This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json) Hash identifier: M6gxu4UsN1jgMh20Hz/tiETXMJ46SX1PlSq/QLZ9wmI= Subject key identifier: 68:A0:B2:E5:8F:A9:8D:ED:55:A3:DE:72:46:DA:24:F6:82:68:E0:F9 Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7 Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7 Certificate serial: 019A968E6FBEC7AAB6E9BF3060A6838D0CDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft Manifest number: 06EB Signing time: Tue 18 Nov 2025 10:41:48 +0000 Manifest this update: Tue 18 Nov 2025 10:41:48 +0000 Manifest next update: Wed 19 Nov 2025 10:41:48 +0000 Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: z5Wo5fht+XXo5HhZ0RxGtCTvm7PbR1eiTosfq0sNY+A=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:8e:6f:be:c7:aa:b6:e9:bf:30:60:a6:83:8d:0c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7 Validity Not Before: Nov 18 10:41:48 2025 GMT Not After : Nov 19 10:41:48 2025 GMT Subject: CN=68a0b2e58fa98ded55a3de7246da24f68268e0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:25:66:e5:31:36:29:40:01:d0:c7:15:9d: 2c:26:f7:f0:21:75:bb:4d:94:bf:2d:ac:61:05:78: b6:5d:40:c2:5d:12:76:33:cb:b0:32:20:e9:a1:7a: f8:5a:a8:73:e3:0d:6f:fa:4f:98:64:e4:19:15:7e: 48:9c:86:30:d5:7c:89:39:0b:28:56:0d:b5:c2:3a: 6b:9c:1a:6d:92:fe:df:35:8a:1e:2a:a0:10:e2:ed: 43:3e:f6:7f:f1:dc:76:de:b6:7c:f6:67:3c:44:c6: 51:e7:af:a1:65:18:0d:66:ad:4b:0f:0a:8a:23:2c: ad:1e:5a:66:a6:13:e2:32:be:a4:f9:c0:9a:87:31: 15:11:a7:0f:fb:29:d5:91:ad:13:16:aa:0f:cd:5f: 30:c7:98:43:a3:8d:bc:b7:9b:27:14:dc:e6:ff:93: d9:15:eb:5b:aa:22:df:5f:99:dc:3e:60:c4:39:44: 36:68:03:4d:f9:1e:b3:47:7e:70:26:86:90:ab:98: cc:96:4c:83:3b:a4:d5:2c:a5:be:99:b0:4b:1e:0d: 8b:ba:7e:bc:ba:8d:40:8a:f9:35:c6:07:ec:83:75: c2:54:7d:60:4f:1d:18:4b:c9:c4:57:87:5d:33:6e: aa:f1:4e:a3:a6:64:d3:32:4a:c3:29:28:f5:e4:02: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A0:B2:E5:8F:A9:8D:ED:55:A3:DE:72:46:DA:24:F6:82:68:E0:F9 X509v3 Authority Key Identifier: keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e7:45:8a:b0:c4:25:d9:a2:fe:dc:12:86:6c:82:52:c8:3c: a1:5e:2d:68:75:c8:67:b0:52:ac:02:e8:90:07:29:8c:ff:56: 62:e0:bf:3c:26:da:16:17:ec:98:be:f9:a5:7e:b5:cb:84:b2: 58:98:ad:3d:96:d4:5b:92:ed:19:01:83:0b:fd:46:98:c5:e9: b4:07:c9:47:07:ad:da:67:00:92:02:d4:55:41:0f:cd:c2:ab: a2:06:ec:ab:a4:39:18:43:bd:a5:f7:94:03:fb:6e:5b:d0:1a: 72:c2:12:54:86:be:45:4d:71:76:1e:80:1d:4e:e3:95:fa:73: 37:4c:0b:b0:86:53:5c:07:9d:a1:44:46:d4:56:f4:ce:97:37: b9:b9:f7:8e:af:86:56:70:4e:91:fa:01:58:13:e8:dc:15:bd: 6b:57:0d:29:a5:83:1e:80:23:b4:fd:2d:cb:18:d2:bf:f6:43: 49:e7:7f:3c:fc:c2:c9:7e:54:91:74:02:84:fe:b2:3f:f2:80: 5c:19:04:05:65:0e:68:ef:9c:d9:a5:fc:99:69:70:ee:56:7f: f0:85:54:43:94:db:8b:1b:47:35:43:8e:67:5e:7c:b3:ef:37: 95:63:95:2c:62:6f:e5:b8:69:6f:24:b9:24:cb:9d:f4:60:a5: f4:ad:31:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqWjm++x6q26b8wYKaDjQzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODc4NDkyYTA2N2NiNWEzZWRmOTY5NWE2ZmQyNTg5ZjMy NzNhYTcwHhcNMjUxMTE4MTA0MTQ4WhcNMjUxMTE5MTA0MTQ4WjAzMTEwLwYDVQQD Eyg2OGEwYjJlNThmYTk4ZGVkNTVhM2RlNzI0NmRhMjRmNjgyNjhlMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpolZuUxNilAAdDHFZ0sJvfwIXW7 TZS/LaxhBXi2XUDCXRJ2M8uwMiDpoXr4Wqhz4w1v+k+YZOQZFX5InIYw1XyJOQso Vg21wjprnBptkv7fNYoeKqAQ4u1DPvZ/8dx23rZ89mc8RMZR56+hZRgNZq1LDwqK IyytHlpmphPiMr6k+cCahzEVEacP+ynVka0TFqoPzV8wx5hDo428t5snFNzm/5PZ FetbqiLfX5ncPmDEOUQ2aANN+R6zR35wJoaQq5jMlkyDO6TVLKW+mbBLHg2Lun68 uo1Aivk1xgfsg3XCVH1gTx0YS8nEV4ddM26q8U6jpmTTMkrDKSj15AI+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGigsuWPqY3tVaPeckbaJPaCaOD5MB8GA1UdIwQY MBaAFHWHhJKgZ8taPt+Wlab9JYnzJzqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUt ZDA5ZmVlMDljY2IxLzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUtZDA5ZmVlMDljY2Ix LzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOdFirDE Jdmi/twShmyCUsg8oV4taHXIZ7BSrALokAcpjP9WYuC/PCbaFhfsmL75pX61y4Sy WJitPZbUW5LtGQGDC/1GmMXptAfJRwet2mcAkgLUVUEPzcKrogbsq6Q5GEO9pfeU A/tuW9AacsISVIa+RU1xdh6AHU7jlfpzN0wLsIZTXAedoURG1Fb0zpc3ubn3jq+G VnBOkfoBWBPo3BW9a1cNKaWDHoAjtP0tyxjSv/ZDSed/PPzCyX5UkXQChP6yP/KA XBkEBWUOaO+c2aX8mWlw7lZ/8IVUQ5TbixtHNUOOZ158s+83lWOVLGJv5bhpbyS5 JMud9GCl9K0xOg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:22 2025 by rpki-client