This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json) Hash identifier: 88T7a0Eq7tMvsTNPrurAbpeexQmv+U8D7InNbRKrzr8= Subject key identifier: 8A:3B:69:26:4B:2B:70:22:C5:ED:8C:73:92:28:5B:80:B1:54:BB:6E Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c Certificate serial: 019A7CE0272E4E8B6D1611573022FF279B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft Manifest number: 1725 Signing time: Thu 13 Nov 2025 11:00:56 +0000 Manifest this update: Thu 13 Nov 2025 11:00:56 +0000 Manifest next update: Fri 14 Nov 2025 11:00:56 +0000 Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: CoJ7BHk7F0MzDXk4PfrUlM6HO3eymZfvefXTNx4uc9U=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:e0:27:2e:4e:8b:6d:16:11:57:30:22:ff:27:9b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c Validity Not Before: Nov 13 11:00:56 2025 GMT Not After : Nov 14 11:00:56 2025 GMT Subject: CN=8a3b69264b2b7022c5ed8c7392285b80b154bb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:b4:8c:ee:c9:3c:b3:a4:ff:7e:b4:d4:22: 71:d8:e3:e8:b7:4c:79:18:a1:83:07:52:40:8b:5b: c3:33:0f:c6:8b:eb:54:d5:52:ff:02:92:b0:d2:d2: 8c:2e:ad:56:44:0e:ad:03:ba:ca:8f:58:ce:27:05: f3:a9:16:39:3d:4f:ad:b5:85:96:fc:a0:dd:f5:17: ad:1c:d1:75:11:75:5a:32:d1:aa:08:82:17:f4:a4: 9f:af:d2:2c:37:4e:7c:c0:7a:21:45:00:e3:e5:00: 64:06:94:bf:6f:5b:12:0b:65:65:73:a3:10:eb:6c: c8:68:9d:28:fa:f2:a0:c8:5b:3d:0b:d7:90:9b:70: d8:27:f0:6a:8f:7d:7c:2d:2b:d4:cf:d6:d3:86:23: 1d:f1:66:65:a3:a5:04:d4:fc:93:84:9d:9a:3d:a9: 2d:13:4d:80:4e:5d:8c:f4:e4:9a:15:4d:59:64:2c: ea:b1:90:01:a3:f5:fe:27:d0:92:e0:ae:67:ab:2b: 0c:64:a0:63:c4:c6:dc:82:ab:21:01:1a:a0:9f:9f: 8f:ff:c9:aa:23:f3:c2:5e:9d:da:96:4f:d5:cb:cf: 4b:d4:6c:92:f8:ee:82:2f:43:13:04:26:b7:77:d2: 1f:41:a5:cc:b5:35:48:b9:90:22:fd:a2:46:e5:e7: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:69:26:4B:2B:70:22:C5:ED:8C:73:92:28:5B:80:B1:54:BB:6E X509v3 Authority Key Identifier: keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:12:af:c8:66:a8:e0:fc:34:40:1b:77:0c:52:9f:6c:27:a6: 2f:ec:d1:b1:68:0b:7e:93:4c:11:bb:11:39:9a:82:52:ab:85: e9:f7:a6:e0:f6:1d:20:2e:e1:b2:69:7c:34:47:c3:83:8e:e2: 97:0d:04:0d:df:12:22:2b:22:04:f0:10:9d:c5:00:a4:33:cc: c8:f3:74:80:4c:7c:cd:dc:05:38:1a:ca:5f:3d:0d:96:af:79: a9:af:b8:96:41:69:00:78:3c:2c:e4:73:4c:66:5f:fd:a0:dc: b5:98:05:c3:e1:dd:6a:80:7a:a7:f5:7b:37:3d:07:0f:19:61: 6f:2b:85:36:a8:a7:82:cd:95:5b:fc:12:c5:00:04:3b:50:89: c5:5f:9f:9c:15:d2:98:4a:33:1c:45:eb:c0:8d:17:36:40:84: 07:f1:48:bd:22:82:9a:37:9d:f6:2a:c2:08:92:d9:49:78:1e: 62:0a:1d:d7:27:95:ba:0e:8a:ce:73:4a:fb:a9:b8:ea:f1:ef: 74:38:ba:80:71:40:21:b9:98:38:4c:e2:53:f6:70:30:d6:a8: ef:b2:41:51:4c:d9:95:dc:ba:ea:82:24:3b:34:d7:66:3a:12: f2:00:73:ad:14:ad:09:69:7a:09:64:05:4b:22:23:8b:45:1e: 8e:b1:5c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp84CcuTottFhFXMCL/J5tTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNzdiNWI2NGJlNDllODE5OTk1ZmVlN2YzZTM2MjFiZGNh NmFlOGMwHhcNMjUxMTEzMTEwMDU2WhcNMjUxMTE0MTEwMDU2WjAzMTEwLwYDVQQD Eyg4YTNiNjkyNjRiMmI3MDIyYzVlZDhjNzM5MjI4NWI4MGIxNTRiYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Oq0jO7JPLOk/3601CJx2OPot0x5 GKGDB1JAi1vDMw/Gi+tU1VL/ApKw0tKMLq1WRA6tA7rKj1jOJwXzqRY5PU+ttYWW /KDd9RetHNF1EXVaMtGqCIIX9KSfr9IsN058wHohRQDj5QBkBpS/b1sSC2Vlc6MQ 62zIaJ0o+vKgyFs9C9eQm3DYJ/Bqj318LSvUz9bThiMd8WZlo6UE1PyThJ2aPakt E02ATl2M9OSaFU1ZZCzqsZABo/X+J9CS4K5nqysMZKBjxMbcgqshARqgn5+P/8mq I/PCXp3alk/Vy89L1GyS+O6CL0MTBCa3d9IfQaXMtTVIuZAi/aJG5efrrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo7aSZLK3Aixe2Mc5IoW4CxVLtuMB8GA1UdIwQY MBaAFGF3tbZL5J6BmZX+5/PjYhvcpq6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVhlMXRrdmtub0dabGY3bjgtTmlHOXltcm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ZDljMTEtZTFhZC00N2I2LWFmMDkt MTcxM2ZkM2VmN2E3LzEvWVhlMXRrdmtub0dabGY3bjgtTmlHOXltcm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83ZDljMTEtZTFhZC00N2I2LWFmMDktMTcxM2ZkM2VmN2E3 LzEvWVhlMXRrdmtub0dabGY3bjgtTmlHOXltcm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhKvyGao 4Pw0QBt3DFKfbCemL+zRsWgLfpNMEbsROZqCUquF6fem4PYdIC7hsml8NEfDg47i lw0EDd8SIisiBPAQncUApDPMyPN0gEx8zdwFOBrKXz0Nlq95qa+4lkFpAHg8LORz TGZf/aDctZgFw+HdaoB6p/V7Nz0HDxlhbyuFNqings2VW/wSxQAEO1CJxV+fnBXS mEozHEXrwI0XNkCEB/FIvSKCmjed9irCCJLZSXgeYgod1yeVug6KznNK+6m46vHv dDi6gHFAIbmYOEziU/ZwMNao77JBUUzZldy66oIkOzTXZjoS8gBzrRStCWl6CWQF SyIji0UejrFcTw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:24 2025 by rpki-client