This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json) Hash identifier: O7yo925VVjC3kYswGLYKEI3Wr+BiyCOHlVy6bfOXqoE= Subject key identifier: 1E:60:74:8B:47:53:83:C7:97:53:22:DC:EA:75:ED:43:35:44:1F:C7 Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee Certificate serial: 019B4F5FB17805CE19C11A1487FEFA78E0A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 08:00:29 +0000 Manifest this update: Wed 24 Dec 2025 08:00:29 +0000 Manifest next update: Thu 25 Dec 2025 08:00:29 +0000 Files and hashes: 1: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: qF2SpRYFjAOcEM4lQOWaCX017uBSpbhrAnnbw/LrRNg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:b1:78:05:ce:19:c1:1a:14:87:fe:fa:78:e0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee Validity Not Before: Dec 24 08:00:29 2025 GMT Not After : Dec 25 08:00:29 2025 GMT Subject: CN=1e60748b475383c7975322dcea75ed4335441fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:8f:00:b0:0e:96:77:be:00:84:8f:93:95: c5:c3:0a:3b:bb:a2:49:0b:f1:1c:90:dc:66:24:f8: e4:92:8a:b3:7f:30:7f:fb:6c:44:18:ac:95:68:4e: 1c:7e:c9:b9:e2:02:a4:da:f6:db:7b:70:42:d6:50: 51:6b:23:d2:bc:0c:f6:f3:e6:b2:92:45:71:4f:37: d6:8d:ec:6b:10:cc:7b:ea:b6:79:33:02:5f:b6:ff: 02:c5:9d:91:8d:5a:17:75:0f:5b:5b:db:96:40:2b: 7f:90:1c:b0:eb:a8:26:67:75:2d:25:08:4c:5e:b9: 1d:7e:58:71:4b:05:51:4b:c4:0d:a9:d9:fe:b7:a9: 00:64:38:66:e6:1b:95:8e:7b:4c:ce:4b:2c:16:79: 85:6d:58:d0:08:bb:c6:6f:cf:77:6f:c8:87:1c:5e: cc:31:25:21:1e:86:a1:98:96:63:f3:42:64:95:c6: 78:93:63:ee:65:d6:94:8b:b7:ab:52:d8:d9:a2:d6: 40:b8:aa:de:7e:a2:81:fc:e6:9e:ae:2d:96:6b:1d: c8:7d:af:d6:96:5f:6a:d6:23:25:c9:b6:e2:94:59: bd:28:b9:5a:c7:3b:cb:3d:1b:89:28:83:bd:fc:5b: 42:99:2c:5d:17:fb:79:a7:99:77:ef:0d:31:46:54: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:60:74:8B:47:53:83:C7:97:53:22:DC:EA:75:ED:43:35:44:1F:C7 X509v3 Authority Key Identifier: keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:0f:c6:2f:3c:7d:a9:c5:10:32:88:c3:a8:02:79:28:66:7f: cf:cd:86:07:63:b0:05:a7:36:4d:8b:99:7f:27:fa:c0:5d:c5: 94:4b:c8:e1:c5:88:73:4d:e3:ed:37:99:6d:d8:27:a2:be:84: eb:9d:77:a2:b7:0a:ab:5d:57:df:b2:9f:4a:11:a4:0f:0d:a5: 25:17:d6:2a:bc:ca:c5:4a:f9:b4:69:f7:19:d1:09:44:56:df: cc:06:71:2d:55:ae:67:8e:d1:d4:9e:03:d9:b6:7a:d1:63:29: 0e:a1:04:6b:72:0b:37:f0:84:1e:1b:51:5e:65:54:01:5e:69: a7:e4:24:b0:a3:c9:58:b8:19:3e:8b:10:8a:3a:26:40:5e:07: 03:2a:ba:53:70:be:f5:95:8a:5b:b5:a9:a2:99:4c:6c:ef:4d: b7:a4:a3:63:e8:da:e3:1c:6a:ed:a6:28:b6:03:c5:48:8d:f0: 92:3f:05:84:15:8e:85:b8:33:03:b8:ea:9d:e0:f2:e2:4c:98: 6b:19:30:38:88:8f:5e:67:a2:d4:06:95:b5:9a:82:32:fd:f0: 9e:16:a1:36:28:ff:f4:a8:22:c5:24:11:98:31:2c:4a:5a:ce: 81:2c:fd:a1:a1:ee:bc:f7:67:10:1c:01:3b:f4:e9:59:3b:12: 3a:f6:98:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX7F4Bc4ZwRoUh/76eOCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMWQ3NmU4ODJiZjQxMDQ5YjVhZDkzZDI1YTFkZGNiYTE5 MjI3ZWUwHhcNMjUxMjI0MDgwMDI5WhcNMjUxMjI1MDgwMDI5WjAzMTEwLwYDVQQD EygxZTYwNzQ4YjQ3NTM4M2M3OTc1MzIyZGNlYTc1ZWQ0MzM1NDQxZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplqPALAOlne+AISPk5XFwwo7u6JJ C/EckNxmJPjkkoqzfzB/+2xEGKyVaE4cfsm54gKk2vbbe3BC1lBRayPSvAz28+ay kkVxTzfWjexrEMx76rZ5MwJftv8CxZ2RjVoXdQ9bW9uWQCt/kByw66gmZ3UtJQhM XrkdflhxSwVRS8QNqdn+t6kAZDhm5huVjntMzkssFnmFbVjQCLvGb893b8iHHF7M MSUhHoahmJZj80JklcZ4k2PuZdaUi7erUtjZotZAuKrefqKB/Oaeri2Wax3Ifa/W ll9q1iMlybbilFm9KLlaxzvLPRuJKIO9/FtCmSxdF/t5p5l37w0xRlQIkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5gdItHU4PHl1Mi3Op17UM1RB/HMB8GA1UdIwQY MBaAFG8dduiCv0EEm1rZPSWh3cuhkifuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MTc5ODItZTBiZi00ZTkwLWE5Nzkt YjE4ZjVmNjI2MmFlLzEvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MTc5ODItZTBiZi00ZTkwLWE5NzktYjE4ZjVmNjI2MmFl LzEvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvg/GLzx9 qcUQMojDqAJ5KGZ/z82GB2OwBac2TYuZfyf6wF3FlEvI4cWIc03j7TeZbdgnor6E 6513orcKq11X37KfShGkDw2lJRfWKrzKxUr5tGn3GdEJRFbfzAZxLVWuZ47R1J4D 2bZ60WMpDqEEa3ILN/CEHhtRXmVUAV5pp+QksKPJWLgZPosQijomQF4HAyq6U3C+ 9ZWKW7WpoplMbO9Nt6SjY+ja4xxq7aYotgPFSI3wkj8FhBWOhbgzA7jqneDy4kyY axkwOIiPXmei1AaVtZqCMv3wnhahNij/9KgixSQRmDEsSlrOgSz9oaHuvPdnEBwB O/TpWTsSOvaYDA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:23:32 2026 by rpki-client