This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json) Hash identifier: hPHnDEEVZitLYVM34sx4BfyYytFr3Y5fInVTnrJKDtc= Subject key identifier: 9D:EE:D3:E6:22:F2:1A:75:CD:08:81:F3:4E:25:08:40:8C:9E:F2:1C Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93 Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93 Certificate serial: 019A7A83D5C162FBAEEE4C6C0BD92FDB84B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft Manifest number: 08A6 Signing time: Thu 13 Nov 2025 00:00:51 +0000 Manifest this update: Thu 13 Nov 2025 00:00:51 +0000 Manifest next update: Fri 14 Nov 2025 00:00:51 +0000 Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=) 2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: fHcG7V8EzGZH5S0r1l1ai1oTEn/GlYVA2QWzEZrEsgg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7a:83:d5:c1:62:fb:ae:ee:4c:6c:0b:d9:2f:db:84:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93 Validity Not Before: Nov 13 00:00:51 2025 GMT Not After : Nov 14 00:00:51 2025 GMT Subject: CN=9deed3e622f21a75cd0881f34e2508408c9ef21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:aa:08:f3:28:20:6f:3b:5b:ac:00:e9:16: 2d:b4:c7:61:9e:29:7e:ad:ef:04:7c:3c:f3:d1:9b: b0:e9:b2:1e:20:33:7c:f7:d0:11:94:20:cc:2e:a0: 69:a6:d9:84:2e:ad:de:37:75:96:03:ad:a5:cb:d5: 34:40:58:b2:cc:1d:23:fd:58:7e:c3:db:eb:85:a7: 03:01:9d:ac:f9:bf:f3:f7:c6:9b:0b:d6:4c:da:1c: 4c:e7:f7:dd:87:23:4c:d7:fb:ab:b8:12:5e:f5:d7: af:1a:f1:a3:01:58:38:8f:4d:3b:18:2e:61:04:32: 1e:81:1a:f5:36:9e:6b:ee:32:27:0f:70:19:e0:a9: bb:45:0b:1e:12:f8:6a:3b:a9:66:dd:68:b6:b3:5e: 61:22:44:90:33:d2:27:c7:d0:fa:9f:93:bb:90:9b: 26:14:30:55:af:62:a6:92:90:8e:75:36:fd:9e:d2: 6b:7c:97:42:6d:0a:94:fa:8e:eb:3a:ee:1b:13:aa: a2:f5:3a:f4:6d:37:61:08:49:3a:62:06:07:75:ed: ce:25:89:ea:2d:99:7d:f3:d1:67:9a:0e:89:ef:69: 35:ca:f9:d0:ae:f7:4e:3f:8f:1c:90:8b:3d:f0:8e: 71:7e:98:e5:db:40:1c:9a:b6:2f:b7:c2:f7:d8:9a: e2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EE:D3:E6:22:F2:1A:75:CD:08:81:F3:4E:25:08:40:8C:9E:F2:1C X509v3 Authority Key Identifier: keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:26:73:0d:ce:95:a7:42:f1:b8:7a:ae:21:17:93:0c:e5: 0a:14:1b:19:7a:82:5f:5b:11:17:01:04:0a:c3:d4:56:b2:3c: 6a:7d:92:9d:a2:ee:d8:e9:a1:3b:9e:5c:ec:5d:df:cc:e2:76: 8c:80:c4:3c:9f:4a:9e:da:50:93:8f:34:b3:3f:bb:8b:9e:2d: 75:6d:7c:b0:99:d4:50:8f:7a:84:b9:49:a5:4e:a6:fe:cf:e0: d5:bf:fb:22:63:21:37:a4:65:ce:ac:2d:ea:9c:f1:4d:07:39: c6:78:1d:25:ef:62:dd:3f:2b:96:69:7c:fd:64:c1:78:fb:29: 4e:5a:76:d1:11:26:57:0d:72:9a:44:ef:29:6c:4f:95:47:c9: 55:44:de:35:55:ed:0d:20:a7:be:93:55:60:4c:49:a6:a2:7d: 0a:cb:cc:58:bd:ea:a6:6a:a1:86:4b:06:f0:73:84:60:6c:97: 48:70:10:08:59:fd:38:80:8c:0a:58:dc:22:9f:68:c3:3a:cb: 6e:73:50:e7:1a:db:74:00:5a:95:71:4a:fd:8f:e6:37:cd:fa: 56:1f:1f:b9:1a:03:22:be:98:21:c2:b8:f8:84:87:c2:11:f0: b0:e7:a1:c5:59:dd:f0:1e:34:eb:99:de:0b:8e:f6:0e:ab:ed: c5:66:cb:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp6g9XBYvuu7kxsC9kv24S4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGRmZTBmNGJmYjY5ODJmMTk2MGFiMmEzZmFlN2EyZmI0 NTdhOTMwHhcNMjUxMTEzMDAwMDUxWhcNMjUxMTE0MDAwMDUxWjAzMTEwLwYDVQQD Eyg5ZGVlZDNlNjIyZjIxYTc1Y2QwODgxZjM0ZTI1MDg0MDhjOWVmMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLiqCPMoIG87W6wA6RYttMdhnil+ re8EfDzz0Zuw6bIeIDN899ARlCDMLqBpptmELq3eN3WWA62ly9U0QFiyzB0j/Vh+ w9vrhacDAZ2s+b/z98abC9ZM2hxM5/fdhyNM1/uruBJe9devGvGjAVg4j007GC5h BDIegRr1Np5r7jInD3AZ4Km7RQseEvhqO6lm3Wi2s15hIkSQM9Inx9D6n5O7kJsm FDBVr2KmkpCOdTb9ntJrfJdCbQqU+o7rOu4bE6qi9Tr0bTdhCEk6YgYHde3OJYnq LZl989Fnmg6J72k1yvnQrvdOP48ckIs98I5xfpjl20AcmrYvt8L32JriZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3u0+Yi8hp1zQiB804lCECMnvIcMB8GA1UdIwQY MBaAFMTd/g9L+2mC8ZYKsqP656L7RXqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MGI0ODEtNjUzNS00MGEzLTgxYTgt MzEzYTRjMTYzYjEwLzEveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84MGI0ODEtNjUzNS00MGEzLTgxYTgtMzEzYTRjMTYzYjEw LzEveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq0mcw3O ladC8bh6riEXkwzlChQbGXqCX1sRFwEECsPUVrI8an2SnaLu2OmhO55c7F3fzOJ2 jIDEPJ9KntpQk480sz+7i54tdW18sJnUUI96hLlJpU6m/s/g1b/7ImMhN6Rlzqwt 6pzxTQc5xngdJe9i3T8rlml8/WTBePspTlp20REmVw1ymkTvKWxPlUfJVUTeNVXt DSCnvpNVYExJpqJ9CsvMWL3qpmqhhksG8HOEYGyXSHAQCFn9OICMCljcIp9owzrL bnNQ5xrbdABalXFK/Y/mN836Vh8fuRoDIr6YIcK4+ISHwhHwsOehxVnd8B4065ne C472DqvtxWbLzA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:30:56 2025 by rpki-client