This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft File: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft (raw, json) Hash identifier: 4+6jm9ktzO5KSUTAKW75bY4OufDizDsbbK9PDwR7GGY= Subject key identifier: 7F:A1:23:45:0E:BA:56:47:CD:4D:77:BD:9F:EF:44:B7:E2:9D:8D:BA Authority key identifier: 89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09 Certificate issuer: /CN=8915c3bc8d5905f24fbe3051bce7200921383009 Certificate serial: 01998B79638B4A2F12A287066C5CCB4AB9CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft Manifest number: 0179 Signing time: Sat 27 Sep 2025 14:00:12 +0000 Manifest this update: Sat 27 Sep 2025 14:00:12 +0000 Manifest next update: Sun 28 Sep 2025 14:00:12 +0000 Files and hashes: 1: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl (hash: +I3rC1a38x1mpDT6xfc0n4ygr0mu0ITgHTJFOZcyijo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:8b:79:63:8b:4a:2f:12:a2:87:06:6c:5c:cb:4a:b9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8915c3bc8d5905f24fbe3051bce7200921383009 Validity Not Before: Sep 27 14:00:12 2025 GMT Not After : Sep 28 14:00:12 2025 GMT Subject: CN=7fa123450eba5647cd4d77bd9fef44b7e29d8dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:d3:09:3f:df:df:b3:51:62:d8:bf:11:19: 59:25:97:b9:b0:13:f7:2a:a8:e4:4e:8c:21:53:6f: 18:cb:a6:86:37:9c:b7:83:37:3c:e7:32:58:4a:04: 2b:a8:ff:89:f9:9c:ea:7f:05:43:e8:57:19:39:57: 64:f7:6b:98:db:c4:cc:12:f9:2c:7d:d8:b7:9a:63: db:0f:15:02:65:54:a3:32:d4:43:22:69:f8:50:04: 05:2e:f6:d1:71:33:0e:ea:ea:9f:8d:c9:f0:36:db: 45:b9:35:8b:4b:6b:f4:f1:3d:de:36:42:2d:f5:49: 58:7e:66:7f:57:32:e8:7a:be:53:f5:60:6c:41:3d: 67:8f:1e:4c:d4:9d:ea:e2:80:45:72:1f:9b:7c:ce: 82:d0:ed:e3:1a:30:6b:44:c0:6e:88:19:ae:0b:23: 39:54:ab:92:23:1d:68:48:07:66:eb:93:90:10:b2: 35:9a:4f:c7:64:d2:87:78:fa:8b:9f:da:13:55:3a: ec:08:90:60:67:d3:35:70:56:ef:ec:ee:eb:60:13: ce:8d:16:eb:f6:ab:c9:ca:d8:96:f9:4e:bb:b1:d1: a1:17:3d:46:ea:19:74:9d:74:50:26:11:40:3c:c1: 12:9e:1b:7c:d7:e8:ed:04:0f:b7:2a:b5:84:98:87: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A1:23:45:0E:BA:56:47:CD:4D:77:BD:9F:EF:44:B7:E2:9D:8D:BA X509v3 Authority Key Identifier: keyid:89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:59:66:93:32:a8:4f:f1:8c:c5:ec:c9:4f:e4:44:65:c1:6c: 7a:b5:79:77:c7:29:65:e1:86:7a:07:9b:b5:94:e4:56:01:f2: b4:da:a6:71:1c:f7:c4:84:96:0d:a8:b9:01:1e:98:f7:02:3e: 74:ac:a8:3d:a7:af:9d:04:77:cf:de:1e:94:5f:21:73:e1:38: b6:a3:fc:1d:ee:2a:15:bd:a1:50:93:5f:27:fd:45:1e:ad:87: 91:99:64:76:e2:3e:4f:5f:cb:7b:ea:94:3d:fb:75:84:1c:7e: 84:be:ee:63:1a:ac:22:bd:d3:5d:32:7a:c8:f5:0f:c0:8a:0a: dc:0e:08:2f:68:f7:e6:d2:e4:94:72:9f:b8:18:f2:fd:c2:68: 74:d2:14:00:6a:54:f7:a9:d7:6b:58:9c:8e:43:42:39:cb:b3: 7e:93:fe:66:cf:12:a7:21:5e:99:8b:3e:f4:a4:42:c3:b5:92: 9f:78:c5:92:36:f1:bb:16:33:b8:47:d4:37:e7:87:7e:4d:74: 6c:d5:e7:72:33:fc:b7:bc:ae:9e:b1:43:23:a6:86:8c:09:6f: 30:cf:03:be:88:5c:f9:fb:fe:b4:15:9f:4f:b4:4a:7a:3d:27: 5c:95:f2:e8:52:30:0c:0f:eb:4a:7b:cf:2a:6d:01:18:58:05: 83:bf:8a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZmLeWOLSi8SoocGbFzLSrnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MTVjM2JjOGQ1OTA1ZjI0ZmJlMzA1MWJjZTcyMDA5MjEz ODMwMDkwHhcNMjUwOTI3MTQwMDEyWhcNMjUwOTI4MTQwMDEyWjAzMTEwLwYDVQQD Eyg3ZmExMjM0NTBlYmE1NjQ3Y2Q0ZDc3YmQ5ZmVmNDRiN2UyOWQ4ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxvTCT/f37NRYti/ERlZJZe5sBP3 KqjkTowhU28Yy6aGN5y3gzc85zJYSgQrqP+J+ZzqfwVD6FcZOVdk92uY28TMEvks fdi3mmPbDxUCZVSjMtRDImn4UAQFLvbRcTMO6uqfjcnwNttFuTWLS2v08T3eNkIt 9UlYfmZ/VzLoer5T9WBsQT1njx5M1J3q4oBFch+bfM6C0O3jGjBrRMBuiBmuCyM5 VKuSIx1oSAdm65OQELI1mk/HZNKHePqLn9oTVTrsCJBgZ9M1cFbv7O7rYBPOjRbr 9qvJytiW+U67sdGhFz1G6hl0nXRQJhFAPMESnht81+jtBA+3KrWEmIdmQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+hI0UOulZHzU13vZ/vRLfinY26MB8GA1UdIwQY MBaAFIkVw7yNWQXyT74wUbznIAkhODAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVJYRHZJMVpCZkpQdmpCUnZPY2dDU0U0TUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82M2VjZDktM2QxOC00ODEwLTlkYjQt ZDM2YzE2Mjc5NTUyLzEvaVJYRHZJMVpCZkpQdmpCUnZPY2dDU0U0TUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82M2VjZDktM2QxOC00ODEwLTlkYjQtZDM2YzE2Mjc5NTUy LzEvaVJYRHZJMVpCZkpQdmpCUnZPY2dDU0U0TUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjllmkzKo T/GMxezJT+REZcFserV5d8cpZeGGegebtZTkVgHytNqmcRz3xISWDai5AR6Y9wI+ dKyoPaevnQR3z94elF8hc+E4tqP8He4qFb2hUJNfJ/1FHq2HkZlkduI+T1/Le+qU Pft1hBx+hL7uYxqsIr3TXTJ6yPUPwIoK3A4IL2j35tLklHKfuBjy/cJodNIUAGpU 96nXa1icjkNCOcuzfpP+Zs8SpyFemYs+9KRCw7WSn3jFkjbxuxYzuEfUN+eHfk10 bNXncjP8t7yunrFDI6aGjAlvMM8Dvohc+fv+tBWfT7RKej0nXJXy6FIwDA/rSnvP Km0BGFgFg7+KHQ== -----END CERTIFICATE-----Generated at Thu Dec 25 21:07:23 2025 by rpki-client