This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json) Hash identifier: 4VmCxTUOaYnL+No1FIVX6wULXI2uupqRcugLOr+TmBo= Subject key identifier: 70:53:29:7C:67:7F:69:F3:E7:D3:15:B8:C9:B7:45:61:CF:EC:D3:1F Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1 Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1 Certificate serial: 019AE829CEB0085794E75BA2A3D02048DFD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft Manifest number: 175A Signing time: Thu 04 Dec 2025 07:00:45 +0000 Manifest this update: Thu 04 Dec 2025 07:00:45 +0000 Manifest next update: Fri 05 Dec 2025 07:00:45 +0000 Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: Z40poOrBWVA0sbZbSzuKnEoXrntboWguUr5T8NGGPsg=) 2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:29:ce:b0:08:57:94:e7:5b:a2:a3:d0:20:48:df:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1 Validity Not Before: Dec 4 07:00:45 2025 GMT Not After : Dec 5 07:00:45 2025 GMT Subject: CN=7053297c677f69f3e7d315b8c9b74561cfecd31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f4:9d:49:77:ab:f9:43:2d:fa:d3:26:70:1d: 11:19:72:c2:39:b0:36:15:29:cb:1c:4b:72:58:4a: cb:f8:59:44:9a:a1:6c:bb:e2:3e:c7:d6:37:ef:9b: 10:d4:c6:20:cc:05:7d:75:24:54:ba:31:1a:25:2e: b9:c7:2c:c6:80:32:d1:b2:83:f1:a3:34:d8:0d:6c: 7e:57:81:9c:bf:3e:c6:9f:a0:51:27:4a:e6:58:04: fc:17:e7:f6:1c:51:48:7a:5b:0c:24:4a:78:d0:fe: 3e:c4:e6:cd:f3:60:49:09:57:0d:66:4a:21:7d:a8: a0:f8:97:c9:1d:12:dd:8e:d2:c4:24:28:17:c2:49: d8:15:29:b0:53:25:0a:e5:c9:c4:be:12:9f:24:4a: 89:61:f3:46:ed:d7:57:65:e6:66:29:18:77:99:eb: ff:67:c5:47:0c:6a:67:63:ec:b2:4f:49:e7:a1:38: 63:92:d5:b0:85:6a:16:3d:6d:f2:23:81:29:d3:4b: 32:9c:02:99:68:fb:af:1b:5d:43:52:37:6e:69:eb: 5c:69:38:ff:d1:32:08:07:92:22:8e:45:f3:08:58: 1b:ab:cf:5f:eb:d4:b2:5f:58:18:80:af:e2:08:a4: dc:0e:0a:1c:d1:e5:23:0c:5a:92:ea:f2:7c:04:3c: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:29:7C:67:7F:69:F3:E7:D3:15:B8:C9:B7:45:61:CF:EC:D3:1F X509v3 Authority Key Identifier: keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:52:2e:8d:14:9b:be:7a:59:d2:07:b8:63:67:ab:8c:e3:50: cc:6d:bb:f4:5b:66:87:08:64:ad:85:3b:c9:1e:46:1b:79:7a: 72:10:33:cf:49:87:bc:99:9a:51:0d:d4:68:5a:0b:b4:e3:9b: 82:6f:40:5a:8c:a7:e6:66:bc:fe:e3:c0:6e:49:28:2c:22:07: 00:bd:78:e0:5c:47:b7:b4:bf:de:0f:0e:d6:21:61:fc:0d:13: 22:34:6c:e7:50:dd:9a:ce:52:8a:90:dc:93:25:90:95:58:17: b3:4f:59:26:6b:57:32:1f:94:60:c0:ef:29:e5:bb:8f:47:c1: 4e:ec:d2:5b:5c:40:85:6e:b1:a4:8f:42:01:92:bf:0b:4f:03: a6:3d:ae:06:e6:3f:22:51:a7:d9:5b:d9:11:1e:06:ac:99:44: ef:af:59:d5:6e:cc:01:15:0f:64:5e:da:d0:d1:21:36:03:2a: a7:d1:d9:69:0a:3c:f0:35:9d:37:7e:52:0d:55:0c:2d:97:59: 21:c9:6e:c8:1d:fc:69:0e:ac:12:8f:6d:c9:bc:c3:42:d8:73: 2b:42:f9:5c:3b:e7:30:16:19:d3:fe:b8:2f:c7:ce:ff:8a:b6: 55:de:ae:cb:b2:8a:1f:d2:47:9b:ec:43:fa:69:83:f4:18:bc: 8c:9f:c4:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZroKc6wCFeU51uio9AgSN/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3N2MyNjRkMzg4MzMzZDM0MjM3MjkzMWFhMGQxOTJiMGZi YTYyYzEwHhcNMjUxMjA0MDcwMDQ1WhcNMjUxMjA1MDcwMDQ1WjAzMTEwLwYDVQQD Eyg3MDUzMjk3YzY3N2Y2OWYzZTdkMzE1YjhjOWI3NDU2MWNmZWNkMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PSdSXer+UMt+tMmcB0RGXLCObA2 FSnLHEtyWErL+FlEmqFsu+I+x9Y375sQ1MYgzAV9dSRUujEaJS65xyzGgDLRsoPx ozTYDWx+V4Gcvz7Gn6BRJ0rmWAT8F+f2HFFIelsMJEp40P4+xObN82BJCVcNZkoh faig+JfJHRLdjtLEJCgXwknYFSmwUyUK5cnEvhKfJEqJYfNG7ddXZeZmKRh3mev/ Z8VHDGpnY+yyT0nnoThjktWwhWoWPW3yI4Ep00synAKZaPuvG11DUjduaetcaTj/ 0TIIB5IijkXzCFgbq89f69SyX1gYgK/iCKTcDgoc0eUjDFqS6vJ8BDyvAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBTKXxnf2nz59MVuMm3RWHP7NMfMB8GA1UdIwQY MBaAFDd8Jk04gzPTQjcpMaoNGSsPumLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjUyYTktMmU0Mi00MjI4LWI1NDAt ZTYwNjRlZmNlMmFjLzEvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMjUyYTktMmU0Mi00MjI4LWI1NDAtZTYwNjRlZmNlMmFj LzEvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlIujRSb vnpZ0ge4Y2erjONQzG279FtmhwhkrYU7yR5GG3l6chAzz0mHvJmaUQ3UaFoLtOOb gm9AWoyn5ma8/uPAbkkoLCIHAL144FxHt7S/3g8O1iFh/A0TIjRs51Ddms5SipDc kyWQlVgXs09ZJmtXMh+UYMDvKeW7j0fBTuzSW1xAhW6xpI9CAZK/C08Dpj2uBuY/ IlGn2VvZER4GrJlE769Z1W7MARUPZF7a0NEhNgMqp9HZaQo88DWdN35SDVUMLZdZ IcluyB38aQ6sEo9tybzDQthzK0L5XDvnMBYZ0/64L8fO/4q2Vd6uy7KKH9JHm+xD +mmD9Bi8jJ/EAg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:41:49 2025 by rpki-client