This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft File: r3P0pUFxjY8uAl4GGQalvyfOPJE.mft (raw, json) Hash identifier: aw1sXYswesS2ko0TOh0HuloLsHvPsTwJyUggY1YhBq0= Subject key identifier: 86:33:DE:4F:AA:BA:87:EA:BA:88:F4:A2:DD:DE:17:13:0E:FD:D4:D7 Authority key identifier: AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91 Certificate issuer: /CN=af73f4a541718d8f2e025e061906a5bf27ce3c91 Certificate serial: 01979180B6D7B847784F5035A6B58BBB2399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft Manifest number: AB Signing time: Sat 21 Jun 2025 08:00:21 +0000 Manifest this update: Sat 21 Jun 2025 08:00:21 +0000 Manifest next update: Sun 22 Jun 2025 08:00:21 +0000 Files and hashes: 1: r3P0pUFxjY8uAl4GGQalvyfOPJE.crl (hash: YvU2jV7tcCOrY/DN55SJLTxsdV0fGuElU5BOnTRRbxo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:91:80:b6:d7:b8:47:78:4f:50:35:a6:b5:8b:bb:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af73f4a541718d8f2e025e061906a5bf27ce3c91 Validity Not Before: Jun 21 08:00:21 2025 GMT Not After : Jun 22 08:00:21 2025 GMT Subject: CN=8633de4faaba87eaba88f4a2ddde17130efdd4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:ee:61:c3:0d:c1:46:c2:de:28:9e:ca:4a: 96:31:16:1c:44:62:81:a2:f3:45:cc:2c:1f:09:73: c2:d9:d4:09:3e:da:3c:72:6c:55:d8:5b:45:6f:ec: 29:60:26:aa:a1:3f:80:05:c0:19:87:b7:10:1c:7c: 62:5e:38:e7:27:15:a1:31:fc:2a:60:a3:bc:36:4e: 3c:3d:b5:eb:dc:63:7f:ae:c6:88:f3:5f:e2:a4:da: ea:11:0c:04:f3:7e:e1:78:6c:77:87:f3:44:6c:51: 8b:2e:72:a2:76:98:4d:17:ad:e9:08:1d:2c:82:d4: c1:97:ba:1c:89:31:97:97:46:55:0b:48:95:95:8d: 6d:5c:c8:a1:ca:4d:1f:ed:e2:92:87:8c:0c:11:e2: ea:e5:05:4e:64:31:2d:7f:52:2d:6a:a0:e0:ef:80: c2:9e:4c:20:c4:2e:ed:a4:79:fc:b4:1e:d8:a1:16: 7a:81:37:a2:78:44:e6:09:2c:a5:85:3d:20:c2:12: eb:b7:39:67:53:09:02:66:80:aa:d2:17:8b:13:d9: ae:14:00:8a:8e:21:19:61:74:b4:f5:14:8a:46:e2: a8:2c:40:82:ae:5f:1d:bb:a0:ae:d1:e4:9f:1c:5e: 53:66:df:da:8b:25:b1:6a:00:10:73:c1:3e:6a:cd: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:DE:4F:AA:BA:87:EA:BA:88:F4:A2:DD:DE:17:13:0E:FD:D4:D7 X509v3 Authority Key Identifier: keyid:AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7a:2f:41:b2:10:6d:ce:9d:52:5c:34:3a:e9:d9:1e:48:1a: 88:ff:73:3c:c9:3e:9a:7a:ef:39:1d:5e:6e:d0:25:29:0b:73: 78:1d:a5:ff:7e:7e:c2:6e:8e:33:08:da:b3:7b:59:da:f5:6f: 0e:3b:cd:2d:4e:04:fb:c0:58:13:cc:b9:33:b9:a0:d9:eb:1b: 8b:cd:03:db:30:5d:27:b7:8f:e7:40:8c:f7:11:f3:66:30:94: d6:47:4a:d5:0e:37:f6:7c:10:d3:45:e5:b4:15:9d:1a:55:c7: f9:ed:79:4c:06:ee:cf:3f:9c:6a:a9:d9:51:f9:88:60:bd:f5: d5:82:be:62:57:e4:de:09:75:62:d5:93:44:4c:d8:f0:44:38: c0:22:c2:90:a3:c6:38:cc:bb:73:94:5e:b2:66:d9:a9:03:c3: c3:b6:b1:64:b8:9d:65:00:3e:89:da:98:35:07:83:9c:b7:c7: 5d:96:89:ec:6b:ad:2e:95:cd:67:a4:9d:46:16:1c:3e:6b:ad: c0:63:cf:9d:58:9b:ae:1c:58:87:53:88:41:7b:7a:1f:7e:6f: 1f:6f:1d:45:71:be:6e:11:64:6b:62:60:9b:9c:84:04:e7:37: 45:43:0d:fb:3b:a6:43:65:ee:2e:58:e6:36:08:fe:a3:5c:99: 38:ad:5e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeRgLbXuEd4T1A1prWLuyOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzNmNGE1NDE3MThkOGYyZTAyNWUwNjE5MDZhNWJmMjdj ZTNjOTEwHhcNMjUwNjIxMDgwMDIxWhcNMjUwNjIyMDgwMDIxWjAzMTEwLwYDVQQD Eyg4NjMzZGU0ZmFhYmE4N2VhYmE4OGY0YTJkZGRlMTcxMzBlZmRkNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZruYcMNwUbC3iieykqWMRYcRGKB ovNFzCwfCXPC2dQJPto8cmxV2FtFb+wpYCaqoT+ABcAZh7cQHHxiXjjnJxWhMfwq YKO8Nk48PbXr3GN/rsaI81/ipNrqEQwE837heGx3h/NEbFGLLnKidphNF63pCB0s gtTBl7ociTGXl0ZVC0iVlY1tXMihyk0f7eKSh4wMEeLq5QVOZDEtf1ItaqDg74DC nkwgxC7tpHn8tB7YoRZ6gTeieETmCSylhT0gwhLrtzlnUwkCZoCq0heLE9muFACK jiEZYXS09RSKRuKoLECCrl8du6Cu0eSfHF5TZt/aiyWxagAQc8E+as3LxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYz3k+quofquoj0ot3eFxMO/dTXMB8GA1UdIwQY MBaAFK9z9KVBcY2PLgJeBhkGpb8nzjyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZDNjNzYtZThiMS00YTk0LWE4MmQt YTEwY2NhYjk0NWU3LzEvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83ZDNjNzYtZThiMS00YTk0LWE4MmQtYTEwY2NhYjk0NWU3 LzEvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3ovQbIQ bc6dUlw0OunZHkgaiP9zPMk+mnrvOR1ebtAlKQtzeB2l/35+wm6OMwjas3tZ2vVv DjvNLU4E+8BYE8y5M7mg2esbi80D2zBdJ7eP50CM9xHzZjCU1kdK1Q439nwQ00Xl tBWdGlXH+e15TAbuzz+caqnZUfmIYL311YK+Ylfk3gl1YtWTREzY8EQ4wCLCkKPG OMy7c5ResmbZqQPDw7axZLidZQA+idqYNQeDnLfHXZaJ7GutLpXNZ6SdRhYcPmut wGPPnVibrhxYh1OIQXt6H35vH28dRXG+bhFka2Jgm5yEBOc3RUMN+zumQ2XuLljm Ngj+o1yZOK1edQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:07:06 2025 by rpki-client