This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft File: 3-uby8pq1fjYmbOJCe77dZ46pg0.mft (raw, json) Hash identifier: /DATPoIGi3kmsJ70/51juK4nF+/GtlmFxsObD6ViufI= Subject key identifier: A3:E9:1B:6B:EB:AC:0C:EB:15:4C:CD:7F:74:95:1B:A0:2A:2C:67:F8 Authority key identifier: DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D Certificate issuer: /CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d Certificate serial: 01938C9C56EA91AE46F851F5C3A946023150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft Manifest number: 0AB1 Signing time: Tue 03 Dec 2024 13:01:16 +0000 Manifest this update: Tue 03 Dec 2024 13:01:16 +0000 Manifest next update: Wed 04 Dec 2024 13:01:16 +0000 Files and hashes: 1: 3-uby8pq1fjYmbOJCe77dZ46pg0.crl (hash: zB0pOWPM/u1Y+/MPe7iMeLPiehFuXiUGmZcdwRWao54=) 2: PE34AAQM9jiDUgP7ydltWSTBO7Q.roa (hash: jMBDOBg1y6tmmZFLUyZZ+ZXvGwbuxp9x5WGQhnazZwI=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:8c:9c:56:ea:91:ae:46:f8:51:f5:c3:a9:46:02:31:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d Validity Not Before: Dec 3 13:01:16 2024 GMT Not After : Dec 4 13:01:16 2024 GMT Subject: CN=a3e91b6bebac0ceb154ccd7f74951ba02a2c67f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:3b:d7:22:c6:74:08:f4:64:28:07:92:34: 35:b3:15:c6:5d:fa:bf:d3:2e:97:66:1f:47:75:35: 8d:97:4a:4a:6b:35:2a:9a:cf:3c:be:ec:9e:71:9f: 99:ac:b1:ad:76:0d:54:c7:2b:8e:2e:c3:56:b1:f7: 92:5e:8f:d0:c0:dc:7f:11:74:c4:fe:ad:30:2c:f6: ab:72:a5:e7:25:ce:da:7d:49:07:35:c9:91:39:3f: 10:75:ec:45:45:0a:d8:35:c3:f8:7f:95:97:26:e0: d6:1d:6b:96:00:47:3b:49:9e:1c:ca:c9:9b:06:30: bf:98:be:a3:e4:f9:68:56:c7:78:98:69:75:d4:6d: 99:5a:94:df:3e:6e:33:bf:80:c7:1e:cb:83:33:49: 60:9e:a2:ec:57:3c:a4:1c:4a:3d:a3:95:9a:c1:f6: f0:82:61:56:5d:6e:1f:ca:64:96:78:22:61:fc:21: b4:cb:c7:1d:63:23:04:fe:88:4e:69:4c:32:be:f2: dd:c8:41:eb:1e:6d:fa:b2:18:b6:90:ea:f0:8e:48: 96:18:78:b8:75:8a:e9:e5:74:9c:52:73:a4:30:07: e9:36:55:bc:d3:ee:e4:ba:e8:50:01:8b:11:3b:71: 88:ca:61:45:64:c3:4e:00:f7:6a:b8:45:64:81:a0: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:1B:6B:EB:AC:0C:EB:15:4C:CD:7F:74:95:1B:A0:2A:2C:67:F8 X509v3 Authority Key Identifier: keyid:DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:03:08:b4:fb:78:15:2a:9c:11:24:9d:c1:6b:b9:34:f5:2f: 66:da:dd:a5:9e:b8:51:c3:64:45:38:28:c0:12:95:5c:2a:2b: 30:5b:ff:a3:4e:b5:ea:76:fa:b1:da:70:7b:c0:73:43:b0:e0: 00:89:8c:92:0b:50:f6:82:25:25:83:32:fa:a4:d2:b3:eb:61: 4a:e5:45:39:aa:af:ab:9b:d6:11:77:56:e6:90:f3:fe:e7:1c: 2f:11:87:6f:18:52:40:48:2f:ce:34:ce:be:2a:e6:89:bb:9a: b4:ad:f9:42:df:37:85:73:a7:ce:b4:b7:b2:73:6a:f7:94:ae: fc:9c:a7:98:4e:1b:16:2e:99:3a:c2:08:94:af:e3:68:af:93: c0:9a:a5:9d:d6:41:be:d2:2d:2f:35:80:67:b6:8f:b6:6b:97: 16:29:20:51:cb:f1:c3:c5:e5:75:36:86:fb:56:b8:ce:41:b2: 6b:8d:4e:6b:cd:4d:41:39:6b:aa:06:85:79:8c:f0:36:10:35: 12:1d:aa:ac:c1:c4:44:99:05:ab:fd:b3:c7:03:3e:89:f6:ad: 88:b5:b8:68:a8:5e:10:bc:44:33:80:44:19:a4:3a:e4:67:e7: 46:1d:16:7e:a9:63:04:ac:a1:a6:8f:1a:90:e3:17:d7:dc:b4: dc:e3:1e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZOMnFbqka5G+FH1w6lGAjFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWI5YmNiY2E2YWQ1ZjhkODk5YjM4OTA5ZWVmYjc1OWUz YWE2MGQwHhcNMjQxMjAzMTMwMTE2WhcNMjQxMjA0MTMwMTE2WjAzMTEwLwYDVQQD EyhhM2U5MWI2YmViYWMwY2ViMTU0Y2NkN2Y3NDk1MWJhMDJhMmM2N2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYU71yLGdAj0ZCgHkjQ1sxXGXfq/ 0y6XZh9HdTWNl0pKazUqms88vuyecZ+ZrLGtdg1UxyuOLsNWsfeSXo/QwNx/EXTE /q0wLParcqXnJc7afUkHNcmROT8QdexFRQrYNcP4f5WXJuDWHWuWAEc7SZ4cysmb BjC/mL6j5PloVsd4mGl11G2ZWpTfPm4zv4DHHsuDM0lgnqLsVzykHEo9o5Wawfbw gmFWXW4fymSWeCJh/CG0y8cdYyME/ohOaUwyvvLdyEHrHm36shi2kOrwjkiWGHi4 dYrp5XScUnOkMAfpNlW80+7kuuhQAYsRO3GIymFFZMNOAPdquEVkgaDfDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPpG2vrrAzrFUzNf3SVG6AqLGf4MB8GA1UdIwQY MBaAFN/rm8vKatX42JmziQnu+3WeOqYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy11Ynk4cHExZmpZbWJPSkNlNzdkWjQ2cGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNDhmZTQtYjhlOS00NTU1LTg2NWUt ZTczYWZkMTIyMmM2LzEvMy11Ynk4cHExZmpZbWJPSkNlNzdkWjQ2cGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mNDhmZTQtYjhlOS00NTU1LTg2NWUtZTczYWZkMTIyMmM2 LzEvMy11Ynk4cHExZmpZbWJPSkNlNzdkWjQ2cGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAMItPt4 FSqcESSdwWu5NPUvZtrdpZ64UcNkRTgowBKVXCorMFv/o0616nb6sdpwe8BzQ7Dg AImMkgtQ9oIlJYMy+qTSs+thSuVFOaqvq5vWEXdW5pDz/uccLxGHbxhSQEgvzjTO virmibuatK35Qt83hXOnzrS3snNq95Su/JynmE4bFi6ZOsIIlK/jaK+TwJqlndZB vtItLzWAZ7aPtmuXFikgUcvxw8XldTaG+1a4zkGya41Oa81NQTlrqgaFeYzwNhA1 Eh2qrMHERJkFq/2zxwM+ifatiLW4aKheELxEM4BEGaQ65GfnRh0WfqljBKyhpo8a kOMX19y03OMebg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:15:54 2025 by rpki-client