This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft File: gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json) Hash identifier: yeVmce5VgRD1ruC3k3GuBF0+ZLLa6TkOzZzgViXanMs= Subject key identifier: 75:59:48:FA:F9:3F:25:CD:26:12:58:BC:3C:3A:56:2A:C2:F4:81:07 Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96 Certificate issuer: /CN=802fa5b984226183201b701596b0368a27ca9196 Certificate serial: 019ADF27913C53DE1D2B2ECF20A063D161F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft Manifest number: 08F5 Signing time: Tue 02 Dec 2025 13:01:43 +0000 Manifest this update: Tue 02 Dec 2025 13:01:43 +0000 Manifest next update: Wed 03 Dec 2025 13:01:43 +0000 Files and hashes: 1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: lpStbFa30a3z0u0YlfPyGf1WJh7TAyrlmikgJRLwZhs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:27:91:3c:53:de:1d:2b:2e:cf:20:a0:63:d1:61:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802fa5b984226183201b701596b0368a27ca9196 Validity Not Before: Dec 2 13:01:43 2025 GMT Not After : Dec 3 13:01:43 2025 GMT Subject: CN=755948faf93f25cd261258bc3c3a562ac2f48107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:10:01:36:9c:f8:32:f9:c8:a3:32:a7:dd: 57:f3:e2:c3:54:be:11:0c:d6:3e:8a:8d:ab:f7:f0: b8:07:3b:25:ff:f4:dc:13:e9:07:86:8a:78:db:93: 04:2e:bb:73:95:ad:2d:88:0c:46:1a:50:61:01:f2: 38:ee:9a:5e:35:d1:34:cf:9a:f1:0f:c4:47:d2:cb: 67:0d:b9:f9:c3:2e:3d:69:29:1a:11:6b:a4:cf:b0: 00:40:e3:58:2d:9c:db:cd:1a:16:8f:98:76:26:30: 36:58:0a:9b:53:3c:c3:ad:12:d6:c3:6f:66:7f:3f: 00:66:7b:a1:0c:67:7c:5e:b5:57:de:02:b9:3a:f1: cd:43:4c:83:97:69:8c:ea:24:3a:d0:b4:f8:99:34: 71:3a:18:70:40:2a:26:3a:04:9e:80:87:0a:c5:bf: 04:23:3e:e0:f1:27:9a:2b:61:4d:55:2f:47:2f:db: c1:8d:b1:36:bc:a7:9a:bd:2a:c9:4f:39:ad:1c:98: cf:23:ae:b8:62:74:1f:da:24:bb:ea:7f:b1:32:a7: 33:94:d7:0a:fb:7e:6b:8d:43:12:94:22:c6:51:af: ed:6d:a3:09:69:80:da:bb:79:7e:08:b3:69:0c:cf: 03:96:32:71:d6:a4:44:a3:dd:43:eb:a9:25:76:f1: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:59:48:FA:F9:3F:25:CD:26:12:58:BC:3C:3A:56:2A:C2:F4:81:07 X509v3 Authority Key Identifier: keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c1:dc:82:f4:9a:7d:e2:d7:a5:2d:37:01:48:a2:0f:a0:2c: f7:2c:5d:dd:f5:31:91:90:40:4d:b4:02:ec:6d:d9:15:cc:15: 75:42:5e:c5:67:f5:bd:a0:74:cd:69:40:89:cc:90:42:32:e4: e9:dc:0b:e9:26:e5:bf:13:24:da:e2:31:17:ff:67:52:1a:83: 89:e2:5c:cd:33:9e:e1:1c:f3:cb:b0:d6:e2:f7:3b:db:a7:7e: c2:ca:05:23:a5:3a:c3:63:83:17:10:1c:94:c8:f9:46:8c:84: 0b:20:a6:1f:4d:24:87:88:f5:f4:1e:9b:74:3e:ed:3a:f0:d8: 2b:c8:f8:6a:b7:17:19:8c:ce:2d:b6:92:d5:02:90:ba:93:7b: 46:ac:21:cd:4b:d5:ed:c5:8e:c1:33:3a:0e:1f:47:52:04:63: 60:4b:48:51:6a:04:29:84:ec:d0:2e:2b:f4:11:e2:02:7e:fb: 88:8e:14:79:ae:03:cc:41:96:7e:38:bf:97:75:c6:b4:fa:d0: 06:5f:cd:e7:04:d4:b2:14:89:ec:ac:05:a0:d0:cd:d6:ae:ff: 5a:05:19:4f:6b:3d:f6:94:b4:98:f1:2e:ee:d2:ff:b0:cc:d8: d2:76:8c:96:9c:17:ef:dd:a2:5c:d1:5a:1a:ca:f0:91:4d:3b: e3:70:f7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrfJ5E8U94dKy7PIKBj0WH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMmZhNWI5ODQyMjYxODMyMDFiNzAxNTk2YjAzNjhhMjdj YTkxOTYwHhcNMjUxMjAyMTMwMTQzWhcNMjUxMjAzMTMwMTQzWjAzMTEwLwYDVQQD Eyg3NTU5NDhmYWY5M2YyNWNkMjYxMjU4YmMzYzNhNTYyYWMyZjQ4MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVQQATac+DL5yKMyp91X8+LDVL4R DNY+io2r9/C4Bzsl//TcE+kHhop425MELrtzla0tiAxGGlBhAfI47ppeNdE0z5rx D8RH0stnDbn5wy49aSkaEWukz7AAQONYLZzbzRoWj5h2JjA2WAqbUzzDrRLWw29m fz8AZnuhDGd8XrVX3gK5OvHNQ0yDl2mM6iQ60LT4mTRxOhhwQComOgSegIcKxb8E Iz7g8SeaK2FNVS9HL9vBjbE2vKeavSrJTzmtHJjPI664YnQf2iS76n+xMqczlNcK +35rjUMSlCLGUa/tbaMJaYDau3l+CLNpDM8DljJx1qREo91D66kldvHgkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVZSPr5PyXNJhJYvDw6VirC9IEHMB8GA1UdIwQY MBaAFIAvpbmEImGDIBtwFZawNoonypGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYzNhMzAtNTQ5OC00NDdkLThkMzkt MjViNmJkMmUxZTQzLzEvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yYzNhMzAtNTQ5OC00NDdkLThkMzktMjViNmJkMmUxZTQz LzEvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8HcgvSa feLXpS03AUiiD6As9yxd3fUxkZBATbQC7G3ZFcwVdUJexWf1vaB0zWlAicyQQjLk 6dwL6SblvxMk2uIxF/9nUhqDieJczTOe4Rzzy7DW4vc726d+wsoFI6U6w2ODFxAc lMj5RoyECyCmH00kh4j19B6bdD7tOvDYK8j4arcXGYzOLbaS1QKQupN7RqwhzUvV 7cWOwTM6Dh9HUgRjYEtIUWoEKYTs0C4r9BHiAn77iI4Uea4DzEGWfji/l3XGtPrQ Bl/N5wTUshSJ7KwFoNDN1q7/WgUZT2s99pS0mPEu7tL/sMzY0naMlpwX792iXNFa GsrwkU0743D3JA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:27 2025 by rpki-client