This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft File: 5pgECu2WLzBoge6mVTBA-5ptNMk.mft (raw, json) Hash identifier: KtitY/LbQbAqpWBzUQbQvzN81BPWj85gPMrUg64KAQk= Subject key identifier: 1C:1A:96:C6:F6:77:22:C4:37:51:FB:A9:ED:82:DD:DF:AD:02:07:DB Authority key identifier: E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9 Certificate issuer: /CN=e698040aed962f306881eea6553040fb9a6d34c9 Certificate serial: 019A0FA753B9579A5B597EFE27346ED72773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft Manifest number: 0590 Signing time: Thu 23 Oct 2025 06:00:15 +0000 Manifest this update: Thu 23 Oct 2025 06:00:15 +0000 Manifest next update: Fri 24 Oct 2025 06:00:15 +0000 Files and hashes: 1: 5pgECu2WLzBoge6mVTBA-5ptNMk.crl (hash: MVT7fsagNymr76r4Afni10Z5CfyUp+eQL9wFISYfoio=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0f:a7:53:b9:57:9a:5b:59:7e:fe:27:34:6e:d7:27:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e698040aed962f306881eea6553040fb9a6d34c9 Validity Not Before: Oct 23 06:00:15 2025 GMT Not After : Oct 24 06:00:15 2025 GMT Subject: CN=1c1a96c6f67722c43751fba9ed82dddfad0207db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:7f:47:ed:69:ec:63:22:84:88:7d:90:e9: 43:5f:0b:5f:36:40:70:e7:d9:6d:68:06:57:31:06: fd:66:38:d2:1c:22:ff:4a:1f:96:f5:50:4c:ef:28: 57:c1:69:84:5d:ea:5f:21:b3:88:50:15:9a:c2:b7: 8a:85:a0:03:27:7d:0e:a1:fd:57:c7:4b:ac:4c:40: 0b:03:7a:9d:9f:20:ab:50:e3:1f:65:90:34:49:6b: 27:e1:98:66:8a:33:e4:8b:c3:33:66:d0:06:f5:b3: 3d:c9:7c:a6:2a:a6:11:66:99:fa:58:d1:31:8e:5c: 5a:50:1b:25:6b:48:3a:de:40:30:46:5f:d7:7e:19: 59:27:41:25:0f:66:89:61:26:a9:9a:89:05:fe:05: ba:e1:ca:a5:b1:96:90:a2:87:42:f0:8d:57:ba:08: b9:da:69:a2:77:55:0d:f6:57:7a:71:8e:a6:46:b1: bf:6f:b3:08:71:1b:21:68:3b:dd:47:b8:66:f9:5d: d2:b5:fe:18:74:ce:b3:4b:1f:6e:d9:b2:9d:6c:b4: c2:c9:14:8c:23:a2:57:41:65:82:b8:f5:67:42:4c: 7b:f1:be:94:ac:0a:a9:88:20:78:2e:f9:74:c8:08: ea:ce:c6:06:f1:9e:ad:60:9a:45:3b:78:aa:3c:03: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:96:C6:F6:77:22:C4:37:51:FB:A9:ED:82:DD:DF:AD:02:07:DB X509v3 Authority Key Identifier: keyid:E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c3:8f:f0:53:bc:aa:96:e7:dd:60:e9:3c:35:39:1e:78:25: 9a:1f:da:50:14:da:68:91:7f:fb:6a:b4:69:c0:4b:0c:82:e5: 2a:fb:cc:bc:de:e9:22:c9:a0:68:f2:59:a3:0e:8a:3e:12:b7: 42:b8:4f:e4:3f:a0:b3:19:a8:07:02:8e:0d:f2:34:06:ec:45: f9:ab:9b:51:39:d2:30:17:2e:f5:af:e7:2b:79:af:6a:f7:f9: a1:0a:97:dc:ac:4a:9e:47:9f:3a:24:62:b8:2a:f1:a2:61:40: d7:41:fe:48:dd:2a:37:84:4a:e8:c6:9e:fa:c8:0e:7d:a6:71: e2:2b:54:d7:76:25:e7:a8:bd:34:b7:d9:d9:a1:9f:44:70:12: 12:f5:1d:17:20:ed:b3:22:cb:83:56:d6:ee:6b:29:b8:83:77: 8f:5f:8d:38:a1:c2:2a:c2:96:63:d3:05:0f:0a:e9:89:38:8e: 9c:6d:85:49:61:1d:5a:85:4b:d0:8c:47:c5:8b:3e:22:24:c0: 11:04:0f:3d:01:94:2a:82:e9:70:df:00:94:88:f2:2f:64:9c: 39:36:e2:ba:04:50:ef:4b:dc:a0:20:2e:74:9c:02:0b:13:09: 95:44:61:fc:b6:34:c2:14:5e:48:cd:be:98:e5:f6:12:73:a3: f9:25:f1:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoPp1O5V5pbWX7+JzRu1ydzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OTgwNDBhZWQ5NjJmMzA2ODgxZWVhNjU1MzA0MGZiOWE2 ZDM0YzkwHhcNMjUxMDIzMDYwMDE1WhcNMjUxMDI0MDYwMDE1WjAzMTEwLwYDVQQD EygxYzFhOTZjNmY2NzcyMmM0Mzc1MWZiYTllZDgyZGRkZmFkMDIwN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB5/R+1p7GMihIh9kOlDXwtfNkBw 59ltaAZXMQb9ZjjSHCL/Sh+W9VBM7yhXwWmEXepfIbOIUBWawreKhaADJ30Oof1X x0usTEALA3qdnyCrUOMfZZA0SWsn4ZhmijPki8MzZtAG9bM9yXymKqYRZpn6WNEx jlxaUBsla0g63kAwRl/XfhlZJ0ElD2aJYSapmokF/gW64cqlsZaQoodC8I1Xugi5 2mmid1UN9ld6cY6mRrG/b7MIcRshaDvdR7hm+V3Stf4YdM6zSx9u2bKdbLTCyRSM I6JXQWWCuPVnQkx78b6UrAqpiCB4Lvl0yAjqzsYG8Z6tYJpFO3iqPAOpKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwalsb2dyLEN1H7qe2C3d+tAgfbMB8GA1UdIwQY MBaAFOaYBArtli8waIHuplUwQPuabTTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXBnRUN1MldMekJvZ2U2bVZUQkEtNXB0Tk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MmViZDktN2Q1Yi00NTJhLThmNGYt ZTIzNDk3MzkzYjhmLzEvNXBnRUN1MldMekJvZ2U2bVZUQkEtNXB0Tk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS81MmViZDktN2Q1Yi00NTJhLThmNGYtZTIzNDk3MzkzYjhm LzEvNXBnRUN1MldMekJvZ2U2bVZUQkEtNXB0Tk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicOP8FO8 qpbn3WDpPDU5Hnglmh/aUBTaaJF/+2q0acBLDILlKvvMvN7pIsmgaPJZow6KPhK3 QrhP5D+gsxmoBwKODfI0BuxF+aubUTnSMBcu9a/nK3mvavf5oQqX3KxKnkefOiRi uCrxomFA10H+SN0qN4RK6Mae+sgOfaZx4itU13Yl56i9NLfZ2aGfRHASEvUdFyDt syLLg1bW7mspuIN3j1+NOKHCKsKWY9MFDwrpiTiOnG2FSWEdWoVL0IxHxYs+IiTA EQQPPQGUKoLpcN8AlIjyL2ScOTbiugRQ70vcoCAudJwCCxMJlURh/LY0whReSM2+ mOX2EnOj+SXxaw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:33 2025 by rpki-client