This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json) Hash identifier: 4DBO/t+c+CbHfT7RafBp+aE1y8xXmac/MYAuNTgW+CU= Subject key identifier: 2B:32:E2:5F:E8:DD:5F:7B:00:E0:17:58:AC:56:96:97:29:07:AA:6F Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96 Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96 Certificate serial: 019B680D6C0859CDC9059FCB2216DCEB86A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft Manifest number: 10C6 Signing time: Mon 29 Dec 2025 03:01:08 +0000 Manifest this update: Mon 29 Dec 2025 03:01:08 +0000 Manifest next update: Tue 30 Dec 2025 03:01:08 +0000 Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: hmjYh+X+RZjL/J8vmTUnVrU5v6Spul+qTDKPy85DbsA=) 2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:6c:08:59:cd:c9:05:9f:cb:22:16:dc:eb:86:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96 Validity Not Before: Dec 29 03:01:08 2025 GMT Not After : Dec 30 03:01:08 2025 GMT Subject: CN=2b32e25fe8dd5f7b00e01758ac5696972907aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:5f:41:8e:09:13:28:13:54:20:ad:44:1d: ef:e5:27:90:c8:7c:4c:b5:07:eb:be:b8:58:6e:85: 2b:64:90:83:af:ad:62:5b:8d:e9:3a:c4:4f:ed:4e: 71:0e:6b:c2:76:84:78:29:2f:54:f6:89:02:74:09: d4:3a:df:ef:64:79:f0:be:f7:06:53:da:3c:94:ba: 57:28:b0:8f:e8:94:0c:3d:e1:8f:e6:c6:58:53:79: bb:c3:5b:e2:38:c4:f4:f1:57:22:71:4c:bd:3c:ae: b8:cb:d2:14:7b:09:c3:5d:d8:02:e2:13:74:85:02: a6:59:63:8c:c5:55:f5:5e:47:16:f2:72:13:f2:6b: b9:f0:a7:e7:dd:6e:65:d4:43:fa:9b:bb:02:2d:15: 5b:0a:8b:63:92:ed:6c:6c:a4:c6:85:41:15:2f:e9: d3:ee:13:b4:c5:61:7d:7d:fd:e6:8d:7e:d3:16:ba: a4:4d:c2:df:8a:0d:cc:5a:5c:f6:ec:70:7b:3f:92: d6:41:70:ba:53:00:2f:16:42:9a:b1:d3:36:c5:ef: b7:3a:70:86:56:e9:58:0b:ea:70:9a:50:a9:4f:46: 51:b0:e7:5d:8d:81:d8:5e:1e:e3:1f:4e:2d:a4:30: f3:55:3b:8c:3d:15:a9:c2:6c:c0:5d:d9:6c:04:0d: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:E2:5F:E8:DD:5F:7B:00:E0:17:58:AC:56:96:97:29:07:AA:6F X509v3 Authority Key Identifier: keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0b:ea:44:8c:9c:86:37:b5:a3:a0:4f:d5:e0:3f:dc:d2:ff: 67:4b:b4:26:9b:41:fb:58:9c:4a:20:88:6f:41:37:70:09:ac: a0:2c:9a:4a:35:68:cb:1d:95:6e:c2:31:94:21:32:90:41:03: 27:eb:60:34:96:d6:f1:6d:3a:ff:b6:ea:52:88:cd:23:6a:66: bc:f7:c1:8b:1e:47:65:0a:de:e6:90:f1:af:56:20:71:f2:be: 8a:eb:9b:c7:da:53:28:27:cf:50:90:1a:1c:cd:89:61:e3:db: 74:ab:57:77:ab:d5:f5:da:3f:8d:cf:7c:3f:d2:52:36:0f:d9: 3c:3f:5c:d8:4c:95:38:1e:27:6e:a0:c9:2e:7b:ae:23:7b:13: 3f:67:84:26:15:29:7e:38:cd:0a:2a:bc:01:29:26:97:d9:c4: ea:34:80:84:28:ab:af:bc:3a:09:4d:ee:0b:ac:0c:f2:15:27: c1:2c:85:a4:97:53:3a:5b:f1:ff:ab:3e:4f:e8:7b:d1:50:59: 0e:10:ce:d1:6a:a5:05:0b:39:d6:f0:b8:fe:ed:c3:9c:4f:80: 3f:23:54:36:66:3d:73:fe:44:c4:3b:09:c8:2e:f1:0f:e2:99: 55:9b:78:a2:ed:bc:a8:ab:8c:35:ed:c8:5c:c2:a0:9c:a5:ea: 03:ca:17:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDWwIWc3JBZ/LIhbc64aoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYzgzODg5MWI1MWUwNjdlYTJlYmY5YTQ0ZDk2ODAxNDg1 NjJlOTYwHhcNMjUxMjI5MDMwMTA4WhcNMjUxMjMwMDMwMTA4WjAzMTEwLwYDVQQD EygyYjMyZTI1ZmU4ZGQ1ZjdiMDBlMDE3NThhYzU2OTY5NzI5MDdhYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzdfQY4JEygTVCCtRB3v5SeQyHxM tQfrvrhYboUrZJCDr61iW43pOsRP7U5xDmvCdoR4KS9U9okCdAnUOt/vZHnwvvcG U9o8lLpXKLCP6JQMPeGP5sZYU3m7w1viOMT08VcicUy9PK64y9IUewnDXdgC4hN0 hQKmWWOMxVX1XkcW8nIT8mu58Kfn3W5l1EP6m7sCLRVbCotjku1sbKTGhUEVL+nT 7hO0xWF9ff3mjX7TFrqkTcLfig3MWlz27HB7P5LWQXC6UwAvFkKasdM2xe+3OnCG VulYC+pwmlCpT0ZRsOddjYHYXh7jH04tpDDzVTuMPRWpwmzAXdlsBA2h3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsy4l/o3V97AOAXWKxWlpcpB6pvMB8GA1UdIwQY MBaAFOHIOIkbUeBn6i6/mkTZaAFIVi6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80NWQzZjMtN2VjYS00YzE0LWFhZjct MTViMzkxMzRjNDFlLzEvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80NWQzZjMtN2VjYS00YzE0LWFhZjctMTViMzkxMzRjNDFl LzEvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAvqRIyc hje1o6BP1eA/3NL/Z0u0JptB+1icSiCIb0E3cAmsoCyaSjVoyx2VbsIxlCEykEED J+tgNJbW8W06/7bqUojNI2pmvPfBix5HZQre5pDxr1YgcfK+iuubx9pTKCfPUJAa HM2JYePbdKtXd6vV9do/jc98P9JSNg/ZPD9c2EyVOB4nbqDJLnuuI3sTP2eEJhUp fjjNCiq8ASkml9nE6jSAhCirr7w6CU3uC6wM8hUnwSyFpJdTOlvx/6s+T+h70VBZ DhDO0WqlBQs51vC4/u3DnE+APyNUNmY9c/5ExDsJyC7xD+KZVZt4ou28qKuMNe3I XMKgnKXqA8oXgQ== -----END CERTIFICATE-----Generated at Sun Jan 11 22:30:49 2026 by rpki-client