This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json) Hash identifier: 3J3qUubYP7lZRafMC7VQ/MX580Qza37Fq8ji/diUZm0= Subject key identifier: 47:80:BF:A2:5D:20:8F:24:E5:4A:B5:54:95:83:50:D0:9F:E7:5F:8E Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0 Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0 Certificate serial: 019B0BC8FAC789878A9D2185B44F2A17AB12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft Manifest number: 078A Signing time: Thu 11 Dec 2025 05:01:19 +0000 Manifest this update: Thu 11 Dec 2025 05:01:19 +0000 Manifest next update: Fri 12 Dec 2025 05:01:19 +0000 Files and hashes: 1: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: 3iTpE/JeGzdleRe0IpfKYYNzWM8MyP9FiRaAgBEB7Zc=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:c8:fa:c7:89:87:8a:9d:21:85:b4:4f:2a:17:ab:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0 Validity Not Before: Dec 11 05:01:19 2025 GMT Not After : Dec 12 05:01:19 2025 GMT Subject: CN=4780bfa25d208f24e54ab554958350d09fe75f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:45:d4:93:90:85:9a:e5:10:b0:2a:20:39: 67:81:d6:03:38:0d:0c:aa:a8:de:77:9b:42:ae:02: e7:3c:98:72:e0:8f:50:5f:bf:be:b9:32:10:2c:ee: 30:c2:46:e3:3e:b6:f6:78:df:b9:e2:4b:da:d9:86: eb:77:e2:3c:6a:ec:6d:18:dd:68:21:53:3f:57:90: ad:3f:66:8e:c7:1c:9a:24:77:af:23:5e:6b:c4:b6: 8e:cd:95:95:7d:07:8e:f7:cf:97:a2:6c:72:12:a3: 59:90:fd:07:c4:b6:08:ae:20:90:15:e2:e2:18:92: 60:cd:3f:e6:07:ca:83:7f:9a:8f:f9:9e:7d:bc:c9: 3d:cd:5b:54:1a:b1:dc:9e:53:f4:c0:75:1c:d5:41: e1:d4:dd:50:87:0d:76:1f:d6:00:c4:71:d7:01:35: 96:ae:be:f2:d1:75:93:c7:9c:07:7c:99:78:a9:7d: dd:3c:52:d5:72:ed:88:02:d1:03:ec:8d:75:3d:30: 5d:27:4a:43:0e:53:81:e3:88:62:77:3f:fd:ae:c6: 5f:b7:b2:77:4d:c0:ca:29:52:45:e5:9b:f2:2d:61: 37:27:6a:18:57:93:40:81:37:42:6f:e6:16:d1:7a: 29:3c:b6:63:80:e4:bc:c2:a1:9c:c0:a6:5a:9d:02: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:80:BF:A2:5D:20:8F:24:E5:4A:B5:54:95:83:50:D0:9F:E7:5F:8E X509v3 Authority Key Identifier: keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c7:73:b5:51:8d:a4:7c:7f:ef:80:fd:3e:c3:7a:04:75:c4: 3d:ee:1e:ed:be:f7:47:7f:62:fe:a7:d6:73:37:f6:ce:6a:96: d3:e8:28:29:dd:3a:e0:ab:a2:84:3a:00:18:22:e7:5f:0f:8e: 7d:25:3c:a1:d0:0e:fc:cf:3b:02:52:eb:2b:9b:47:62:40:fc: 27:5d:a7:b8:ac:6d:d6:83:04:51:7c:85:dc:05:30:07:2a:a7: 2e:4d:fb:30:30:65:4b:34:a7:81:74:49:f0:11:5c:86:d4:02: 63:7c:77:96:07:25:e6:34:f4:4d:27:84:31:e9:c1:14:fa:2f: 5f:fd:42:e4:68:d1:f0:f6:8c:d0:16:21:fe:d0:fa:99:32:cf: 64:81:d8:56:3e:16:49:a1:35:51:da:6c:f1:e8:4c:8d:9e:ed: 1b:fb:ee:71:07:3b:ed:80:76:80:5a:c6:c0:43:5d:7c:83:e4: b0:66:80:5c:39:db:1b:57:9b:36:17:a6:7f:70:a7:12:f9:61: da:94:25:a3:e2:a2:08:e2:43:1a:d1:82:8e:13:06:ff:d1:bd: af:6b:a4:a4:fd:5a:4c:8e:7d:90:82:ee:d9:5d:2d:b4:2e:89: 7b:e8:25:ed:ab:38:b1:99:c0:a7:cd:25:06:b7:70:1b:39:d5: 21:78:30:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLyPrHiYeKnSGFtE8qF6sSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTM4MDAwZDRiNWFiZDE1MzJhMjUzODFjYjI2MTVlZWMx ZWRjYTAwHhcNMjUxMjExMDUwMTE5WhcNMjUxMjEyMDUwMTE5WjAzMTEwLwYDVQQD Eyg0NzgwYmZhMjVkMjA4ZjI0ZTU0YWI1NTQ5NTgzNTBkMDlmZTc1ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfVF1JOQhZrlELAqIDlngdYDOA0M qqjed5tCrgLnPJhy4I9QX7++uTIQLO4wwkbjPrb2eN+54kva2Ybrd+I8auxtGN1o IVM/V5CtP2aOxxyaJHevI15rxLaOzZWVfQeO98+XomxyEqNZkP0HxLYIriCQFeLi GJJgzT/mB8qDf5qP+Z59vMk9zVtUGrHcnlP0wHUc1UHh1N1Qhw12H9YAxHHXATWW rr7y0XWTx5wHfJl4qX3dPFLVcu2IAtED7I11PTBdJ0pDDlOB44hidz/9rsZft7J3 TcDKKVJF5ZvyLWE3J2oYV5NAgTdCb+YW0XopPLZjgOS8wqGcwKZanQIOGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeAv6JdII8k5Uq1VJWDUNCf51+OMB8GA1UdIwQY MBaAFICjgADUtavRUyolOByyYV7sHtygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tPQUFOUzFxOUZUS2lVNEhMSmhYdXdlM0tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84ZWYxNjItZTg0MC00YTE1LWFiYTYt OWUwODk4ZjQ0NTBjLzEvZ0tPQUFOUzFxOUZUS2lVNEhMSmhYdXdlM0tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni84ZWYxNjItZTg0MC00YTE1LWFiYTYtOWUwODk4ZjQ0NTBj LzEvZ0tPQUFOUzFxOUZUS2lVNEhMSmhYdXdlM0tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsdztVGN pHx/74D9PsN6BHXEPe4e7b73R39i/qfWczf2zmqW0+goKd064KuihDoAGCLnXw+O fSU8odAO/M87AlLrK5tHYkD8J12nuKxt1oMEUXyF3AUwByqnLk37MDBlSzSngXRJ 8BFchtQCY3x3lgcl5jT0TSeEMenBFPovX/1C5GjR8PaM0BYh/tD6mTLPZIHYVj4W SaE1Udps8ehMjZ7tG/vucQc77YB2gFrGwENdfIPksGaAXDnbG1ebNhemf3CnEvlh 2pQlo+KiCOJDGtGCjhMG/9G9r2ukpP1aTI59kILu2V0ttC6Je+gl7as4sZnAp80l BrdwGznVIXgw0w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:04:02 2025 by rpki-client