This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json) Hash identifier: YzR+bPv1PD2m8Zn7Y36eUUSkQFlWiY9b0U86ddGapeQ= Subject key identifier: E5:3A:9F:86:90:F6:95:3E:04:4C:CB:FD:F7:EE:B0:CD:30:EE:1C:81 Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1 Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1 Certificate serial: 019B2F6792FE71541AE1E655B680EBA44FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft Manifest number: 0994 Signing time: Thu 18 Dec 2025 03:01:15 +0000 Manifest this update: Thu 18 Dec 2025 03:01:15 +0000 Manifest next update: Fri 19 Dec 2025 03:01:15 +0000 Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: GOsrXwMV4tNsl1+k9NtpBjDuCTZiwLiJB9N9oA5gays=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:92:fe:71:54:1a:e1:e6:55:b6:80:eb:a4:4f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1 Validity Not Before: Dec 18 03:01:15 2025 GMT Not After : Dec 19 03:01:15 2025 GMT Subject: CN=e53a9f8690f6953e044ccbfdf7eeb0cd30ee1c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:85:87:69:3a:e5:e0:9c:3d:1c:70:1a:47: a2:87:59:f0:30:78:1f:0a:68:2b:3a:a3:fb:5d:10: 58:8e:38:08:1b:c3:f7:fd:7c:46:d1:9d:fa:b0:db: 10:0e:1a:b6:ea:73:77:ca:bd:cb:d4:ce:87:06:bd: 64:67:bb:13:1a:e5:0b:7f:f1:b2:6b:74:68:12:c7: 50:19:f3:d5:c6:8a:e9:c2:9f:68:8a:20:50:bc:1b: a4:4d:0b:b1:67:24:4c:83:d2:ee:ff:c6:ba:96:0d: b3:b1:53:b8:c6:5f:c3:f2:6b:66:0a:9a:63:9a:f0: 88:8f:83:5e:1f:35:e2:55:65:8f:46:0e:fe:a1:a3: c0:ae:c4:dc:9a:2a:ca:74:31:ea:ee:60:f0:3b:d1: f9:a9:ba:af:7f:46:12:b0:6b:e9:49:e8:66:b3:b9: 44:7c:22:06:7d:6d:5c:10:2c:f5:cd:b9:de:55:88: ca:c3:c9:f5:ec:e4:4c:f2:20:da:51:07:40:a2:0e: d4:04:fb:35:e5:67:83:7f:6d:d6:bd:2f:a7:db:5a: 58:f4:80:a1:83:f8:c6:1e:a6:e5:81:de:2f:c4:99: 26:80:7b:73:16:3a:61:37:d5:8c:54:10:93:23:7c: 70:53:c8:a8:ad:68:3e:a3:b0:6a:2f:d1:ff:62:c9: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:9F:86:90:F6:95:3E:04:4C:CB:FD:F7:EE:B0:CD:30:EE:1C:81 X509v3 Authority Key Identifier: keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4c:85:79:b8:45:66:50:68:13:a0:b2:61:b7:aa:f4:3d:4f: 5d:50:ea:dd:d5:41:62:4d:da:cb:b0:40:a5:e2:33:9e:47:d1: 35:1c:0a:db:0c:36:5c:e5:7d:fe:d8:a0:72:50:8e:7d:5a:d3: d1:cf:77:3b:5e:1e:b6:dd:2c:fa:d4:fa:97:9b:01:70:cd:cd: 2e:60:ec:45:83:21:0d:93:a8:0b:7a:6e:64:4a:40:47:db:be: f0:75:d3:fd:bb:cf:16:eb:f9:db:09:f7:6f:f0:67:38:d7:21: 1b:f1:7f:10:36:8a:3e:68:0c:7c:48:a5:19:e3:ea:35:a6:b8: 5a:90:40:ea:48:c4:a1:7c:30:76:13:fc:34:c1:b3:6b:a2:b4: 05:b8:27:5a:90:20:eb:a6:c7:aa:a5:a3:f4:14:32:79:75:ac: 5d:06:69:dc:73:d9:42:14:39:55:dc:a5:58:a7:1a:77:e3:81: 26:30:72:47:e1:8e:01:89:5d:5d:67:0e:7d:ac:c5:d8:13:28: 28:ab:32:1a:07:a0:6f:07:9d:f7:94:84:ac:7a:36:84:2e:53: 8f:0f:00:57:07:57:6c:05:2d:ae:2f:87:e1:0d:24:13:06:60: 1c:ce:f6:9e:21:57:53:ae:a3:17:1e:30:5c:54:b5:ef:a9:98: e6:42:36:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ5L+cVQa4eZVtoDrpE+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NzY0YWM4YTg5YjA5ZmI3ODg1MGQ3NGM2OGUxZGFhOGYz ZTJhZjEwHhcNMjUxMjE4MDMwMTE1WhcNMjUxMjE5MDMwMTE1WjAzMTEwLwYDVQQD EyhlNTNhOWY4NjkwZjY5NTNlMDQ0Y2NiZmRmN2VlYjBjZDMwZWUxYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq6Fh2k65eCcPRxwGkeih1nwMHgf CmgrOqP7XRBYjjgIG8P3/XxG0Z36sNsQDhq26nN3yr3L1M6HBr1kZ7sTGuULf/Gy a3RoEsdQGfPVxorpwp9oiiBQvBukTQuxZyRMg9Lu/8a6lg2zsVO4xl/D8mtmCppj mvCIj4NeHzXiVWWPRg7+oaPArsTcmirKdDHq7mDwO9H5qbqvf0YSsGvpSehms7lE fCIGfW1cECz1zbneVYjKw8n17ORM8iDaUQdAog7UBPs15WeDf23WvS+n21pY9ICh g/jGHqblgd4vxJkmgHtzFjphN9WMVBCTI3xwU8iorWg+o7BqL9H/Ysm6hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU6n4aQ9pU+BEzL/ffusM0w7hyBMB8GA1UdIwQY MBaAFJl2Ssiomwn7eIUNdMaOHaqPPirxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjU4ZWItN2MwNC00Y2I5LThmMzMt ODE2OGNmNDcyOTYyLzEvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYjU4ZWItN2MwNC00Y2I5LThmMzMtODE2OGNmNDcyOTYy LzEvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEyFebhF ZlBoE6CyYbeq9D1PXVDq3dVBYk3ay7BApeIznkfRNRwK2ww2XOV9/tigclCOfVrT 0c93O14ett0s+tT6l5sBcM3NLmDsRYMhDZOoC3puZEpAR9u+8HXT/bvPFuv52wn3 b/BnONchG/F/EDaKPmgMfEilGePqNaa4WpBA6kjEoXwwdhP8NMGza6K0BbgnWpAg 66bHqqWj9BQyeXWsXQZp3HPZQhQ5VdylWKcad+OBJjByR+GOAYldXWcOfazF2BMo KKsyGgegbwed95SErHo2hC5Tjw8AVwdXbAUtri+H4Q0kEwZgHM72niFXU66jFx4w XFS176mY5kI2BQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:31:53 2025 by rpki-client