This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft File: 3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json) Hash identifier: ARS/mAd5UpfbxVOfsNuDtcQIOcP2UdSbFSeexeQTyVA= Subject key identifier: 86:4E:84:63:F4:2C:6E:B9:E1:15:34:9A:52:FA:2E:9D:3B:46:B1:1E Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3 Certificate issuer: /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3 Certificate serial: 019AFD67EB70FD8FECEDBE9D66C52CA02CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft Manifest number: 064D Signing time: Mon 08 Dec 2025 10:00:37 +0000 Manifest this update: Mon 08 Dec 2025 10:00:37 +0000 Manifest next update: Tue 09 Dec 2025 10:00:37 +0000 Files and hashes: 1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: THU7HvMO1zyK5I+qyT/okBsdmtjeSejMIX9E5gCiXZ0=) 2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:67:eb:70:fd:8f:ec:ed:be:9d:66:c5:2c:a0:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3 Validity Not Before: Dec 8 10:00:37 2025 GMT Not After : Dec 9 10:00:37 2025 GMT Subject: CN=864e8463f42c6eb9e115349a52fa2e9d3b46b11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:fd:f6:c4:c6:82:c8:ab:52:2f:24:6d:81: 2b:88:6f:4a:43:21:68:b8:fe:62:57:db:ff:bb:d9: 55:e7:52:b9:41:76:18:19:ee:04:63:8d:b3:45:be: ab:9a:f3:87:2e:ae:43:0f:d0:24:ba:a8:ae:de:f5: 3d:c2:61:12:97:b0:ac:ea:ba:bc:35:0f:71:6a:62: 54:87:74:47:54:51:5c:cd:82:67:df:54:c5:9d:84: 0c:4b:5d:9f:83:03:6c:3c:7c:01:ad:3f:fb:95:28: 89:86:4e:ad:cd:97:d0:61:05:fe:42:69:cd:64:47: ec:c2:df:26:40:4b:e2:f9:0f:e0:99:5c:1b:b0:32: 48:93:5f:c7:df:bf:ee:6b:7c:c9:9e:20:9d:9c:ae: 8c:f7:65:12:95:c2:83:ed:67:b0:41:84:3d:ed:b1: 71:05:fc:72:38:f0:b8:f1:e6:e7:c2:81:e3:26:c9: c7:ec:95:ee:33:89:1c:be:f3:81:89:b1:01:e3:a8: 8e:a8:b3:df:43:cb:0f:6f:c9:b8:48:df:15:f1:9c: 80:45:7a:94:bd:7e:18:ca:6a:76:49:80:97:7b:be: f2:e3:86:e8:ee:34:5b:33:ac:96:ec:16:b9:cc:4b: 8d:02:ac:ea:36:99:65:44:68:ff:9c:a6:fe:cb:89: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4E:84:63:F4:2C:6E:B9:E1:15:34:9A:52:FA:2E:9D:3B:46:B1:1E X509v3 Authority Key Identifier: keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:75:12:53:60:b7:63:a2:35:2c:35:01:e1:45:46:18:2d:6e: 38:7d:29:27:9c:37:7f:95:e0:f7:c4:fc:b0:2e:aa:22:4a:de: 46:37:e0:52:a4:69:50:29:a5:d9:6d:85:08:23:64:1b:b7:83: de:32:b7:4e:14:99:22:70:4e:b5:d7:26:8b:94:e1:16:fb:b7: bf:4a:93:83:bc:2a:8c:0a:c8:fe:fe:c0:eb:21:1a:d7:3a:82: 2e:b1:c7:0a:f6:f8:1f:bd:5b:41:54:58:65:60:5c:ca:47:23: ae:ac:7a:2b:c1:51:f2:6a:12:4c:2d:97:1c:10:71:fb:ac:1b: 41:ac:a3:bf:35:33:5c:d4:ce:65:83:08:aa:ca:4b:50:61:bd: 2c:6f:49:88:8e:cb:a9:ad:ea:ce:20:11:57:c4:65:a0:0e:16: 0c:84:f3:dc:5a:3e:b8:9b:39:5b:66:03:3e:ac:98:ec:b7:31: 15:83:49:9b:2a:ed:69:54:b2:8c:05:65:fe:d5:0b:f5:c8:81: 36:75:64:79:e0:85:1e:3a:4f:bf:7f:a5:42:14:6e:e2:0f:e1: 9c:f0:57:92:05:b5:81:d5:2a:f7:2b:67:d1:e6:44:ad:9f:0e: 5e:65:61:53:05:8f:d2:27:c1:25:21:03:6f:b9:fc:3e:41:40: c9:eb:b3:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9Z+tw/Y/s7b6dZsUsoCzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZGM5YWQyNTBiODVjZDM5OTQ5NDY1YjY2ODFiMmYxZGYx NGQ2YTMwHhcNMjUxMjA4MTAwMDM3WhcNMjUxMjA5MTAwMDM3WjAzMTEwLwYDVQQD Eyg4NjRlODQ2M2Y0MmM2ZWI5ZTExNTM0OWE1MmZhMmU5ZDNiNDZiMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7/99sTGgsirUi8kbYEriG9KQyFo uP5iV9v/u9lV51K5QXYYGe4EY42zRb6rmvOHLq5DD9Akuqiu3vU9wmESl7Cs6rq8 NQ9xamJUh3RHVFFczYJn31TFnYQMS12fgwNsPHwBrT/7lSiJhk6tzZfQYQX+QmnN ZEfswt8mQEvi+Q/gmVwbsDJIk1/H37/ua3zJniCdnK6M92USlcKD7WewQYQ97bFx BfxyOPC48ebnwoHjJsnH7JXuM4kcvvOBibEB46iOqLPfQ8sPb8m4SN8V8ZyARXqU vX4Yymp2SYCXe77y44bo7jRbM6yW7Ba5zEuNAqzqNpllRGj/nKb+y4lqwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZOhGP0LG654RU0mlL6Lp07RrEeMB8GA1UdIwQY MBaAFN3cmtJQuFzTmUlGW2aBsvHfFNajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2R5YTBsQzRYTk9aU1VaYlpvR3k4ZDhVMXFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81YmY5NDgtOTc3Yi00YjBlLWI4ZTct MGQ0MzE4Y2E4YzU1LzEvM2R5YTBsQzRYTk9aU1VaYlpvR3k4ZDhVMXFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81YmY5NDgtOTc3Yi00YjBlLWI4ZTctMGQ0MzE4Y2E4YzU1 LzEvM2R5YTBsQzRYTk9aU1VaYlpvR3k4ZDhVMXFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHUSU2C3 Y6I1LDUB4UVGGC1uOH0pJ5w3f5Xg98T8sC6qIkreRjfgUqRpUCml2W2FCCNkG7eD 3jK3ThSZInBOtdcmi5ThFvu3v0qTg7wqjArI/v7A6yEa1zqCLrHHCvb4H71bQVRY ZWBcykcjrqx6K8FR8moSTC2XHBBx+6wbQayjvzUzXNTOZYMIqspLUGG9LG9JiI7L qa3qziARV8RloA4WDITz3Fo+uJs5W2YDPqyY7LcxFYNJmyrtaVSyjAVl/tUL9ciB NnVkeeCFHjpPv3+lQhRu4g/hnPBXkgW1gdUq9ytn0eZErZ8OXmVhUwWP0ifBJSED b7n8PkFAyeuzsw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:32 2025 by rpki-client