This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json) Hash identifier: lEv9xxPDHtETAO12TpD51XHNEpUGu0OHDfaIby72+hw= Subject key identifier: 6E:A9:2D:F7:D7:F2:66:04:5A:B5:79:B9:78:AD:24:36:0B:C5:43:38 Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a Certificate serial: 019AB5F4292A367CB5BB9F0405D4BAA49711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft Manifest number: 106C Signing time: Mon 24 Nov 2025 13:01:08 +0000 Manifest this update: Mon 24 Nov 2025 13:01:08 +0000 Manifest next update: Tue 25 Nov 2025 13:01:08 +0000 Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: eJnmrT2/e2M0lE4bkYpJ2l64/8/bx/ObTTDTHDuaJ8Q=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:f4:29:2a:36:7c:b5:bb:9f:04:05:d4:ba:a4:97:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a Validity Not Before: Nov 24 13:01:08 2025 GMT Not After : Nov 25 13:01:08 2025 GMT Subject: CN=6ea92df7d7f266045ab579b978ad24360bc54338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:66:e2:8b:af:00:0b:6b:e1:3f:c1:15:33: fd:c8:45:4d:54:ea:b7:22:b9:74:06:69:e3:d4:c5: ef:f5:24:bb:17:a4:96:be:39:6e:f8:77:fe:7e:68: e8:62:66:cd:c7:61:c5:d2:96:a7:74:6b:0f:d9:2b: ee:df:2d:76:18:82:87:a3:fa:2e:b5:06:96:a2:8e: 47:28:e7:d9:19:07:7a:20:bd:0c:3d:50:c2:b3:45: 2c:e8:ff:58:2f:b8:3f:dd:3e:f9:6c:4a:85:9e:e8: 2d:bd:e6:5b:0c:95:ae:52:97:9e:ba:1a:67:f1:30: 60:e4:9d:b5:58:21:79:87:c4:68:46:27:2c:a9:41: 7e:2b:67:14:30:42:12:1d:ac:54:c9:c3:a4:78:e7: ad:b7:7b:45:fb:3b:c6:2a:26:b3:18:8d:70:3c:fc: 93:51:44:b0:c9:3e:f2:b5:f3:1a:02:cb:98:5f:da: 19:a0:7a:b6:60:3c:f6:0a:e4:53:b0:e5:89:c6:01: 2e:9a:a1:d9:b1:ac:1f:81:51:5a:a9:c5:5f:9a:d2: ab:32:43:51:6e:f0:1b:db:e3:51:16:55:85:17:32: 6c:35:ad:e4:63:8f:1e:28:1d:06:70:b5:d4:09:90: f5:a5:92:82:8e:41:4a:8b:6c:3e:b5:1f:21:57:11: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A9:2D:F7:D7:F2:66:04:5A:B5:79:B9:78:AD:24:36:0B:C5:43:38 X509v3 Authority Key Identifier: keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7b:db:ef:4c:d4:2c:b1:81:01:78:6a:98:23:54:a9:f0:17: 8c:bf:fd:3f:f6:d5:d5:8c:4e:99:e8:52:be:48:f1:4d:79:59: 31:f7:c8:cc:c6:8e:0e:ca:7c:db:1e:68:fd:d6:0b:d2:d9:8e: 27:91:93:82:a6:79:18:7e:4f:03:6e:79:fb:32:be:75:be:b1: 13:ab:31:89:f4:c4:a1:d8:4a:e3:3a:58:9d:73:c4:b6:02:a3: 0e:f9:1f:90:98:bf:dc:13:c5:09:6f:8c:0d:2a:27:d7:8a:7a: 66:75:a9:80:6d:57:1e:b4:2b:1b:9d:b2:30:e0:0b:1c:88:c6: df:10:04:ff:b1:5c:d1:c2:bd:ab:f9:3a:fd:d8:aa:f9:fc:72: 31:f6:4a:b8:ed:c6:0d:eb:8d:49:ff:29:a3:07:d6:f6:2c:34: b6:6b:67:e0:ac:dc:fb:60:fc:26:9a:c5:a7:49:f5:41:79:bc: d1:37:d3:8a:8b:be:69:12:13:3f:f0:aa:f7:36:fe:61:24:88: 8c:d7:69:6f:35:56:f0:0f:9f:f2:5f:25:08:00:79:36:13:da: 91:da:91:02:9a:b4:dc:3e:f0:59:8c:98:96:80:5a:95:24:62: 81:34:14:c5:4b:56:90:8c:91:66:60:21:65:87:34:d5:66:46: f7:88:ed:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq19CkqNny1u58EBdS6pJcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMWYxMjNiNWJhNGJjMWI3NzkzYjllOWZhMWI0M2RhYzQ5 YTY2MGEwHhcNMjUxMTI0MTMwMTA4WhcNMjUxMTI1MTMwMTA4WjAzMTEwLwYDVQQD Eyg2ZWE5MmRmN2Q3ZjI2NjA0NWFiNTc5Yjk3OGFkMjQzNjBiYzU0MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBFm4ouvAAtr4T/BFTP9yEVNVOq3 Irl0Bmnj1MXv9SS7F6SWvjlu+Hf+fmjoYmbNx2HF0pandGsP2Svu3y12GIKHo/ou tQaWoo5HKOfZGQd6IL0MPVDCs0Us6P9YL7g/3T75bEqFnugtveZbDJWuUpeeuhpn 8TBg5J21WCF5h8RoRicsqUF+K2cUMEISHaxUycOkeOett3tF+zvGKiazGI1wPPyT UUSwyT7ytfMaAsuYX9oZoHq2YDz2CuRTsOWJxgEumqHZsawfgVFaqcVfmtKrMkNR bvAb2+NRFlWFFzJsNa3kY48eKB0GcLXUCZD1pZKCjkFKi2w+tR8hVxEXrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6pLffX8mYEWrV5uXitJDYLxUM4MB8GA1UdIwQY MBaAFJsfEjtbpLwbd5O56fobQ9rEmmYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81MjNlYjgtMzY3Ny00YzlmLWI2YmQt N2M1ZTdlMzI0NTMwLzEvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81MjNlYjgtMzY3Ny00YzlmLWI2YmQtN2M1ZTdlMzI0NTMw LzEvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnvb70zU LLGBAXhqmCNUqfAXjL/9P/bV1YxOmehSvkjxTXlZMffIzMaODsp82x5o/dYL0tmO J5GTgqZ5GH5PA255+zK+db6xE6sxifTEodhK4zpYnXPEtgKjDvkfkJi/3BPFCW+M DSon14p6ZnWpgG1XHrQrG52yMOALHIjG3xAE/7Fc0cK9q/k6/diq+fxyMfZKuO3G DeuNSf8powfW9iw0tmtn4Kzc+2D8JprFp0n1QXm80TfTiou+aRITP/Cq9zb+YSSI jNdpbzVW8A+f8l8lCAB5NhPakdqRApq03D7wWYyYloBalSRigTQUxUtWkIyRZmAh ZYc01WZG94jtOg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:31 2025 by rpki-client