This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json) Hash identifier: /L0WEwThyyF517NmeBQNyAIJHUqvqn2ygtK+NMvp4Fs= Subject key identifier: 48:37:C9:E2:66:2A:7F:6D:5A:81:12:D6:05:36:32:12:CF:56:3C:3F Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8 Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8 Certificate serial: 019A5C0B560B9014392C83C8C9EA366CA25D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft Manifest number: 01DB Signing time: Fri 07 Nov 2025 02:00:38 +0000 Manifest this update: Fri 07 Nov 2025 02:00:38 +0000 Manifest next update: Sat 08 Nov 2025 02:00:38 +0000 Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: AI7iSD+8SJaBIryROEJx0N+Ov60nEicM22aafJfmRqU=) 2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5c:0b:56:0b:90:14:39:2c:83:c8:c9:ea:36:6c:a2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8 Validity Not Before: Nov 7 02:00:38 2025 GMT Not After : Nov 8 02:00:38 2025 GMT Subject: CN=4837c9e2662a7f6d5a8112d605363212cf563c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:14:96:16:98:13:fc:9d:d1:a7:62:31:20: b5:f4:e1:1e:2d:9d:98:d4:93:33:32:56:e4:98:fb: eb:15:7e:82:03:35:59:d7:e2:99:13:b7:4a:c7:94: 19:fb:4d:ac:7d:d5:7d:8c:8c:5d:88:d6:c6:05:dd: f2:bf:48:ce:27:92:1a:d7:54:39:1e:44:94:89:bd: 33:50:64:0b:09:7e:5f:c9:fb:ff:8e:be:10:bd:41: 55:f0:77:ef:87:e2:04:8c:d8:a0:d3:d1:42:f2:4e: 9e:16:d2:92:86:25:b0:69:63:fa:36:7f:bc:07:ce: 18:bd:9d:bd:94:de:49:cd:0b:f5:9c:7c:2a:a0:20: 18:d2:15:e1:da:f1:32:dd:8e:8d:c9:2e:d6:04:f9: a5:87:2c:27:fd:1a:8b:51:d6:b7:6d:62:9c:cc:6b: 76:2a:e8:40:c1:7a:fd:d6:76:42:a0:34:d2:1e:97: c6:6c:bb:06:6c:55:22:82:c1:69:85:c8:bd:e5:6f: 18:35:46:62:24:aa:3d:39:8e:8f:6d:8b:cb:f9:6a: be:fd:fe:6f:3d:c0:59:b5:0c:a2:ad:8d:0d:6a:aa: 6e:fd:28:8b:a7:41:d7:b4:8e:48:cd:33:2e:f9:36: 18:1b:03:98:a5:44:9f:5e:28:9f:8b:d0:05:d9:86: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:C9:E2:66:2A:7F:6D:5A:81:12:D6:05:36:32:12:CF:56:3C:3F X509v3 Authority Key Identifier: keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a6:f1:90:13:78:b2:a5:e9:52:71:d2:b3:90:6a:39:2c:d1: 23:cf:b1:67:aa:d6:da:35:09:03:a2:2a:87:9a:5b:b0:90:55: df:68:94:b2:cb:0e:ca:9b:34:da:da:09:4e:09:24:1f:c6:bd: 2b:17:16:54:92:95:f0:14:23:5d:8b:ab:13:52:58:b5:ae:0c: 86:11:89:1a:54:c4:ac:4d:16:f3:d8:4a:97:02:62:92:57:d3: e9:d4:5d:0f:0b:af:06:cc:ed:c8:9c:f1:68:2f:72:0c:aa:2d: 8c:bf:92:c8:00:35:4b:36:8d:c4:6f:05:b2:59:3a:a2:0a:de: cf:45:28:19:cd:d0:9c:6a:b2:4e:84:d4:8a:02:46:86:69:94: e2:13:b9:e7:0c:cf:3c:62:2f:bf:e6:59:dc:cf:ce:16:43:a7: 0c:0f:ec:81:d5:f7:35:41:0a:80:e5:0a:cc:dc:de:3b:a2:17: 8c:aa:bd:75:cb:ba:78:0a:d4:8d:d3:e7:1c:31:36:ea:1e:8d: 38:74:e9:d5:fb:7c:d3:7e:12:52:b3:81:c3:fe:3b:ec:02:9f: fe:88:09:88:f3:02:dd:2d:d7:bf:82:65:48:27:20:08:23:b8: ca:e8:e3:e8:d9:67:c3:23:42:a1:5a:7c:d3:d7:16:c6:b1:72: 0f:24:c4:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpcC1YLkBQ5LIPIyeo2bKJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZWU2ZGY5NzI4Y2Q4YWYwZjM0YTAzZWQ2ZWEzMTUxYzNi YzIyYzgwHhcNMjUxMTA3MDIwMDM4WhcNMjUxMTA4MDIwMDM4WjAzMTEwLwYDVQQD Eyg0ODM3YzllMjY2MmE3ZjZkNWE4MTEyZDYwNTM2MzIxMmNmNTYzYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydwUlhaYE/yd0adiMSC19OEeLZ2Y 1JMzMlbkmPvrFX6CAzVZ1+KZE7dKx5QZ+02sfdV9jIxdiNbGBd3yv0jOJ5Ia11Q5 HkSUib0zUGQLCX5fyfv/jr4QvUFV8Hfvh+IEjNig09FC8k6eFtKShiWwaWP6Nn+8 B84YvZ29lN5JzQv1nHwqoCAY0hXh2vEy3Y6NyS7WBPmlhywn/RqLUda3bWKczGt2 KuhAwXr91nZCoDTSHpfGbLsGbFUigsFphci95W8YNUZiJKo9OY6PbYvL+Wq+/f5v PcBZtQyirY0Naqpu/SiLp0HXtI5IzTMu+TYYGwOYpUSfXiifi9AF2YYvSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg3yeJmKn9tWoES1gU2MhLPVjw/MB8GA1UdIwQY MBaAFNrubflyjNivDzSgPtbqMVHDvCLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2Ut NGQyMGUzNGQwOTkyLzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2UtNGQyMGUzNGQwOTky LzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKbxkBN4 sqXpUnHSs5BqOSzRI8+xZ6rW2jUJA6Iqh5pbsJBV32iUsssOyps02toJTgkkH8a9 KxcWVJKV8BQjXYurE1JYta4MhhGJGlTErE0W89hKlwJiklfT6dRdDwuvBsztyJzx aC9yDKotjL+SyAA1SzaNxG8Fslk6ogrez0UoGc3QnGqyToTUigJGhmmU4hO55wzP PGIvv+ZZ3M/OFkOnDA/sgdX3NUEKgOUKzNzeO6IXjKq9dcu6eArUjdPnHDE26h6N OHTp1ft8034SUrOBw/477AKf/ogJiPMC3S3Xv4JlSCcgCCO4yujj6NlnwyNCoVp8 09cWxrFyDyTELw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:19:01 2025 by rpki-client