This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json) Hash identifier: 5qpqsWCeZi0Kx+nbk3V7f6kSEEy3Ly7GRajQwkgJW9Y= Subject key identifier: 44:4C:33:A1:42:CE:BA:C4:AD:99:41:72:0E:44:04:B9:49:C5:0E:7E Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1 Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1 Certificate serial: 019A5ED62CA57E9EF899C14DE8D64FE747E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft Manifest number: 059D Signing time: Fri 07 Nov 2025 15:01:25 +0000 Manifest this update: Fri 07 Nov 2025 15:01:25 +0000 Manifest next update: Sat 08 Nov 2025 15:01:25 +0000 Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: tEu1XyMy7WxScAglw5TOuA62UHG9Apwnx3DcvBQ+eDE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:d6:2c:a5:7e:9e:f8:99:c1:4d:e8:d6:4f:e7:47:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1 Validity Not Before: Nov 7 15:01:25 2025 GMT Not After : Nov 8 15:01:25 2025 GMT Subject: CN=444c33a142cebac4ad9941720e4404b949c50e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:24:9c:9f:6f:05:9a:97:92:54:92:f5:18: 9b:08:81:00:c5:df:9a:27:1f:e0:83:51:f3:29:93: 8d:94:0b:46:65:ce:90:a1:d0:0d:0d:84:1f:f5:7f: 54:6e:1b:83:b4:fa:0b:5d:1b:49:55:c9:74:a5:81: 2d:8a:d9:34:ac:0e:0c:33:08:01:9e:ef:cb:06:b5: 11:fd:d2:7b:a4:b1:b0:b1:15:07:09:a5:6c:42:1a: bb:3e:22:b3:03:d6:3a:90:9a:8f:d7:1c:d2:81:3c: fa:f2:e3:ac:f2:41:fe:6a:0c:23:ff:3c:cc:5d:c5: 4f:e3:15:4b:49:8f:be:42:d5:2c:b8:c5:b7:97:ae: f0:7c:0f:10:ac:b0:17:92:ed:34:a8:bc:6f:22:bd: de:73:94:6c:85:c8:94:61:5b:43:41:11:23:76:f9: 3b:ca:18:8f:21:e3:fd:e9:79:e3:e9:75:e1:7f:b2: 70:4b:cc:11:d5:31:f2:8e:c0:dd:06:5f:87:00:22: b8:7c:d6:79:10:4e:a3:d9:9c:69:a1:d7:bd:f1:6c: 76:76:b5:a5:05:c8:a0:49:4b:30:00:f4:aa:f3:d0: 97:46:36:82:35:5e:d9:fe:eb:b2:3f:a2:67:01:f7: b0:1b:af:db:7a:18:0e:33:c7:fd:00:0f:a7:f3:76: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:33:A1:42:CE:BA:C4:AD:99:41:72:0E:44:04:B9:49:C5:0E:7E X509v3 Authority Key Identifier: keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bb:e7:ef:5b:ca:b7:86:b4:a6:74:da:5e:fc:80:fb:49:5a: 1f:10:c2:e1:52:1a:e4:5c:4a:75:d4:a4:b6:01:fc:8c:b7:73: 6e:c8:5d:61:43:28:e5:3a:6b:b9:4d:a1:82:35:3a:e6:54:dd: 6c:2f:4b:63:df:b2:3f:a2:83:6a:00:56:8b:c0:b7:a0:c8:d5: 29:9b:60:66:da:52:eb:00:a5:35:2d:72:56:2d:a9:c6:a3:fc: 74:e8:29:67:52:70:e1:eb:f0:15:67:08:6b:14:f2:cd:33:b9: 01:55:19:a5:c2:40:fa:f1:c0:ae:52:91:ba:30:6a:b1:a4:25: 7e:8f:ab:a9:1a:c1:c1:e3:fa:8b:4d:69:05:d1:db:ea:0c:ac: e0:a4:07:cd:5d:88:b7:d1:5e:f7:3d:80:1e:4a:6b:0b:82:58: f4:42:b4:0f:d8:18:b7:33:56:94:c0:2f:53:22:fd:31:69:39: 0c:45:39:9e:bc:be:d9:44:6e:d6:e3:19:f4:8a:30:cf:23:76: 23:7f:43:e4:39:0f:fc:95:6b:7f:cd:5e:40:f1:c0:0b:28:21: 9f:9a:dc:f7:f1:2c:c0:83:29:ec:cc:f7:fc:f8:d7:a9:9f:6c: 82:94:aa:71:f4:b9:a5:52:c4:56:c2:8f:fc:b6:e6:c3:40:65: d2:fb:4d:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpe1iylfp74mcFN6NZP50fmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzJiYmQ3OTEwYWYxNWFkNzA2NGRiNGE2ZDNiZDY0YTdl ODI3YzEwHhcNMjUxMTA3MTUwMTI1WhcNMjUxMTA4MTUwMTI1WjAzMTEwLwYDVQQD Eyg0NDRjMzNhMTQyY2ViYWM0YWQ5OTQxNzIwZTQ0MDRiOTQ5YzUwZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp4knJ9vBZqXklSS9RibCIEAxd+a Jx/gg1HzKZONlAtGZc6QodANDYQf9X9UbhuDtPoLXRtJVcl0pYEtitk0rA4MMwgB nu/LBrUR/dJ7pLGwsRUHCaVsQhq7PiKzA9Y6kJqP1xzSgTz68uOs8kH+agwj/zzM XcVP4xVLSY++QtUsuMW3l67wfA8QrLAXku00qLxvIr3ec5RshciUYVtDQREjdvk7 yhiPIeP96Xnj6XXhf7JwS8wR1THyjsDdBl+HACK4fNZ5EE6j2Zxpode98Wx2drWl BcigSUswAPSq89CXRjaCNV7Z/uuyP6JnAfewG6/behgOM8f9AA+n83Y7wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERMM6FCzrrErZlBcg5EBLlJxQ5+MB8GA1UdIwQY MBaAFPUyu9eRCvFa1wZNtKbTvWSn6CfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRLNzE1RUs4VnJYQmsyMHB0TzlaS2ZvSjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjliNWMtMWJjZC00ZmYzLWFkZTEt MzI0Y2FhYWM5NjJiLzEvOVRLNzE1RUs4VnJYQmsyMHB0TzlaS2ZvSjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NjliNWMtMWJjZC00ZmYzLWFkZTEtMzI0Y2FhYWM5NjJi LzEvOVRLNzE1RUs4VnJYQmsyMHB0TzlaS2ZvSjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbvn71vK t4a0pnTaXvyA+0laHxDC4VIa5FxKddSktgH8jLdzbshdYUMo5TpruU2hgjU65lTd bC9LY9+yP6KDagBWi8C3oMjVKZtgZtpS6wClNS1yVi2pxqP8dOgpZ1Jw4evwFWcI axTyzTO5AVUZpcJA+vHArlKRujBqsaQlfo+rqRrBweP6i01pBdHb6gys4KQHzV2I t9Fe9z2AHkprC4JY9EK0D9gYtzNWlMAvUyL9MWk5DEU5nry+2URu1uMZ9IowzyN2 I39D5DkP/JVrf81eQPHACyghn5rc9/EswIMp7Mz3/PjXqZ9sgpSqcfS5pVLEVsKP /Lbmw0Bl0vtNGQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:25:15 2025 by rpki-client