This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft File: ngV1AShe0hwz2zraRFXEykfdTpA.mft (raw, json) Hash identifier: EqreoxieTr72uBR7qupc7eXZb9HW410nLOWWzDsWd+M= Subject key identifier: C8:1B:1B:57:CB:E7:46:55:11:A1:A3:25:D8:9F:CF:29:59:AE:EC:ED Authority key identifier: 9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90 Certificate issuer: /CN=9e057501285ed21c33db3ada4455c4ca47dd4e90 Certificate serial: 01990E61ECF0A4947BB37D7D1AA4A6435259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft Manifest number: 06D5 Signing time: Wed 03 Sep 2025 07:02:02 +0000 Manifest this update: Wed 03 Sep 2025 07:02:02 +0000 Manifest next update: Thu 04 Sep 2025 07:02:02 +0000 Files and hashes: 1: ngV1AShe0hwz2zraRFXEykfdTpA.crl (hash: YuA+OkmViKGi3dmK9gyPeLuwVbMolO50W3egG5A/Rnw=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:0e:61:ec:f0:a4:94:7b:b3:7d:7d:1a:a4:a6:43:52:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e057501285ed21c33db3ada4455c4ca47dd4e90 Validity Not Before: Sep 3 07:02:02 2025 GMT Not After : Sep 4 07:02:02 2025 GMT Subject: CN=c81b1b57cbe7465511a1a325d89fcf2959aeeced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:6c:56:ca:b6:10:d4:a1:84:af:37:4c:69: bb:85:6f:83:da:eb:a2:9c:91:50:f9:3c:97:fd:36: 09:cb:72:a2:3e:38:31:47:65:60:b4:49:1d:2f:ea: 9c:02:9d:10:bd:50:bc:33:3c:8e:ae:df:6a:91:a9: 9b:ae:aa:30:91:73:13:e8:ee:89:41:b8:a6:81:7d: 63:0c:39:bd:d2:2b:98:3d:10:a6:1e:0f:27:89:c2: 5a:38:0b:89:b4:37:f1:aa:9c:ed:10:48:8c:95:9d: fa:8f:3d:e0:45:b7:a1:38:c8:82:9d:52:02:7f:c2: 3c:79:74:52:d3:27:0c:60:1e:02:32:27:68:47:14: fe:da:4d:81:16:35:73:01:5d:c1:45:44:9b:1f:81: e6:8d:47:1d:be:fb:6f:62:6a:9b:77:00:71:f1:b3: 3f:81:1d:0f:2e:66:38:26:af:b2:66:26:8e:6e:ef: 8f:9a:ab:ad:6f:f6:e6:20:f0:9e:e5:8b:71:13:9f: 8a:5b:e2:41:cc:77:d9:ad:1f:1f:b3:f1:25:1a:8b: 76:50:6c:6a:60:a9:a0:ae:f4:c2:14:85:44:cc:9e: 7d:93:76:7b:53:c1:49:4b:72:f8:a2:67:13:08:a4: 5a:9d:2a:c2:b8:96:7f:5f:54:28:98:2c:84:3c:38: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1B:1B:57:CB:E7:46:55:11:A1:A3:25:D8:9F:CF:29:59:AE:EC:ED X509v3 Authority Key Identifier: keyid:9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:df:32:7e:04:5b:71:27:c2:d9:e7:7b:6e:d2:70:00:1f: 2c:4e:df:92:4b:5e:1e:46:8a:ed:b0:99:85:ef:f2:f6:88:8a: 01:4e:aa:80:b1:9b:97:f6:f3:2d:fc:1b:fb:a8:a7:66:14:0e: 2e:fd:4f:df:37:88:18:8d:64:28:f3:60:0e:1b:fa:de:31:5b: d5:79:fc:cb:4e:df:fa:ee:ca:1d:c1:65:04:1e:7e:53:81:a3: d7:b6:d2:94:fe:5b:3d:48:2f:6d:f2:c7:d8:33:9c:bb:46:cd: 72:a3:79:36:ab:da:1e:77:8a:72:b5:ca:82:8a:4d:49:df:e4: 0a:fc:de:af:ab:70:10:63:0e:46:54:8c:3a:15:10:a2:f7:37: 45:01:8a:e5:f6:87:ca:69:38:75:75:9f:31:ea:90:a2:d4:87: 64:9d:b3:63:88:73:2d:c7:f2:31:3c:b8:e1:94:65:06:e4:53: 5d:f3:62:68:a2:01:cd:08:05:0a:80:4d:15:65:37:72:dc:db: 17:3d:fb:df:6c:b9:43:53:63:dc:99:d9:83:f2:36:fc:bc:85: a5:41:2f:b2:c0:41:99:ba:db:77:80:d0:08:ea:ae:e1:95:9c: b0:0e:c9:b7:f8:5b:b4:44:93:ad:2a:6a:3f:3e:0e:35:6e:f9: b0:ff:a7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkOYezwpJR7s319GqSmQ1JZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDU3NTAxMjg1ZWQyMWMzM2RiM2FkYTQ0NTVjNGNhNDdk ZDRlOTAwHhcNMjUwOTAzMDcwMjAyWhcNMjUwOTA0MDcwMjAyWjAzMTEwLwYDVQQD EyhjODFiMWI1N2NiZTc0NjU1MTFhMWEzMjVkODlmY2YyOTU5YWVlY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpFsVsq2ENShhK83TGm7hW+D2uui nJFQ+TyX/TYJy3KiPjgxR2VgtEkdL+qcAp0QvVC8MzyOrt9qkambrqowkXMT6O6J QbimgX1jDDm90iuYPRCmHg8nicJaOAuJtDfxqpztEEiMlZ36jz3gRbehOMiCnVIC f8I8eXRS0ycMYB4CMidoRxT+2k2BFjVzAV3BRUSbH4HmjUcdvvtvYmqbdwBx8bM/ gR0PLmY4Jq+yZiaObu+Pmqutb/bmIPCe5YtxE5+KW+JBzHfZrR8fs/ElGot2UGxq YKmgrvTCFIVEzJ59k3Z7U8FJS3L4omcTCKRanSrCuJZ/X1QomCyEPDg1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgbG1fL50ZVEaGjJdifzylZruztMB8GA1UdIwQY MBaAFJ4FdQEoXtIcM9s62kRVxMpH3U6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdWMUFTaGUwaHd6MnpyYVJGWEV5a2ZkVHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80ZjdiNjYtMmI3Zi00N2RlLWE2Yzkt ZjRlOWRiNDc4ZGQ0LzEvbmdWMUFTaGUwaHd6MnpyYVJGWEV5a2ZkVHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80ZjdiNjYtMmI3Zi00N2RlLWE2YzktZjRlOWRiNDc4ZGQ0 LzEvbmdWMUFTaGUwaHd6MnpyYVJGWEV5a2ZkVHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICnfMn4E W3Enwtnne27ScAAfLE7fkkteHkaK7bCZhe/y9oiKAU6qgLGbl/bzLfwb+6inZhQO Lv1P3zeIGI1kKPNgDhv63jFb1Xn8y07f+u7KHcFlBB5+U4Gj17bSlP5bPUgvbfLH 2DOcu0bNcqN5NqvaHneKcrXKgopNSd/kCvzer6twEGMORlSMOhUQovc3RQGK5faH ymk4dXWfMeqQotSHZJ2zY4hzLcfyMTy44ZRlBuRTXfNiaKIBzQgFCoBNFWU3ctzb Fz3732y5Q1Nj3JnZg/I2/LyFpUEvssBBmbrbd4DQCOqu4ZWcsA7Jt/hbtESTrSpq Pz4ONW75sP+nHQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:33 2025 by rpki-client