This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json) Hash identifier: o1BgB1qrvZhxWNd7YVBA9s184RtfrAoHz/6y5Zct390= Subject key identifier: B3:C1:1D:1C:F8:9D:18:E3:59:84:BA:60:7B:67:2E:BF:F7:54:F1:7A Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4 Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4 Certificate serial: 019B0C37EAA58BE9FD14396F446342C77DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft Manifest number: 0376 Signing time: Thu 11 Dec 2025 07:02:29 +0000 Manifest this update: Thu 11 Dec 2025 07:02:29 +0000 Manifest next update: Fri 12 Dec 2025 07:02:29 +0000 Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=) 2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: syblPjC5JOFTtPSnNJVqTcw3rk4PnSz8Nw+cefK/+IY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:ea:a5:8b:e9:fd:14:39:6f:44:63:42:c7:7d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4 Validity Not Before: Dec 11 07:02:29 2025 GMT Not After : Dec 12 07:02:29 2025 GMT Subject: CN=b3c11d1cf89d18e35984ba607b672ebff754f17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:c6:cc:e2:31:d9:68:0e:29:4c:65:71:12: 14:1c:72:47:51:50:8d:04:20:43:ec:e0:7d:bf:33: 34:11:be:66:35:15:34:06:d6:49:4e:d5:5b:5b:2f: 63:08:b9:ae:36:7c:69:06:24:65:8f:ad:5f:0e:53: b5:a0:df:68:37:57:98:51:a9:14:4a:14:fb:86:61: e3:5f:3d:33:a9:b8:d9:f2:cb:fb:a4:f6:03:01:84: 35:b2:91:0d:7c:73:af:dc:46:49:36:b9:11:fe:3b: 28:d2:b9:39:0b:5f:8f:06:54:91:af:f3:52:73:1b: 01:e0:e4:6b:4a:4d:da:57:ca:b1:a8:a1:5f:e8:43: 16:2d:d6:30:d7:56:a1:df:b7:00:26:2e:db:31:80: ff:fc:8c:3e:0a:21:27:7d:c9:97:73:82:61:f7:2d: 53:09:27:01:01:13:a4:0e:0e:ba:15:5c:e3:d1:7b: 1a:7b:95:db:a9:d1:f9:3d:46:7f:61:50:01:4b:37: 83:e7:72:44:88:c3:9c:c2:c8:97:03:07:07:a9:dc: 22:cd:e7:63:0d:db:38:1c:03:90:5b:28:79:bd:0e: ae:87:90:1f:6d:7d:90:c4:e2:ea:33:fd:f3:8c:be: 5f:3e:f9:40:0a:81:ed:fd:43:cd:be:68:54:a7:a2: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C1:1D:1C:F8:9D:18:E3:59:84:BA:60:7B:67:2E:BF:F7:54:F1:7A X509v3 Authority Key Identifier: keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8b:e2:b2:c5:96:a6:f7:95:62:5c:f5:28:7b:6b:9c:6b:82: b0:c1:fa:08:9f:90:e0:5d:a4:af:64:82:70:52:2d:36:94:88: b7:ba:21:5d:83:1f:9a:38:06:7a:b7:0c:b4:b2:80:96:4e:d3: 07:d8:93:bd:2f:ea:12:e1:14:07:45:c0:38:4d:c5:97:26:cf: e7:a1:55:24:b5:71:91:2b:1d:ef:60:6b:18:09:5c:2b:7a:01: 2f:2d:f3:e4:33:34:a7:e0:f6:ad:60:07:04:07:76:68:13:5b: d3:33:5b:42:50:74:ad:ff:2a:80:b5:d7:e4:ba:f1:f6:fd:e2: 0e:58:0d:31:a7:f2:12:b3:5a:91:2b:cf:d7:56:a1:42:52:fe: 70:89:c4:33:4b:41:46:74:2a:92:f4:42:c3:70:77:89:20:e8: e7:d6:35:3e:f2:ff:38:65:1d:0f:3a:e6:5c:8e:b8:bf:f4:c6: db:28:e0:b5:5d:4f:60:85:d1:8b:82:3c:68:12:96:60:fd:c8: 9d:0e:97:4a:7b:74:ea:5f:d3:74:f8:b0:3b:93:b7:0a:11:14: 12:97:94:64:cb:5c:86:a8:71:01:68:68:37:f3:95:3f:72:ce: 25:7a:36:bd:54:a8:a9:e8:46:c6:88:08:70:c6:9a:b8:f6:45: d9:75:16:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMN+qli+n9FDlvRGNCx32nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2E1YTE2NWIxM2Q3NzA2Yzg0MjU5MzQ3NDRhNTIxNjYy ZWU0YTQwHhcNMjUxMjExMDcwMjI5WhcNMjUxMjEyMDcwMjI5WjAzMTEwLwYDVQQD EyhiM2MxMWQxY2Y4OWQxOGUzNTk4NGJhNjA3YjY3MmViZmY3NTRmMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuknGzOIx2WgOKUxlcRIUHHJHUVCN BCBD7OB9vzM0Eb5mNRU0BtZJTtVbWy9jCLmuNnxpBiRlj61fDlO1oN9oN1eYUakU ShT7hmHjXz0zqbjZ8sv7pPYDAYQ1spENfHOv3EZJNrkR/jso0rk5C1+PBlSRr/NS cxsB4ORrSk3aV8qxqKFf6EMWLdYw11ah37cAJi7bMYD//Iw+CiEnfcmXc4Jh9y1T CScBAROkDg66FVzj0Xsae5XbqdH5PUZ/YVABSzeD53JEiMOcwsiXAwcHqdwizedj Dds4HAOQWyh5vQ6uh5AfbX2QxOLqM/3zjL5fPvlACoHt/UPNvmhUp6ImXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPBHRz4nRjjWYS6YHtnLr/3VPF6MB8GA1UdIwQY MBaAFF96WhZbE9dwbIQlk0dEpSFmLuSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNwYUZsc1QxM0JzaENXVFIwU2xJV1l1NUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lNjJjM2EtMjYzZS00Y2VlLTljODkt NDljNmZjYmJiNWE4LzEvWDNwYUZsc1QxM0JzaENXVFIwU2xJV1l1NUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lNjJjM2EtMjYzZS00Y2VlLTljODktNDljNmZjYmJiNWE4 LzEvWDNwYUZsc1QxM0JzaENXVFIwU2xJV1l1NUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIvissWW pveVYlz1KHtrnGuCsMH6CJ+Q4F2kr2SCcFItNpSIt7ohXYMfmjgGercMtLKAlk7T B9iTvS/qEuEUB0XAOE3FlybP56FVJLVxkSsd72BrGAlcK3oBLy3z5DM0p+D2rWAH BAd2aBNb0zNbQlB0rf8qgLXX5Lrx9v3iDlgNMafyErNakSvP11ahQlL+cInEM0tB RnQqkvRCw3B3iSDo59Y1PvL/OGUdDzrmXI64v/TG2yjgtV1PYIXRi4I8aBKWYP3I nQ6XSnt06l/TdPiwO5O3ChEUEpeUZMtchqhxAWhoN/OVP3LOJXo2vVSoqehGxogI cMaauPZF2XUW/A== -----END CERTIFICATE-----Generated at Mon Dec 22 01:24:49 2025 by rpki-client