This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft File: Zz5yIBSrbED084ns_Kyu_7tjBM8.mft (raw, json) Hash identifier: ScnYI143BpHr2i9yV/f5C+qBxiE8o5Fo9BSAiq9sj1A= Subject key identifier: DF:C2:2A:77:34:40:2B:1A:0E:C3:8E:10:8C:4F:7D:E6:46:19:AE:D4 Authority key identifier: 67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF Certificate issuer: /CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf Certificate serial: 019B68E9C31D2BBB8B92953746E0330D1C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft Manifest number: 08D1 Signing time: Mon 29 Dec 2025 07:01:48 +0000 Manifest this update: Mon 29 Dec 2025 07:01:48 +0000 Manifest next update: Tue 30 Dec 2025 07:01:48 +0000 Files and hashes: 1: Zz5yIBSrbED084ns_Kyu_7tjBM8.crl (hash: wbM5BVE9oBX4ZWSs4fYq0So2jQdWg6sdrPBLe7Uuk4o=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:c3:1d:2b:bb:8b:92:95:37:46:e0:33:0d:1c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf Validity Not Before: Dec 29 07:01:48 2025 GMT Not After : Dec 30 07:01:48 2025 GMT Subject: CN=dfc22a7734402b1a0ec38e108c4f7de64619aed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:3d:f1:7e:65:11:6e:0b:33:87:1e:ab:c5: 18:4e:30:d5:bb:e2:b5:37:33:c0:17:ad:9e:09:b0: 5a:8b:b6:86:5f:a0:91:9f:8a:ee:46:aa:82:6e:3c: 79:6f:7c:b2:8c:6e:db:27:c2:1e:eb:41:5c:84:4b: aa:1c:83:26:b6:f3:84:16:ec:b5:8e:dc:d4:47:33: 25:5f:14:3b:ea:35:14:17:1f:69:94:79:74:75:6c: 1e:8a:4c:c7:29:1f:84:c1:1f:94:37:d4:98:ce:ea: df:0f:98:7d:82:a8:9c:06:88:c5:14:cc:b6:4e:ce: 00:4a:91:e8:17:34:8c:4d:55:92:6f:cb:22:f7:33: bd:02:1a:54:ee:92:da:45:3d:f7:b0:42:00:8b:71: 18:f7:66:d4:4d:b5:43:fb:4b:88:b1:1f:b9:96:2e: 9d:4a:e8:e4:6a:49:50:7b:18:30:44:d4:f7:98:f3: d1:0c:72:54:b3:76:5e:ac:bc:f4:5b:95:b7:1d:98: cd:2f:8e:6a:69:69:7f:88:38:58:9b:4f:64:aa:d0: 53:92:a4:c6:00:cc:05:37:d3:65:43:26:49:78:9f: 93:3f:59:c3:d0:c8:57:f4:3d:b7:98:39:7a:f7:aa: 83:78:7f:47:7d:1d:b7:45:af:17:c6:03:03:02:95: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C2:2A:77:34:40:2B:1A:0E:C3:8E:10:8C:4F:7D:E6:46:19:AE:D4 X509v3 Authority Key Identifier: keyid:67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:04:ce:d0:db:93:bb:7c:0f:45:47:24:1d:bd:0a:d9:0f:b3: d2:e6:7d:03:4e:73:76:b3:b5:c9:fa:0f:38:c8:9b:c4:d7:f6: dd:ab:4e:75:c9:29:23:30:62:ef:ea:03:d9:0d:94:3f:2a:93: 18:c9:ef:82:b4:4d:5f:fd:82:61:f8:54:e6:2a:33:67:3e:69: 34:47:c4:13:20:e4:70:b3:32:7d:b3:af:a2:90:f0:7c:81:af: cd:0c:91:4f:26:f6:a7:01:d1:37:9b:bc:60:29:42:67:94:e4: 40:e2:a5:03:11:86:95:78:db:93:01:d2:d8:86:7b:ca:34:ed: 9f:57:94:b5:3e:cd:9a:16:4a:76:bc:35:b4:36:7d:ed:41:a3: ef:0e:60:b2:61:9c:7f:20:73:c0:6c:ff:a1:5a:f9:81:7f:f6: bc:41:cd:a2:a7:24:87:79:4b:50:96:06:e4:68:a7:bb:17:44: 6e:a0:20:4b:28:ec:19:35:3f:cc:cf:01:99:6c:d8:22:75:e0: b7:6b:3e:6f:3c:f8:bf:10:9c:c4:9f:39:2f:21:61:33:a6:2e: 75:1a:b9:cc:11:d3:a7:a5:e1:aa:07:ef:07:05:6a:24:d0:94: da:89:0b:b6:d6:31:47:e6:43:44:54:cc:90:a6:7c:eb:64:37: 42:e3:ab:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6cMdK7uLkpU3RuAzDRxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2U3MjIwMTRhYjZjNDBmNGYzODllY2ZjYWNhZWZmYmI2 MzA0Y2YwHhcNMjUxMjI5MDcwMTQ4WhcNMjUxMjMwMDcwMTQ4WjAzMTEwLwYDVQQD EyhkZmMyMmE3NzM0NDAyYjFhMGVjMzhlMTA4YzRmN2RlNjQ2MTlhZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfE98X5lEW4LM4ceq8UYTjDVu+K1 NzPAF62eCbBai7aGX6CRn4ruRqqCbjx5b3yyjG7bJ8Ie60FchEuqHIMmtvOEFuy1 jtzURzMlXxQ76jUUFx9plHl0dWweikzHKR+EwR+UN9SYzurfD5h9gqicBojFFMy2 Ts4ASpHoFzSMTVWSb8si9zO9AhpU7pLaRT33sEIAi3EY92bUTbVD+0uIsR+5li6d SujkaklQexgwRNT3mPPRDHJUs3ZerLz0W5W3HZjNL45qaWl/iDhYm09kqtBTkqTG AMwFN9NlQyZJeJ+TP1nD0MhX9D23mDl696qDeH9HfR23Ra8XxgMDApV59wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/CKnc0QCsaDsOOEIxPfeZGGa7UMB8GA1UdIwQY MBaAFGc+ciAUq2xA9POJ7Pysrv+7YwTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWno1eUlCU3JiRUQwODRuc19LeXVfN3RqQk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTg4YTQtN2M3Yi00ZTE5LTg0Y2Ut NWI0OTA1YTI4ZDgzLzEvWno1eUlCU3JiRUQwODRuc19LeXVfN3RqQk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85MTg4YTQtN2M3Yi00ZTE5LTg0Y2UtNWI0OTA1YTI4ZDgz LzEvWno1eUlCU3JiRUQwODRuc19LeXVfN3RqQk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKATO0NuT u3wPRUckHb0K2Q+z0uZ9A05zdrO1yfoPOMibxNf23atOdckpIzBi7+oD2Q2UPyqT GMnvgrRNX/2CYfhU5iozZz5pNEfEEyDkcLMyfbOvopDwfIGvzQyRTyb2pwHRN5u8 YClCZ5TkQOKlAxGGlXjbkwHS2IZ7yjTtn1eUtT7NmhZKdrw1tDZ97UGj7w5gsmGc fyBzwGz/oVr5gX/2vEHNoqckh3lLUJYG5GinuxdEbqAgSyjsGTU/zM8BmWzYInXg t2s+bzz4vxCcxJ85LyFhM6YudRq5zBHTp6XhqgfvBwVqJNCU2okLttYxR+ZDRFTM kKZ862Q3QuOrrw== -----END CERTIFICATE-----Generated at Wed Jan 14 01:29:37 2026 by rpki-client