This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json) Hash identifier: jlab2dninHeH1hUmZbh/wUyXENWVNdf+MrFP0tINJzo= Subject key identifier: EC:E2:DD:81:68:33:1E:EB:79:33:BF:F9:6D:0A:64:B0:3F:D5:0D:3B Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc Certificate serial: 019B45815792BF3580F7BA844D740B18F2CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft Manifest number: 033B Signing time: Mon 22 Dec 2025 10:01:02 +0000 Manifest this update: Mon 22 Dec 2025 10:01:02 +0000 Manifest next update: Tue 23 Dec 2025 10:01:02 +0000 Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: mBi5hcwgMwWde4DEQpsJJJYr/gEYWhxow7iEXZQelxU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:57:92:bf:35:80:f7:ba:84:4d:74:0b:18:f2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc Validity Not Before: Dec 22 10:01:02 2025 GMT Not After : Dec 23 10:01:02 2025 GMT Subject: CN=ece2dd8168331eeb7933bff96d0a64b03fd50d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:22:ed:02:80:31:10:6a:b1:41:0e:6c:61: ad:89:5b:d8:a6:d1:d4:ba:62:cc:1e:19:d3:7f:18: 21:34:98:ed:6b:a2:37:28:05:d3:77:49:05:3f:f7: 40:26:42:fb:6f:5c:ca:1d:51:f6:e8:17:5a:a2:a9: f0:76:e7:3a:24:9d:8a:08:eb:95:bf:ed:aa:1e:ba: 6d:b4:65:d2:3a:a2:77:51:ab:1a:c5:33:92:96:7d: c7:cd:60:9b:1f:94:9a:62:9c:07:4f:71:11:78:6d: 50:c7:dd:ad:d3:88:59:81:16:eb:37:45:17:44:2c: c9:61:ff:73:2b:50:2a:4b:a4:97:62:7a:8f:f1:a5: 8b:6c:b6:9a:f2:85:4c:de:a6:04:c5:78:47:da:19: 0d:cb:62:59:30:3f:bf:d5:45:8a:e5:33:15:ce:0a: 00:11:30:b8:23:7a:6f:83:5d:97:e6:59:79:9b:b3: e0:0b:40:9a:af:bd:07:78:c0:57:c1:91:57:bf:1d: 5a:c5:0f:f5:20:e0:63:11:fa:c7:73:db:07:77:72: b6:65:7a:7a:39:a6:02:67:64:81:01:92:0b:69:03: 4d:ca:a5:af:87:14:43:22:be:2f:11:90:97:f3:19: 68:fb:8f:ae:ab:91:d8:33:86:38:3e:cc:42:f6:4d: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:DD:81:68:33:1E:EB:79:33:BF:F9:6D:0A:64:B0:3F:D5:0D:3B X509v3 Authority Key Identifier: keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ca:90:72:67:95:7b:cd:fb:8c:78:65:fc:72:b2:54:92:23: fb:79:db:1f:23:24:d9:d3:12:8a:c9:fe:dc:12:d4:31:8e:16: 27:ef:f4:d5:72:ba:a0:c7:4a:b8:4c:a0:c4:a7:92:1d:47:94: 6e:05:5e:dd:d7:32:24:e7:ce:44:18:0b:86:c9:c6:71:8a:cb: c3:04:1f:4e:3d:5c:5c:41:b5:f2:8e:df:04:68:24:12:bc:4e: 5f:0e:fb:74:b2:3e:6a:79:40:13:2e:4d:2a:a7:b0:07:22:48: 8d:74:d7:9d:7c:23:26:86:53:cd:6d:f4:74:af:68:9a:ff:e1: 1e:f6:42:ed:f5:77:5a:26:d8:bc:46:3f:aa:8f:4c:15:52:16: 66:b8:92:5d:c6:3e:bb:72:45:e9:f8:75:83:98:62:6f:b3:a8: d9:77:cb:40:d4:73:50:f5:a0:57:b3:15:d5:e1:1f:f0:33:1d: ec:df:b7:8b:5a:57:91:d4:65:f7:78:66:a3:d2:1e:3e:e8:8a: 5a:b7:4f:fd:66:0c:98:5e:91:99:dc:84:a3:51:7b:64:b7:e6: e8:27:96:1d:fe:b3:59:74:85:b5:84:04:a3:da:63:b9:a9:17: e4:1a:bc:be:87:99:26:70:a7:e4:fc:d7:61:d7:92:fb:3b:e8: 6a:ba:46:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgVeSvzWA97qETXQLGPLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZDA4MDM3YWU5ZDBhYjMwZDEwMGQxNGQ5NjE0Yjc4ZDYz OTRhYmMwHhcNMjUxMjIyMTAwMTAyWhcNMjUxMjIzMTAwMTAyWjAzMTEwLwYDVQQD EyhlY2UyZGQ4MTY4MzMxZWViNzkzM2JmZjk2ZDBhNjRiMDNmZDUwZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmci7QKAMRBqsUEObGGtiVvYptHU umLMHhnTfxghNJjta6I3KAXTd0kFP/dAJkL7b1zKHVH26Bdaoqnwduc6JJ2KCOuV v+2qHrpttGXSOqJ3UasaxTOSln3HzWCbH5SaYpwHT3EReG1Qx92t04hZgRbrN0UX RCzJYf9zK1AqS6SXYnqP8aWLbLaa8oVM3qYExXhH2hkNy2JZMD+/1UWK5TMVzgoA ETC4I3pvg12X5ll5m7PgC0Car70HeMBXwZFXvx1axQ/1IOBjEfrHc9sHd3K2ZXp6 OaYCZ2SBAZILaQNNyqWvhxRDIr4vEZCX8xlo+4+uq5HYM4Y4PsxC9k2XCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzi3YFoMx7reTO/+W0KZLA/1Q07MB8GA1UdIwQY MBaAFMfQgDeunQqzDRANFNlhS3jWOUq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2Ut M2U5YThmYmVhYWE1LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2UtM2U5YThmYmVhYWE1 LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMqQcmeV e837jHhl/HKyVJIj+3nbHyMk2dMSisn+3BLUMY4WJ+/01XK6oMdKuEygxKeSHUeU bgVe3dcyJOfORBgLhsnGcYrLwwQfTj1cXEG18o7fBGgkErxOXw77dLI+anlAEy5N KqewByJIjXTXnXwjJoZTzW30dK9omv/hHvZC7fV3WibYvEY/qo9MFVIWZriSXcY+ u3JF6fh1g5hib7Oo2XfLQNRzUPWgV7MV1eEf8DMd7N+3i1pXkdRl93hmo9IePuiK WrdP/WYMmF6RmdyEo1F7ZLfm6CeWHf6zWXSFtYQEo9pjuakX5Bq8voeZJnCn5PzX YdeS+zvoarpGkA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:34 2025 by rpki-client