This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft File: ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft (raw, json) Hash identifier: qgLYoq/hmMKYA4oiFBWqDX64tbdn9T6Qi1yJ0IvVxKM= Subject key identifier: 1A:9C:50:67:70:48:F6:1B:0E:45:2C:1E:F3:E7:10:47:DA:0A:67:1B Authority key identifier: 65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48 Certificate issuer: /CN=650309a6c618c718bd369f561fff0dccbf320b48 Certificate serial: 018FE2B20C196F0579E257045CB95258C030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft Manifest number: 0F43 Signing time: Tue 04 Jun 2024 10:01:10 +0000 Manifest this update: Tue 04 Jun 2024 10:01:10 +0000 Manifest next update: Wed 05 Jun 2024 10:01:10 +0000 Files and hashes: 1: D4s7beJ5AZYDp_uzydFrZNl37XI.roa (hash: kyn6MC+Y6lBZk5xIrdJjckU8oS4Re2eGsgFWaj8CwIs=) 2: ZQMJpsYYxxi9Np9WH_8NzL8yC0g.crl (hash: xHkphaqA+3S5P4zD1ygKFSCBDeswuW61mh8SaSZAfzM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:e2:b2:0c:19:6f:05:79:e2:57:04:5c:b9:52:58:c0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=650309a6c618c718bd369f561fff0dccbf320b48 Validity Not Before: Jun 4 10:01:10 2024 GMT Not After : Jun 5 10:01:10 2024 GMT Subject: CN=1a9c50677048f61b0e452c1ef3e71047da0a671b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:9c:1b:d2:77:ba:5f:89:80:04:b8:88:82: b5:37:de:51:8b:aa:76:2e:ca:3b:d8:ea:3e:f9:1c: f4:04:03:f8:bd:90:ad:53:cd:6a:e8:1b:2f:c8:44: 79:54:2f:3c:5a:fa:09:d3:0f:99:44:e1:27:7d:8d: 33:d6:4c:2c:ef:4e:77:5f:b2:bc:4a:cd:84:d7:14: ab:88:80:42:39:df:0e:ef:de:b4:f7:43:50:83:fa: f8:46:c0:6d:64:71:3f:f0:0b:9c:ab:4b:7b:d2:b7: 9f:67:ef:99:a8:1e:65:35:45:c6:ec:4d:97:24:0f: 3b:7b:ae:01:1b:24:5b:df:c6:fb:dc:55:2b:d2:77: 72:46:44:c0:71:01:4a:05:06:68:7a:e0:af:e6:48: a3:72:f2:50:bc:09:24:6e:bd:f4:51:dd:4a:18:36: 72:bd:94:31:cc:00:1d:a8:2d:16:f2:44:34:28:53: 4b:da:42:9a:9a:6d:07:76:9e:d7:ba:b1:ba:b7:02: 5c:2d:69:37:3c:50:03:32:02:ab:dd:3f:20:d1:38: 39:75:28:0e:10:23:5f:1b:37:fc:b6:d4:d9:5e:8d: 71:b0:8a:20:46:d3:97:d4:ba:1c:f4:0f:d2:52:fa: d7:85:dd:54:3c:b6:93:06:0c:29:b4:52:48:2d:ea: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:50:67:70:48:F6:1B:0E:45:2C:1E:F3:E7:10:47:DA:0A:67:1B X509v3 Authority Key Identifier: keyid:65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:61:d1:23:7d:6a:31:7b:c3:54:da:cf:03:aa:4f:dc:84:b2: 9d:75:b8:7d:e8:e5:96:a9:25:13:b3:11:d1:63:46:8f:2a:76: cd:49:05:db:9b:ec:3c:89:a1:b8:6a:19:73:d9:b3:ef:ba:08: b6:25:f1:19:bc:0e:ec:64:61:87:31:b7:b9:8e:35:16:8e:06: 40:ab:7e:ac:15:49:06:71:41:49:30:bd:8b:21:43:cb:4f:4a: c7:30:ed:37:40:da:1c:e8:30:78:c9:0a:52:db:32:63:7d:30: b1:71:d2:74:33:90:01:da:48:e8:56:b7:d2:a2:26:93:db:18: 00:0d:96:65:d4:52:4b:09:fe:1a:7f:40:27:bd:30:43:f0:20: 6d:18:63:f9:a1:e3:a2:98:28:23:e7:0c:d9:55:06:a1:1f:d1: 1b:ca:9a:90:88:18:a8:c1:4e:a3:8e:0b:44:d5:45:72:ce:6e: 7a:02:08:95:d9:57:10:ca:d4:c4:87:dd:95:07:ef:c9:64:4c: f3:b1:da:8d:77:89:d7:02:f0:6f:5c:46:63:b1:d1:c8:f1:cc: 72:20:30:aa:ea:94:cb:f5:4c:e1:76:b0:fe:a4:53:aa:89:be: f0:df:57:1e:c1:f5:a7:ce:35:c6:7b:ab:6b:3d:04:b9:03:47: 3f:e8:96:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY/isgwZbwV54lcEXLlSWMAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDMwOWE2YzYxOGM3MThiZDM2OWY1NjFmZmYwZGNjYmYz MjBiNDgwHhcNMjQwNjA0MTAwMTEwWhcNMjQwNjA1MTAwMTEwWjAzMTEwLwYDVQQD EygxYTljNTA2NzcwNDhmNjFiMGU0NTJjMWVmM2U3MTA0N2RhMGE2NzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomKcG9J3ul+JgAS4iIK1N95Ri6p2 Lso72Oo++Rz0BAP4vZCtU81q6BsvyER5VC88WvoJ0w+ZROEnfY0z1kws7053X7K8 Ss2E1xSriIBCOd8O796090NQg/r4RsBtZHE/8Aucq0t70refZ++ZqB5lNUXG7E2X JA87e64BGyRb38b73FUr0ndyRkTAcQFKBQZoeuCv5kijcvJQvAkkbr30Ud1KGDZy vZQxzAAdqC0W8kQ0KFNL2kKamm0Hdp7XurG6twJcLWk3PFADMgKr3T8g0Tg5dSgO ECNfGzf8ttTZXo1xsIogRtOX1Loc9A/SUvrXhd1UPLaTBgwptFJILerqBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqcUGdwSPYbDkUsHvPnEEfaCmcbMB8GA1UdIwQY MBaAFGUDCabGGMcYvTafVh//Dcy/MgtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFNSnBzWVl4eGk5TnA5V0hfOE56TDh5QzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hYjY4ZTUtMTRjOS00MTIzLTgyMjYt ZmUyNmQ0MWNlN2NiLzEvWlFNSnBzWVl4eGk5TnA5V0hfOE56TDh5QzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hYjY4ZTUtMTRjOS00MTIzLTgyMjYtZmUyNmQ0MWNlN2Ni LzEvWlFNSnBzWVl4eGk5TnA5V0hfOE56TDh5QzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWHRI31q MXvDVNrPA6pP3ISynXW4fejllqklE7MR0WNGjyp2zUkF25vsPImhuGoZc9mz77oI tiXxGbwO7GRhhzG3uY41Fo4GQKt+rBVJBnFBSTC9iyFDy09KxzDtN0DaHOgweMkK UtsyY30wsXHSdDOQAdpI6Fa30qImk9sYAA2WZdRSSwn+Gn9AJ70wQ/AgbRhj+aHj opgoI+cM2VUGoR/RG8qakIgYqMFOo44LRNVFcs5uegIIldlXEMrUxIfdlQfvyWRM 87HajXeJ1wLwb1xGY7HRyPHMciAwquqUy/VM4Xaw/qRTqom+8N9XHsH1p841xnur az0EuQNHP+iW9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:53:55 2025 by rpki-client