This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json) Hash identifier: 89rYSCn072ODlZ/oEuq6pbeIt2Qbm3fTYYBCj1RqCmg= Subject key identifier: 60:5E:BB:F0:13:29:7C:9F:A8:5E:28:0E:0D:E5:25:F8:56:C2:58:36 Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b Certificate serial: 019AFCC33AFE8BA7851780D9CA76D263EE50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft Manifest number: 1769 Signing time: Mon 08 Dec 2025 07:00:44 +0000 Manifest this update: Mon 08 Dec 2025 07:00:44 +0000 Manifest next update: Tue 09 Dec 2025 07:00:44 +0000 Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=) 2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=) 3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: 312MslftJDPZsESuIuv1d3eyvNk2Fgd49XMoivB3OX4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:3a:fe:8b:a7:85:17:80:d9:ca:76:d2:63:ee:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b Validity Not Before: Dec 8 07:00:44 2025 GMT Not After : Dec 9 07:00:44 2025 GMT Subject: CN=605ebbf013297c9fa85e280e0de525f856c25836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:a7:18:54:3b:45:48:30:f9:10:8b:35:f6: cf:53:03:7b:71:07:ba:7c:9d:a5:34:8f:9a:58:53: fc:3c:7b:43:22:bd:f2:ea:5d:e1:b4:da:01:4e:6b: 26:2c:2b:e7:7a:21:5d:da:36:49:76:c3:ca:6a:e6: 9b:58:6b:34:66:21:e7:f0:05:28:8b:c2:96:49:bb: 0e:03:ae:66:3a:5d:a9:02:55:ea:df:a4:34:07:ac: 09:b6:98:d9:d7:2d:bd:ed:a1:b1:1a:f2:8a:10:5d: 78:cd:77:34:f0:10:f8:49:e1:17:3b:8d:f1:39:e6: 78:18:73:40:47:81:e9:c4:ef:3b:18:e4:b0:7d:bb: cc:a8:2a:c4:53:b4:3b:04:38:b6:b8:8b:57:ee:86: 9e:9e:f8:d8:26:a2:82:af:6f:a9:e8:99:c6:34:12: d9:8d:0e:dd:50:18:31:c3:3b:d8:fc:2f:56:85:1f: 73:97:b4:94:6b:6a:d7:d6:8b:44:4f:37:b0:b6:fa: a4:e3:7c:e8:41:77:36:f0:37:c1:32:66:6c:47:c5: 42:c4:1e:d3:4c:34:e9:df:41:e8:e5:1b:ea:37:2b: 2a:d5:93:7b:7a:ca:3d:44:19:97:f7:db:99:ae:7b: 40:70:06:fb:52:b2:45:7b:95:b7:da:4d:3f:02:ee: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5E:BB:F0:13:29:7C:9F:A8:5E:28:0E:0D:E5:25:F8:56:C2:58:36 X509v3 Authority Key Identifier: keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f2:a9:bc:b5:32:bd:0f:b3:77:e3:13:de:9e:97:54:36:91: 04:1f:be:5d:0b:54:4c:d1:aa:47:ee:fa:3a:7a:7f:7e:0d:fc: 70:b3:b6:ff:18:6f:44:c4:42:15:0c:c3:e6:a9:d0:f0:29:11: 4e:7d:1a:80:a4:60:cf:cf:25:ec:b7:7b:ed:50:5b:3c:44:fd: 25:20:cd:81:b4:f5:84:79:6b:1a:2c:1c:d0:27:44:dd:39:87: e8:84:42:5a:71:6e:ce:d2:ec:a7:3e:f4:99:eb:2e:d8:5d:0d: a4:cc:ba:27:83:17:4a:b5:34:13:4f:87:71:ea:0d:81:34:38: 6b:c7:02:f4:f7:f2:c7:31:29:e6:d8:bb:59:cf:8d:dc:56:ad: 1c:20:fc:da:6e:e1:21:fb:f6:25:0d:26:65:cb:b4:98:6e:0c: 0e:1f:a0:72:4d:71:b9:87:4b:1a:ba:cf:a4:01:a2:04:0e:10: 06:49:44:e1:68:8c:11:f1:2a:b4:ac:76:c9:91:05:a8:c7:84: 26:b1:d9:a3:fb:bc:d9:76:88:d4:5a:12:c7:f4:38:72:df:43: 8d:c5:e5:bb:64:f4:ee:a9:71:14:85:1e:72:22:1b:bd:bd:7d: 23:89:d4:bd:7b:36:49:1f:22:8d:70:38:05:ea:e2:8d:de:42: 6c:79:b8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8wzr+i6eFF4DZynbSY+5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzI4ZThhMjdkMzBjODNhZWU1ZjQ5NjI0MDk4NWVlNDBj YjM3OGIwHhcNMjUxMjA4MDcwMDQ0WhcNMjUxMjA5MDcwMDQ0WjAzMTEwLwYDVQQD Eyg2MDVlYmJmMDEzMjk3YzlmYTg1ZTI4MGUwZGU1MjVmODU2YzI1ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwqnGFQ7RUgw+RCLNfbPUwN7cQe6 fJ2lNI+aWFP8PHtDIr3y6l3htNoBTmsmLCvneiFd2jZJdsPKauabWGs0ZiHn8AUo i8KWSbsOA65mOl2pAlXq36Q0B6wJtpjZ1y297aGxGvKKEF14zXc08BD4SeEXO43x OeZ4GHNAR4HpxO87GOSwfbvMqCrEU7Q7BDi2uItX7oaenvjYJqKCr2+p6JnGNBLZ jQ7dUBgxwzvY/C9WhR9zl7SUa2rX1otETzewtvqk43zoQXc28DfBMmZsR8VCxB7T TDTp30Ho5RvqNysq1ZN7eso9RBmX99uZrntAcAb7UrJFe5W32k0/Au5uTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBeu/ATKXyfqF4oDg3lJfhWwlg2MB8GA1UdIwQY MBaAFJhyjoon0wyDruX0liQJhe5AyzeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjkt YTI0ZTNhMGEzMWVmLzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjktYTI0ZTNhMGEzMWVm LzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/KpvLUy vQ+zd+MT3p6XVDaRBB++XQtUTNGqR+76Onp/fg38cLO2/xhvRMRCFQzD5qnQ8CkR Tn0agKRgz88l7Ld77VBbPET9JSDNgbT1hHlrGiwc0CdE3TmH6IRCWnFuztLspz70 mesu2F0NpMy6J4MXSrU0E0+HceoNgTQ4a8cC9PfyxzEp5ti7Wc+N3FatHCD82m7h Ifv2JQ0mZcu0mG4MDh+gck1xuYdLGrrPpAGiBA4QBklE4WiMEfEqtKx2yZEFqMeE JrHZo/u82XaI1FoSx/Q4ct9DjcXlu2T07qlxFIUeciIbvb19I4nUvXs2SR8ijXA4 Berijd5CbHm45Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:25 2025 by rpki-client