This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft File: rxFguAPrImHBP4yK3JU9O1r7V8w.mft (raw, json) Hash identifier: djTAi2V52ndj2c5XOYge23lfog2IMIdc1ueAxBDOd1M= Subject key identifier: F4:F9:34:15:87:79:A2:F4:D6:02:F9:C6:61:ED:88:47:74:13:2C:D5 Authority key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC Certificate issuer: /CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc Certificate serial: 019AE897CC28DDCA022995A480A6954A47C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft Manifest number: 027B Signing time: Thu 04 Dec 2025 09:00:53 +0000 Manifest this update: Thu 04 Dec 2025 09:00:53 +0000 Manifest next update: Fri 05 Dec 2025 09:00:53 +0000 Files and hashes: 1: rxFguAPrImHBP4yK3JU9O1r7V8w.crl (hash: UQNn9ftFk57dz9tAGr3zjogCt7u3FZlQITGvHUNL1n0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:97:cc:28:dd:ca:02:29:95:a4:80:a6:95:4a:47:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc Validity Not Before: Dec 4 09:00:53 2025 GMT Not After : Dec 5 09:00:53 2025 GMT Subject: CN=f4f934158779a2f4d602f9c661ed884774132cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:7e:17:15:c2:72:ad:92:75:f0:5b:8e:d6: 76:5b:04:04:1a:d6:d7:c0:5c:9f:8b:88:5f:9f:59: cc:3f:73:3d:67:f3:28:dc:35:09:a0:a1:0a:8f:e3: e5:9b:e9:d1:38:2d:c1:de:72:d1:f7:cf:88:4d:85: 97:c6:03:74:dd:9a:a6:1b:71:e8:20:c7:f4:b4:3f: 16:95:fe:aa:89:43:70:8b:a6:cc:6b:79:52:3d:37: 33:93:aa:aa:0f:f6:41:8f:1d:c8:98:d0:da:c0:d2: 4f:37:3a:8d:a0:45:c1:b2:aa:22:46:8d:89:ad:25: 60:9e:f6:1c:a9:73:f1:d3:4b:12:52:a1:32:f1:f7: b8:38:4f:10:e2:ba:00:09:e3:54:9d:21:61:8b:65: 9e:c4:a4:78:c6:2e:aa:92:d9:63:d8:f7:0c:51:b7: 39:63:ba:58:f8:94:dd:30:a3:c6:50:25:bb:3a:dd: 8f:85:46:cb:75:cc:d2:44:63:54:a7:37:99:c1:83: 01:f5:3e:95:d3:0b:60:68:b4:2c:97:84:a6:ed:e1: 91:c0:cf:4a:88:57:6d:94:3f:c2:03:83:7f:13:c2: 1a:14:86:63:7b:b6:cb:56:b4:61:d1:00:92:0d:43: 7b:5c:60:e6:dc:58:24:ba:dd:fa:14:4b:17:80:8e: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F9:34:15:87:79:A2:F4:D6:02:F9:C6:61:ED:88:47:74:13:2C:D5 X509v3 Authority Key Identifier: keyid:AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:50:95:6b:f5:b4:23:19:40:3c:fb:60:9e:53:b6:8f:da: 96:de:23:6f:81:66:cc:25:4c:63:ad:77:52:7c:b9:b3:c3:78: 42:df:20:b3:92:0e:e2:04:b2:d7:c5:cd:8d:3c:7e:f5:23:a2: 9f:ab:f6:02:b1:be:51:69:d9:4a:bf:fe:a3:68:13:54:12:f7: eb:8a:e9:51:62:b2:8e:70:ec:ae:19:9a:1c:11:f8:de:c7:85: 97:f9:c2:07:de:89:9b:1c:fa:d4:f2:1e:3d:6e:3d:97:e8:1f: c5:a4:7f:6e:47:ac:89:7b:3a:77:28:83:0f:0a:06:03:ea:dc: eb:cb:a3:44:96:74:6a:0b:ca:86:94:66:f6:b3:34:54:e1:f7: e9:1d:93:a2:a8:2a:bd:11:97:e7:21:4a:08:ea:7a:db:57:93: fb:9e:b8:68:73:99:bd:4b:e3:3b:18:35:86:7e:44:8a:82:ec: 81:f9:c1:72:44:bb:ff:49:73:4f:e5:83:c5:aa:04:3c:9f:88: 92:7f:59:b8:75:df:72:90:29:7f:6d:e4:bf:58:96:8f:a6:e8: 30:6f:a8:87:a9:24:79:99:2b:24:f0:51:41:af:7b:56:4d:c3: 39:cd:83:84:98:f3:f8:64:4e:09:b4:44:d0:bc:28:4c:76:d9: 8f:b6:0b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrol8wo3coCKZWkgKaVSkfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTE2MGI4MDNlYjIyNjFjMTNmOGM4YWRjOTUzZDNiNWFm YjU3Y2MwHhcNMjUxMjA0MDkwMDUzWhcNMjUxMjA1MDkwMDUzWjAzMTEwLwYDVQQD EyhmNGY5MzQxNTg3NzlhMmY0ZDYwMmY5YzY2MWVkODg0Nzc0MTMyY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp01+FxXCcq2SdfBbjtZ2WwQEGtbX wFyfi4hfn1nMP3M9Z/Mo3DUJoKEKj+Plm+nROC3B3nLR98+ITYWXxgN03ZqmG3Ho IMf0tD8Wlf6qiUNwi6bMa3lSPTczk6qqD/ZBjx3ImNDawNJPNzqNoEXBsqoiRo2J rSVgnvYcqXPx00sSUqEy8fe4OE8Q4roACeNUnSFhi2WexKR4xi6qktlj2PcMUbc5 Y7pY+JTdMKPGUCW7Ot2PhUbLdczSRGNUpzeZwYMB9T6V0wtgaLQsl4Sm7eGRwM9K iFdtlD/CA4N/E8IaFIZje7bLVrRh0QCSDUN7XGDm3Fgkut36FEsXgI6TswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT5NBWHeaL01gL5xmHtiEd0EyzVMB8GA1UdIwQY MBaAFK8RYLgD6yJhwT+MityVPTta+1fMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhGZ3VBUHJJbUhCUDR5SzNKVTlPMXI3Vjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mN2YyMTQtMWRiMi00MzZhLTk1YzYt NjQzZjBkYTg0OWZhLzEvcnhGZ3VBUHJJbUhCUDR5SzNKVTlPMXI3Vjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mN2YyMTQtMWRiMi00MzZhLTk1YzYtNjQzZjBkYTg0OWZh LzEvcnhGZ3VBUHJJbUhCUDR5SzNKVTlPMXI3Vjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmZQlWv1 tCMZQDz7YJ5Tto/alt4jb4FmzCVMY613Uny5s8N4Qt8gs5IO4gSy18XNjTx+9SOi n6v2ArG+UWnZSr/+o2gTVBL364rpUWKyjnDsrhmaHBH43seFl/nCB96Jmxz61PIe PW49l+gfxaR/bkesiXs6dyiDDwoGA+rc68ujRJZ0agvKhpRm9rM0VOH36R2Toqgq vRGX5yFKCOp621eT+564aHOZvUvjOxg1hn5EioLsgfnBckS7/0lzT+WDxaoEPJ+I kn9ZuHXfcpApf23kv1iWj6boMG+oh6kkeZkrJPBRQa97Vk3DOc2DhJjz+GROCbRE 0LwoTHbZj7YLog== -----END CERTIFICATE-----Generated at Sun Dec 21 19:48:08 2025 by rpki-client