This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft File: JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json) Hash identifier: D2afCGjxLxIXA5yem8XFDSTPOKiHg274l+W7B5GyfFM= Subject key identifier: 87:E8:0B:2A:27:3A:2B:C9:BD:27:98:A8:6D:81:31:F0:E9:81:0E:75 Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF Certificate issuer: /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf Certificate serial: 019B058FF57680D7B163928DEC068169AB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft Manifest number: 086E Signing time: Wed 10 Dec 2025 00:01:19 +0000 Manifest this update: Wed 10 Dec 2025 00:01:19 +0000 Manifest next update: Thu 11 Dec 2025 00:01:19 +0000 Files and hashes: 1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: BT28IyxriM7unA9TGt3F7YYAiLQUidW2oVAISWKZBxQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:8f:f5:76:80:d7:b1:63:92:8d:ec:06:81:69:ab:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf Validity Not Before: Dec 10 00:01:19 2025 GMT Not After : Dec 11 00:01:19 2025 GMT Subject: CN=87e80b2a273a2bc9bd2798a86d8131f0e9810e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:62:6d:f6:ee:18:48:b0:1a:38:c8:c3:d9: 7a:1e:f8:e6:0c:48:2a:74:dc:4f:a9:80:56:5d:a0: 0a:3a:80:51:cf:e7:d9:7a:96:9b:20:1d:ba:39:4b: 9b:84:ae:96:58:e6:18:e6:93:54:b8:e8:ff:17:67: 13:ff:79:ad:10:9d:6b:f2:b7:cc:19:97:56:48:76: 57:61:2d:b3:55:e2:16:51:36:ff:26:98:2e:94:0b: 16:a3:91:4a:01:d3:79:bc:ce:2a:7a:95:8f:df:91: 41:63:db:47:90:bc:a4:a2:c1:d6:a6:da:93:52:97: b4:ad:a9:1f:cf:17:ee:f3:5d:ae:ca:d4:63:71:44: a3:04:c9:21:d6:a6:9b:d3:9d:9e:13:5c:a4:d4:cc: 77:ca:0b:b1:8b:64:b3:91:35:14:d6:aa:88:e3:5a: 1d:99:33:a1:99:c0:fc:fb:93:af:51:30:ef:d3:d0: 87:fc:49:61:cd:de:ea:3a:d5:09:6d:9b:67:4b:68: 08:d5:04:79:b8:c6:d0:4b:1d:ac:3a:8f:23:9e:fb: e1:a2:ca:cd:c6:8b:c8:39:34:d9:6b:f3:a2:01:22: 25:e5:6e:2f:b0:ce:12:0a:55:46:53:58:60:74:4d: c9:46:d2:de:47:9f:f9:67:1e:72:e9:4f:ac:b5:f4: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:0B:2A:27:3A:2B:C9:BD:27:98:A8:6D:81:31:F0:E9:81:0E:75 X509v3 Authority Key Identifier: keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f5:b0:a3:c0:91:d1:6a:d7:d3:8a:9d:b3:99:cf:3c:38:27: 65:95:54:99:79:e3:de:55:ea:b0:a7:ab:3c:5f:76:b0:59:da: 18:33:fd:9b:88:85:b7:a0:f1:e3:e6:fe:a8:e0:24:69:c0:ee: c5:27:c8:db:fa:3a:62:73:1c:9a:5b:24:48:a7:d0:a6:f0:32: f2:99:be:f7:cc:b5:78:45:2a:a8:e5:bf:5f:7a:d5:41:2d:c5: 3b:ae:39:c5:8d:b4:d6:79:99:0c:0f:65:bc:63:6f:00:55:fd: 5a:20:81:2a:61:52:e9:87:e9:c4:0b:16:f5:d3:ee:23:cd:1b: b9:75:d2:c8:f9:e2:25:e5:04:8e:9b:38:88:ca:81:94:52:06: e1:08:57:83:3b:75:20:73:fc:86:65:cf:56:3f:4f:29:a6:10: d0:31:c3:b2:6a:84:37:b1:f9:99:cc:a0:c3:be:fe:db:26:03: 40:b7:35:43:00:18:e5:bd:28:6c:95:ce:4d:f5:fa:86:e6:85: e8:3a:58:68:4d:f8:1d:a3:cd:50:6e:74:51:65:57:79:46:93: 21:fd:79:af:58:54:d2:26:df:a0:f9:7a:bd:7e:d0:8a:ec:0f: 17:9f:c3:cc:f5:c1:43:0a:f6:a8:c2:51:83:68:ff:22:de:ab: 55:b1:54:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFj/V2gNexY5KN7AaBaatGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWZmMDNiNWFiZmIxNzg3MjVjYTZlOTBmNWUzZDk4Y2Jh NjhlYmYwHhcNMjUxMjEwMDAwMTE5WhcNMjUxMjExMDAwMTE5WjAzMTEwLwYDVQQD Eyg4N2U4MGIyYTI3M2EyYmM5YmQyNzk4YTg2ZDgxMzFmMGU5ODEwZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT1ibfbuGEiwGjjIw9l6HvjmDEgq dNxPqYBWXaAKOoBRz+fZepabIB26OUubhK6WWOYY5pNUuOj/F2cT/3mtEJ1r8rfM GZdWSHZXYS2zVeIWUTb/JpgulAsWo5FKAdN5vM4qepWP35FBY9tHkLykosHWptqT Upe0rakfzxfu812uytRjcUSjBMkh1qab052eE1yk1Mx3yguxi2SzkTUU1qqI41od mTOhmcD8+5OvUTDv09CH/Elhzd7qOtUJbZtnS2gI1QR5uMbQSx2sOo8jnvvhosrN xovIOTTZa/OiASIl5W4vsM4SClVGU1hgdE3JRtLeR5/5Zx5y6U+stfRwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfoCyonOivJvSeYqG2BMfDpgQ51MB8GA1UdIwQY MBaAFCSv8Dtav7F4clym6Q9ePZjLpo6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktfd08xcV9zWGh5WEticEQxNDltTXVtanI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hYjgxMzctMzc1My00ZWNhLWE5NGUt OGMyMTMwYTM1MDE2LzEvSktfd08xcV9zWGh5WEticEQxNDltTXVtanI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hYjgxMzctMzc1My00ZWNhLWE5NGUtOGMyMTMwYTM1MDE2 LzEvSktfd08xcV9zWGh5WEticEQxNDltTXVtanI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/Wwo8CR 0WrX04qds5nPPDgnZZVUmXnj3lXqsKerPF92sFnaGDP9m4iFt6Dx4+b+qOAkacDu xSfI2/o6YnMcmlskSKfQpvAy8pm+98y1eEUqqOW/X3rVQS3FO645xY201nmZDA9l vGNvAFX9WiCBKmFS6YfpxAsW9dPuI80buXXSyPniJeUEjps4iMqBlFIG4QhXgzt1 IHP8hmXPVj9PKaYQ0DHDsmqEN7H5mcygw77+2yYDQLc1QwAY5b0obJXOTfX6huaF 6DpYaE34HaPNUG50UWVXeUaTIf15r1hU0ibfoPl6vX7QiuwPF5/DzPXBQwr2qMJR g2j/It6rVbFUuA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:26 2026 by rpki-client