:da:21:1e:cd:77: 55:b4:4b:f9:fe:b8:28:bf:9f:25:3f:20:0e:1e:d4:cd:01:89: 2e:44:d4:64:18:c0:6e:97:f6:9d:e0:be:7b:c0:ba:cb:db:c4: 77:7a:5f:2b:77:e0:44:70:96:70:ae:83:9c:c4:71:9b:cd:67: fe:0d:e7:0f:57:12:0b:f2:df:96:85:60:70:7e:61:eb:2b:77: 25:5e:6a:3c:5d:68:ae:52:bd:d1:43:7a:89:46:1a:31:d4:66: 72:c7:60:da:95:a0:91:7b:d0:4e:99:2d:d6:2d:da:24:14:2e: ab:23:da:78:8d:43:d9:76:7a:09:a4:4c:c8:79:7d:cc:69:ea: fa:df:06:17:fb:45:bb:6a:2d:6c:6b:e2:69:b4:1b:83:27:42: 71:63:80:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8HnKnD7SVaeHMOP4r02OcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ODEwNmY0NDk1N2QxOTQwMjAzMzViMGJmZDYwNzdjY2Jj ZGM4NzgwHhcNMjUxMjA4MDQwMDQ0WhcNMjUxMjA5MDQwMDQ0WjAzMTEwLwYDVQQD EygyN2EyMzg2M2IyYzc5MGMxNTA2NDljODdmMzBjNDNmZmUzZjhlZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWb5XwFG1zOpcha8rF8hnqF/5QZM yDfyuE6de3f9BDbdcQ7VdGumL0EPSqtM5ZEgSL6/t5arcVgKZNi0CpqBnK+7rU6a Ue3mQm2imrSg3Mw2PUziBji9TBSczH8NOi7B1xdXWBKN470ZFIMPBXa2BqmRwYC7 GFHu9eSOL97si44YtrX7Ma/+pdG0Q+cZoT3fHWh+SgSaDb/7lcuAi7Z/YoFwzItC JK0DWOzxRYkbcVEKIqvkUbVDTpSMfG/XPT4nmVmbraoTSj7ZKpNGfLwTi/p1tlO0 DZisFCbI340rqs3w8T0UsWlGMcR5xzSoLpRqh6ZSCaH16lMXRh8ZOX+9WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeiOGOyx5DBUGSch/MMQ//j+O6RMB8GA1UdIwQY MBaAFMaBBvRJV9GUAgM1sL/WB3zLzch4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYt YTAyOWZiYjRiZTI5LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYtYTAyOWZiYjRiZTI5 LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP47g0hGl UVdzdYfWoJwXaR/kX/AupTIy7+Dg9YKkZy7u4f9eDz01gEwWiJoRlBRZNpNmeCH7 oxvbAAod1/8mh0oMjDJCbui12X/zxAtRELmuWNNYl34BsHeoBGgbmMB27PSLcFPh 4dohHs13VbRL+f64KL+fJT8gDh7UzQGJLkTUZBjAbpf2neC+e8C6y9vEd3pfK3fg RHCWcK6DnMRxm81n/g3nD1cSC/LfloVgcH5h6yt3JV5qPF1orlK90UN6iUYaMdRm csdg2pWgkXvQTpkt1i3aJBQuqyPaeI1D2XZ6CaRMyHl9zGnq+t8GF/tFu2otbGvi abQbgydCcWOAeg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:15 2025 by rpki-client