This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft File: d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json) Hash identifier: GUL9G11O2khXl7VyqfTXL9bfsV7qX8IFxlDaY+A6Oqo= Subject key identifier: 54:43:A9:DB:E2:E8:C2:22:F8:B1:0D:01:3F:17:9F:15:B7:E8:B5:12 Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A Certificate issuer: /CN=77a4cdef6d98a90713fffe76711348779a632a0a Certificate serial: 0199FFFE31BEFD436A26FCDC8B33B7C8F718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft Manifest number: 16E0 Signing time: Mon 20 Oct 2025 05:01:12 +0000 Manifest this update: Mon 20 Oct 2025 05:01:12 +0000 Manifest next update: Tue 21 Oct 2025 05:01:12 +0000 Files and hashes: 1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: 9Y75/yeSZEFZ28oQZ3DdrMVhabO2essiIWdbX+fuBiA=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:fe:31:be:fd:43:6a:26:fc:dc:8b:33:b7:c8:f7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a Validity Not Before: Oct 20 05:01:12 2025 GMT Not After : Oct 21 05:01:12 2025 GMT Subject: CN=5443a9dbe2e8c222f8b10d013f179f15b7e8b512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:d7:a7:60:51:fa:4e:a8:5b:75:99:cd:eb: 3c:ee:df:a3:8a:89:c7:64:38:4d:5b:69:28:94:99: 87:f3:09:77:3e:05:97:1a:4e:8b:45:4f:96:e1:b9: 34:99:f6:03:be:69:44:e5:52:44:cb:75:3e:f6:f1: f5:81:a3:07:f6:a7:95:96:94:a5:64:2a:4e:36:8f: 73:b5:38:56:26:d7:06:82:09:ba:ff:ff:c3:e1:d7: 35:a2:4c:d4:f7:e8:7e:0d:5c:dd:da:85:d4:f2:e8: 40:3e:25:75:f9:8b:1e:5a:d0:41:4f:e2:59:df:e2: 03:d0:20:30:58:24:c7:c0:7b:89:ec:2d:19:b2:06: bd:c7:1c:42:04:76:8a:3a:e8:62:6d:2e:e1:f3:b4: 19:8e:f2:e6:f8:c5:2f:17:d9:b3:0e:15:2c:35:9e: 4d:93:e9:23:5f:a3:e8:b3:46:fd:fc:60:94:cd:89: 82:bf:24:8e:0f:96:ec:18:a4:89:af:9d:4f:ce:c1: d2:99:fa:7c:2b:bf:c0:07:2a:25:e1:09:66:98:67: 26:ea:8c:72:a5:10:74:e8:b5:e7:5b:45:ab:41:e9: 11:ff:ff:56:f7:08:54:36:e9:a0:17:20:89:ab:92: 3a:4c:89:53:af:cf:b5:d1:4a:03:ed:b7:db:7a:5d: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:43:A9:DB:E2:E8:C2:22:F8:B1:0D:01:3F:17:9F:15:B7:E8:B5:12 X509v3 Authority Key Identifier: keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:55:d1:0c:fc:7b:52:f4:70:64:e3:bb:8a:2d:e6:87:2c:87: be:ce:11:b6:46:40:04:fa:54:6f:72:0f:94:33:70:10:23:78: 9e:69:60:93:70:af:1f:44:13:74:78:3e:39:3e:78:31:78:8c: c9:e6:15:a1:08:ae:f2:e9:8f:31:a1:ef:2d:69:65:be:e2:c7: 83:45:b6:3f:9a:d2:88:50:85:68:8b:b5:e4:3d:b2:fe:6d:83: b5:99:55:25:7d:24:ba:16:c3:9e:46:6a:a3:35:0f:e3:78:2e: 25:97:0a:3e:1d:bb:67:30:fe:b2:4e:bd:1e:2e:b3:d5:47:4b: 49:fa:c8:82:71:26:34:23:7b:47:43:fc:f7:e4:a2:a6:48:b1: f8:85:9a:2a:0f:f5:60:a5:4e:2e:24:bf:f0:64:8a:b9:3b:1b: 9c:85:0b:1c:74:d7:f6:de:ab:c6:ea:94:36:3e:9e:73:95:3c: 0f:09:f1:a0:51:19:46:de:27:21:1c:e5:b8:34:1d:b4:28:96: ce:05:cc:6e:70:d5:ac:f8:fa:d5:5d:62:7c:10:a9:f1:7c:60: 0e:c5:80:66:f0:32:e5:1d:1b:d7:61:83:6e:c8:1a:bb:9c:6a: 21:98:0d:27:ef:a6:ef:72:0e:7c:36:5e:1f:7d:01:74:3f:44: 93:50:02:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn//jG+/UNqJvzcizO3yPcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTRjZGVmNmQ5OGE5MDcxM2ZmZmU3NjcxMTM0ODc3OWE2 MzJhMGEwHhcNMjUxMDIwMDUwMTEyWhcNMjUxMDIxMDUwMTEyWjAzMTEwLwYDVQQD Eyg1NDQzYTlkYmUyZThjMjIyZjhiMTBkMDEzZjE3OWYxNWI3ZThiNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy33Xp2BR+k6oW3WZzes87t+jionH ZDhNW2kolJmH8wl3PgWXGk6LRU+W4bk0mfYDvmlE5VJEy3U+9vH1gaMH9qeVlpSl ZCpONo9ztThWJtcGggm6///D4dc1okzU9+h+DVzd2oXU8uhAPiV1+YseWtBBT+JZ 3+ID0CAwWCTHwHuJ7C0Zsga9xxxCBHaKOuhibS7h87QZjvLm+MUvF9mzDhUsNZ5N k+kjX6Pos0b9/GCUzYmCvySOD5bsGKSJr51PzsHSmfp8K7/AByol4QlmmGcm6oxy pRB06LXnW0WrQekR//9W9whUNumgFyCJq5I6TIlTr8+10UoD7bfbel2MeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRDqdvi6MIi+LENAT8XnxW36LUSMB8GA1UdIwQY MBaAFHekze9tmKkHE//+dnETSHeaYyoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZUTjcyMllxUWNUX181MmNSTklkNXBqS2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YzQzYjktYWU4Mi00OTE5LTk4N2Qt OTNjNmZhY2YxM2M5LzEvZDZUTjcyMllxUWNUX181MmNSTklkNXBqS2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YzQzYjktYWU4Mi00OTE5LTk4N2QtOTNjNmZhY2YxM2M5 LzEvZDZUTjcyMllxUWNUX181MmNSTklkNXBqS2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFXRDPx7 UvRwZOO7ii3mhyyHvs4RtkZABPpUb3IPlDNwECN4nmlgk3CvH0QTdHg+OT54MXiM yeYVoQiu8umPMaHvLWllvuLHg0W2P5rSiFCFaIu15D2y/m2DtZlVJX0kuhbDnkZq ozUP43guJZcKPh27ZzD+sk69Hi6z1UdLSfrIgnEmNCN7R0P89+Sipkix+IWaKg/1 YKVOLiS/8GSKuTsbnIULHHTX9t6rxuqUNj6ec5U8DwnxoFEZRt4nIRzluDQdtCiW zgXMbnDVrPj61V1ifBCp8XxgDsWAZvAy5R0b12GDbsgau5xqIZgNJ++m73IOfDZe H30BdD9Ek1ACUg== -----END CERTIFICATE-----Generated at Tue Dec 30 08:52:17 2025 by rpki-client