This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.mft File: c9CdiVtDpiKkUhuVuZlp3Gc8DXo.mft (raw, json) Hash identifier: M05VVZy/A+EA5CkDeCr+5Uc0VG9CKg9BVFNUaU8FTOk= Subject key identifier: F5:8E:D3:3D:3B:4A:15:06:4E:A8:A6:1A:0B:0D:2D:F6:00:48:04:9D Authority key identifier: 73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A Certificate issuer: /CN=73d09d895b43a622a4521b95b99969dc673c0d7a Certificate serial: 018D8B2B1C6D47BF49937DB9E74942DB23B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.mft Manifest number: 0854 Signing time: Fri 09 Feb 2024 00:01:14 +0000 Manifest this update: Fri 09 Feb 2024 00:01:14 +0000 Manifest next update: Sat 10 Feb 2024 00:01:14 +0000 Files and hashes: 1: c9CdiVtDpiKkUhuVuZlp3Gc8DXo.crl (hash: DFxgu4QtDJFmd2Jazpk6FTjECzt3PVjFy43sr04BT1w=) 2: rFHFxww2E9wP7votF81meoMurDs.roa (hash: qcznvXqTDOmoaZk1SnbUBUS/Rwr8wrMh0yAX7SYheU0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:8b:2b:1c:6d:47:bf:49:93:7d:b9:e7:49:42:db:23:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d09d895b43a622a4521b95b99969dc673c0d7a Validity Not Before: Feb 9 00:01:14 2024 GMT Not After : Feb 10 00:01:14 2024 GMT Subject: CN=f58ed33d3b4a15064ea8a61a0b0d2df60048049d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:2b:6d:13:c7:d0:8a:5b:28:d7:1b:54:b1: 9c:9b:c0:81:15:73:83:39:b4:1c:c9:ce:49:c9:25: 54:7d:a0:62:3e:93:76:e6:55:5d:61:09:3f:f2:0a: 8b:1a:e9:8c:65:16:cb:eb:32:7f:9b:28:57:3d:86: eb:e0:9b:84:7e:b5:8d:63:76:2d:dd:a9:e9:09:bf: ec:b2:21:ac:8b:d7:e7:13:18:a7:61:c3:1d:95:f0: 49:01:f5:a4:78:f2:d2:8d:ce:4a:f0:7d:d0:6c:9a: c6:27:95:16:61:78:65:17:12:49:a1:31:85:a8:44: 19:27:19:55:53:17:d4:fe:59:04:7d:00:75:44:05: e8:8f:49:a9:e8:25:ba:0a:9b:e2:6c:bb:ab:e9:71: 87:46:63:f3:cf:9e:e7:1e:19:ca:8c:b6:e8:c2:76: ef:4a:d9:72:24:31:fb:47:99:7d:cc:22:ab:f9:bc: 9a:d9:9c:8a:42:07:e7:15:7a:2a:17:d6:d1:4a:80: 53:3a:ac:bb:59:51:2a:01:1a:0b:dd:f3:8f:49:00: 38:3d:31:a4:71:09:95:af:46:95:ff:79:42:8b:6a: a7:aa:d8:55:91:11:b7:b4:da:de:5f:cd:fb:9a:77: 5c:8a:08:3a:64:75:8d:f2:8e:ac:fd:ca:b6:cb:3a: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8E:D3:3D:3B:4A:15:06:4E:A8:A6:1A:0B:0D:2D:F6:00:48:04:9D X509v3 Authority Key Identifier: keyid:73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:45:1e:1f:26:d4:7f:56:a8:7e:55:e1:5c:58:43:85:f7:0d: bd:a0:a0:4a:92:75:e9:58:e5:34:b3:ff:5a:13:2c:4e:56:d2: 17:d3:8e:82:ec:d9:6d:c0:f9:6e:a8:cf:3b:fd:a3:49:45:92: c7:e3:df:65:be:3e:12:2f:81:f4:4b:c0:f2:2d:da:0d:75:30: 21:9a:3d:fc:18:1a:34:b5:3d:73:74:1d:d4:1c:ae:d7:12:1d: 66:e3:88:95:fe:1b:17:4e:ee:0b:b1:7a:7e:91:11:4a:6e:c6: 63:c1:6b:13:03:2a:98:ba:e9:4e:b0:64:80:71:64:b7:a2:90: 2a:b4:27:18:bb:06:59:e1:e3:5e:85:67:98:2b:ac:6e:f4:78: 16:7f:6e:97:27:c1:42:db:8c:da:99:0a:a5:76:bb:6c:e2:a2: f4:01:47:d6:95:ad:38:fe:30:89:64:94:8c:c2:1e:d7:ab:1d: d7:0e:5d:64:a1:46:e3:e5:91:9f:7f:02:15:16:6a:cc:bb:ca: 6f:e9:dd:39:31:da:fe:36:81:41:00:e3:b2:fe:19:d0:af:c1: 82:61:64:ad:fa:15:ff:c3:b7:09:6f:61:ec:a8:e4:3c:3b:8e: e5:a2:b6:67:63:fd:45:1d:43:3e:07:f1:4b:35:b0:2e:3e:7e: 45:b1:86:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY2LKxxtR79Jk32550lC2yO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDA5ZDg5NWI0M2E2MjJhNDUyMWI5NWI5OTk2OWRjNjcz YzBkN2EwHhcNMjQwMjA5MDAwMTE0WhcNMjQwMjEwMDAwMTE0WjAzMTEwLwYDVQQD EyhmNThlZDMzZDNiNGExNTA2NGVhOGE2MWEwYjBkMmRmNjAwNDgwNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry0rbRPH0IpbKNcbVLGcm8CBFXOD ObQcyc5JySVUfaBiPpN25lVdYQk/8gqLGumMZRbL6zJ/myhXPYbr4JuEfrWNY3Yt 3anpCb/ssiGsi9fnExinYcMdlfBJAfWkePLSjc5K8H3QbJrGJ5UWYXhlFxJJoTGF qEQZJxlVUxfU/lkEfQB1RAXoj0mp6CW6CpvibLur6XGHRmPzz57nHhnKjLbownbv StlyJDH7R5l9zCKr+bya2ZyKQgfnFXoqF9bRSoBTOqy7WVEqARoL3fOPSQA4PTGk cQmVr0aV/3lCi2qnqthVkRG3tNreX837mndcigg6ZHWN8o6s/cq2yzq1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWO0z07ShUGTqimGgsNLfYASASdMB8GA1UdIwQY MBaAFHPQnYlbQ6YipFIblbmZadxnPA16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzlDZGlWdERwaUtrVWh1VnVabHAzR2M4RFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOTcwZGYtNTA5ZS00MmQzLWIwMTEt OWI5ZmY5YzI0MDUxLzEvYzlDZGlWdERwaUtrVWh1VnVabHAzR2M4RFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOTcwZGYtNTA5ZS00MmQzLWIwMTEtOWI5ZmY5YzI0MDUx LzEvYzlDZGlWdERwaUtrVWh1VnVabHAzR2M4RFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA40UeHybU f1aoflXhXFhDhfcNvaCgSpJ16VjlNLP/WhMsTlbSF9OOguzZbcD5bqjPO/2jSUWS x+PfZb4+Ei+B9EvA8i3aDXUwIZo9/BgaNLU9c3Qd1Byu1xIdZuOIlf4bF07uC7F6 fpERSm7GY8FrEwMqmLrpTrBkgHFkt6KQKrQnGLsGWeHjXoVnmCusbvR4Fn9ulyfB QtuM2pkKpXa7bOKi9AFH1pWtOP4wiWSUjMIe16sd1w5dZKFG4+WRn38CFRZqzLvK b+ndOTHa/jaBQQDjsv4Z0K/BgmFkrfoV/8O3CW9h7KjkPDuO5aK2Z2P9RR1DPgfx SzWwLj5+RbGGVA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:33 2025 by rpki-client