This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json) Hash identifier: HCcWZTxSe7o7gSpPsjwgEtcYQJJg6FwiQQn+CVcgGOk= Subject key identifier: 77:00:87:39:15:90:91:E2:9D:66:EB:82:44:48:CB:D5:C1:8C:49:CE Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51 Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951 Certificate serial: 0199CEA36F2949B128CAD99912B725A9BF96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft Manifest number: 04E7 Signing time: Fri 10 Oct 2025 15:00:41 +0000 Manifest this update: Fri 10 Oct 2025 15:00:41 +0000 Manifest next update: Sat 11 Oct 2025 15:00:41 +0000 Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: yLws8yA9TRDAOeVqxA9Wut9hQi9J2Wfp+6dVZRKzOYc=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ce:a3:6f:29:49:b1:28:ca:d9:99:12:b7:25:a9:bf:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951 Validity Not Before: Oct 10 15:00:41 2025 GMT Not After : Oct 11 15:00:41 2025 GMT Subject: CN=77008739159091e29d66eb824448cbd5c18c49ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:9a:64:c3:71:a1:75:c4:92:ed:76:9f:bc: ad:41:87:e9:54:48:f1:38:89:33:54:5b:b0:d8:84: 16:62:6e:b0:51:02:ba:e9:bb:8c:b1:11:f2:8d:f4: 7f:e7:7d:4e:78:5f:1d:d1:3b:d2:f4:cb:e0:66:96: 2a:4e:bb:f1:14:a5:d1:79:e8:14:00:d2:73:e8:32: 4a:5c:06:79:d8:8e:b6:c3:75:37:fe:83:b0:ed:08: c7:85:95:e9:f0:1c:97:28:e4:f5:0a:cb:f5:78:cf: 15:05:6b:dc:67:1b:47:a8:77:f5:b8:be:dd:2a:bc: 2e:66:d3:d8:53:cd:10:7a:59:7c:81:4b:96:8f:51: 4e:9f:40:a5:4d:3a:41:61:79:18:ee:9f:d5:ea:33: 47:54:e9:2a:7a:da:ec:5e:b7:2a:dc:0d:b8:68:49: 4e:77:19:d3:9b:ae:d8:a2:4a:2c:e9:2b:27:55:e6: b3:5c:53:19:05:23:b3:01:7e:e6:28:f8:61:f9:08: a3:83:76:87:45:da:88:c2:a2:03:65:48:92:ea:17: 54:25:e0:8a:86:f7:04:fa:45:48:91:4f:dc:fa:9c: d1:3d:2e:8f:e5:6b:4d:2d:20:9a:57:f0:2a:d3:ca: cd:54:1e:0c:01:f9:cb:ed:b6:35:c5:b2:5f:01:61: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:87:39:15:90:91:E2:9D:66:EB:82:44:48:CB:D5:C1:8C:49:CE X509v3 Authority Key Identifier: keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:20:a6:4f:1f:98:d1:ec:b9:34:77:31:3a:ea:f3:19:8e:70: 88:ef:f8:9a:b1:c3:b2:46:a9:a9:41:75:ce:4f:1c:82:16:0f: 99:40:ef:e7:50:69:28:a3:0f:be:b2:7f:0f:e0:ef:1b:bf:1e: b9:19:c6:f4:1c:f8:af:fe:6f:f6:1f:82:e9:9f:b4:86:46:85: bc:63:c5:6f:e7:97:d5:f3:05:ef:d1:8d:a3:9a:3e:8c:6a:dd: bb:bd:9b:80:5d:d7:86:b8:25:5c:c4:ad:a0:d4:08:49:f8:7d: f5:b6:dc:3e:3d:d2:35:c8:7a:38:dd:de:fc:83:3f:a6:b3:a9: fe:c0:3a:73:3b:f5:22:94:11:e9:f8:85:2a:45:a8:d1:0d:59: 02:89:d1:8d:b3:76:5b:6e:83:36:a0:b3:36:5e:cd:c7:1e:d6: f1:af:77:d2:f6:a7:fc:87:99:13:73:93:41:b9:74:04:d8:dd: fd:44:20:48:9f:4d:fe:45:d9:81:33:c4:e9:d7:c3:b3:a6:9e: e8:d5:f1:e0:67:ce:0d:21:93:ef:c1:ed:63:9a:fd:c6:56:4d: a4:4e:9f:95:bc:b1:08:33:fc:6b:3d:a6:84:01:64:ec:a9:8d: 93:e4:cd:5b:5b:af:d3:ce:5c:ca:f1:41:e1:b5:87:56:f8:dc: c3:5f:8a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnOo28pSbEoytmZErclqb+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTYxZTkxOWM2Yzc0YTg3NWNlZTA2MThmZWNjNWZkNjNm OTU5NTEwHhcNMjUxMDEwMTUwMDQxWhcNMjUxMDExMTUwMDQxWjAzMTEwLwYDVQQD Eyg3NzAwODczOTE1OTA5MWUyOWQ2NmViODI0NDQ4Y2JkNWMxOGM0OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+WaZMNxoXXEku12n7ytQYfpVEjx OIkzVFuw2IQWYm6wUQK66buMsRHyjfR/531OeF8d0TvS9MvgZpYqTrvxFKXReegU ANJz6DJKXAZ52I62w3U3/oOw7QjHhZXp8ByXKOT1Csv1eM8VBWvcZxtHqHf1uL7d KrwuZtPYU80Qell8gUuWj1FOn0ClTTpBYXkY7p/V6jNHVOkqetrsXrcq3A24aElO dxnTm67Yokos6SsnVeazXFMZBSOzAX7mKPhh+Qijg3aHRdqIwqIDZUiS6hdUJeCK hvcE+kVIkU/c+pzRPS6P5WtNLSCaV/Aq08rNVB4MAfnL7bY1xbJfAWEEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcAhzkVkJHinWbrgkRIy9XBjEnOMB8GA1UdIwQY MBaAFKKWHpGcbHSodc7gYY/sxf1j+VlRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BZZWtaeHNkS2gxenVCaGotekZfV1A1V1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xMDA4MzEtMzlmOC00YmYzLWJlMWEt NGY1ZTI2NWQxNjc5LzEvb3BZZWtaeHNkS2gxenVCaGotekZfV1A1V1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xMDA4MzEtMzlmOC00YmYzLWJlMWEtNGY1ZTI2NWQxNjc5 LzEvb3BZZWtaeHNkS2gxenVCaGotekZfV1A1V1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSCmTx+Y 0ey5NHcxOurzGY5wiO/4mrHDskapqUF1zk8cghYPmUDv51BpKKMPvrJ/D+DvG78e uRnG9Bz4r/5v9h+C6Z+0hkaFvGPFb+eX1fMF79GNo5o+jGrdu72bgF3XhrglXMSt oNQISfh99bbcPj3SNch6ON3e/IM/prOp/sA6czv1IpQR6fiFKkWo0Q1ZAonRjbN2 W26DNqCzNl7Nxx7W8a930van/IeZE3OTQbl0BNjd/UQgSJ9N/kXZgTPE6dfDs6ae 6NXx4GfODSGT78HtY5r9xlZNpE6flbyxCDP8az2mhAFk7KmNk+TNW1uv085cyvFB 4bWHVvjcw1+Ksw== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:08 2025 by rpki-client