This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft File: 45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json) Hash identifier: F3nQ+8AUqrmh6c6lwjRyxtBiBTeED0QTnou6kZYC6ps= Subject key identifier: DB:BF:3B:73:BA:AE:32:A0:D8:F0:96:BA:22:ED:5A:FA:DF:A7:37:15 Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07 Certificate issuer: /CN=e395808a6f3d43614901c990c9ce632e15edfa07 Certificate serial: 01989CA7470365116C76411BFF640DF1CADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft Manifest number: 0484 Signing time: Tue 12 Aug 2025 05:01:04 +0000 Manifest this update: Tue 12 Aug 2025 05:01:04 +0000 Manifest next update: Wed 13 Aug 2025 05:01:04 +0000 Files and hashes: 1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: NernX0vtJQBNxUf3v98Eb/onmDfR6cKlEoclMAdcjRk=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:9c:a7:47:03:65:11:6c:76:41:1b:ff:64:0d:f1:ca:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07 Validity Not Before: Aug 12 05:01:04 2025 GMT Not After : Aug 13 05:01:04 2025 GMT Subject: CN=dbbf3b73baae32a0d8f096ba22ed5afadfa73715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:e9:1b:7b:52:b9:89:23:92:13:b8:6e:44: e4:0e:b8:80:4c:e0:c1:68:da:92:08:1e:0c:03:02: ea:ae:b3:1d:49:0b:03:6c:2f:e9:c3:5b:73:ce:0d: d8:0c:bc:95:d6:9d:e2:c7:24:92:60:24:ea:df:13: 60:0e:7a:d4:b0:30:b6:c3:84:8c:0b:61:df:7d:1f: f2:44:48:81:5a:ce:3b:54:af:04:26:2c:5e:b2:0e: cd:0d:ce:2b:51:93:32:6b:51:23:ad:4d:3e:8b:2e: af:cb:3a:c7:69:52:2f:00:c3:cc:75:b3:9e:68:2e: ee:e0:f1:5d:a7:a3:1b:83:97:4f:56:8a:99:bb:c1: bd:bb:04:63:da:50:a7:29:dd:cd:2d:17:d3:95:a8: 8d:6f:c9:83:58:f0:4a:77:4f:7d:4b:77:05:60:0e: bd:0c:37:66:58:20:73:33:a9:96:79:d0:c6:78:37: de:54:45:46:39:1e:ec:e5:0c:7e:3e:78:86:c0:90: 68:d7:fe:3e:1e:13:04:20:7b:71:f9:b2:28:ce:cc: 21:49:e6:bf:9f:13:90:c0:51:f7:01:e9:8e:f5:a8: 53:76:c8:1b:b9:33:63:d7:6c:fb:7c:ac:c3:92:33: af:07:e7:ad:78:4c:41:5b:22:c1:5b:8b:dd:4e:cf: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:3B:73:BA:AE:32:A0:D8:F0:96:BA:22:ED:5A:FA:DF:A7:37:15 X509v3 Authority Key Identifier: keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4e:26:92:f8:f0:28:f9:c8:d1:a9:b3:98:42:7e:b2:30:55: 99:6c:51:64:89:d3:d2:93:98:8e:8f:95:29:7c:58:43:ac:35: 1b:a5:d7:05:dc:33:4b:7c:70:4c:03:ae:0f:66:54:6e:86:34: c0:2c:c5:33:af:dc:68:bc:9c:ef:a8:59:46:a1:3b:cc:40:e2: a3:14:b4:93:ff:dd:1f:60:a4:bc:e8:ff:e1:95:e8:62:fb:85: 0c:ba:6b:59:60:5f:36:6f:ed:09:f1:12:e8:67:d7:93:12:47: 34:a6:a9:8d:d6:e0:8a:be:58:b9:2a:db:3f:24:25:42:62:ab: f8:00:28:a5:b1:a3:f3:16:80:f2:84:76:ab:16:49:c8:9c:11: d5:00:3d:27:63:4d:b8:0a:c8:12:05:3a:dd:e5:d0:b5:54:6b: f9:b0:e4:d0:22:9f:ab:91:01:67:94:56:f4:39:73:00:8a:aa: 84:82:34:58:01:36:5e:4f:e4:4d:4c:44:01:ee:d4:b3:e6:82: 1a:77:80:43:24:3c:cb:e3:10:21:3c:5e:fb:2a:95:de:47:93: 75:9a:26:a9:c0:26:bd:ed:eb:7b:ff:67:51:68:10:7a:5e:d2: 82:b2:61:4c:e0:77:44:63:00:9e:ec:72:cd:54:bb:5b:52:bd: 91:b0:2d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZicp0cDZRFsdkEb/2QN8craMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTU4MDhhNmYzZDQzNjE0OTAxYzk5MGM5Y2U2MzJlMTVl ZGZhMDcwHhcNMjUwODEyMDUwMTA0WhcNMjUwODEzMDUwMTA0WjAzMTEwLwYDVQQD EyhkYmJmM2I3M2JhYWUzMmEwZDhmMDk2YmEyMmVkNWFmYWRmYTczNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbfpG3tSuYkjkhO4bkTkDriATODB aNqSCB4MAwLqrrMdSQsDbC/pw1tzzg3YDLyV1p3ixySSYCTq3xNgDnrUsDC2w4SM C2HffR/yREiBWs47VK8EJixesg7NDc4rUZMya1EjrU0+iy6vyzrHaVIvAMPMdbOe aC7u4PFdp6Mbg5dPVoqZu8G9uwRj2lCnKd3NLRfTlaiNb8mDWPBKd099S3cFYA69 DDdmWCBzM6mWedDGeDfeVEVGOR7s5Qx+PniGwJBo1/4+HhMEIHtx+bIozswhSea/ nxOQwFH3AemO9ahTdsgbuTNj12z7fKzDkjOvB+eteExBWyLBW4vdTs/hTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu/O3O6rjKg2PCWuiLtWvrfpzcVMB8GA1UdIwQY MBaAFOOVgIpvPUNhSQHJkMnOYy4V7foHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZmFiYWUtYjgwZS00M2M2LWJkMWYt Zjc5NzNiMTgwOTBiLzEvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZmFiYWUtYjgwZS00M2M2LWJkMWYtZjc5NzNiMTgwOTBi LzEvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU4mkvjw KPnI0amzmEJ+sjBVmWxRZInT0pOYjo+VKXxYQ6w1G6XXBdwzS3xwTAOuD2ZUboY0 wCzFM6/caLyc76hZRqE7zEDioxS0k//dH2CkvOj/4ZXoYvuFDLprWWBfNm/tCfES 6GfXkxJHNKapjdbgir5YuSrbPyQlQmKr+AAopbGj8xaA8oR2qxZJyJwR1QA9J2NN uArIEgU63eXQtVRr+bDk0CKfq5EBZ5RW9DlzAIqqhII0WAE2Xk/kTUxEAe7Us+aC GneAQyQ8y+MQITxe+yqV3keTdZomqcAmve3re/9nUWgQel7SgrJhTOB3RGMAnuxy zVS7W1K9kbAtBw== -----END CERTIFICATE-----Generated at Wed Dec 24 04:02:57 2025 by rpki-client