This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json) Hash identifier: hjVCfRHpGbmPszOm9wxrAst/+JBgsMekbedchF5yFHU= Subject key identifier: 73:9A:7A:75:B9:86:DB:3E:D3:77:BB:6E:98:C7:6A:C4:B8:E3:3E:2B Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32 Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232 Certificate serial: 019AD849B422D295A798EFC4E97920F7B87F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft Manifest number: 1493 Signing time: Mon 01 Dec 2025 05:01:40 +0000 Manifest this update: Mon 01 Dec 2025 05:01:40 +0000 Manifest next update: Tue 02 Dec 2025 05:01:40 +0000 Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=) 2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=) 3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: tcDzTnX7NbhY7G9pD2ABCa9qYfTRdhc/9O2h6gEvM+o=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:49:b4:22:d2:95:a7:98:ef:c4:e9:79:20:f7:b8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232 Validity Not Before: Dec 1 05:01:40 2025 GMT Not After : Dec 2 05:01:40 2025 GMT Subject: CN=739a7a75b986db3ed377bb6e98c76ac4b8e33e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:f4:cf:6c:ea:6b:a1:02:0c:bd:3a:9f:44: 75:66:07:85:1b:91:3e:31:e4:3d:cf:28:0d:4f:cf: 27:da:3c:ab:68:11:a0:a7:85:69:74:9d:14:ef:1f: ad:82:f2:42:f7:4e:44:6e:ba:8b:ee:ce:7d:75:28: ad:63:31:67:8b:51:a3:3d:47:5a:b8:c1:7e:d2:e2: c5:5e:ff:42:31:a0:0d:b2:b3:f9:a0:d4:58:ef:8f: e0:d4:82:55:ef:0c:0e:ad:4e:cf:81:8f:2b:24:fd: 76:99:86:52:99:66:51:c7:9c:28:90:6d:7b:6a:1e: 17:92:c7:5f:e6:b6:80:e7:f3:ee:ef:9b:4a:32:8f: 4f:a1:d2:40:2a:d5:f8:fc:fd:ed:55:dc:89:66:9f: bb:eb:2d:83:0f:40:d4:07:12:1e:00:9f:5f:9b:04: 82:1d:6d:d4:d7:94:7a:c9:83:c1:8e:f2:c0:1c:ab: df:67:11:31:34:f2:60:51:3d:65:e6:b2:87:2c:df: e4:34:d1:c9:74:22:38:f7:b1:fb:51:ff:92:a4:45: 40:df:f1:c0:f7:be:e5:88:b7:37:48:bd:6d:a2:25: 0e:57:22:c8:99:37:6d:77:c3:e6:cb:a0:af:69:cd: 09:67:f0:26:f8:3d:e2:9e:ac:90:e6:90:85:d0:74: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9A:7A:75:B9:86:DB:3E:D3:77:BB:6E:98:C7:6A:C4:B8:E3:3E:2B X509v3 Authority Key Identifier: keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:45:ef:f2:44:3f:eb:ab:48:08:55:42:d5:f3:38:0c:8d:92: 25:6f:01:f1:95:51:dd:95:19:dd:6d:ff:32:75:b1:96:4a:85: e3:97:d4:fa:91:14:f3:09:14:b1:e7:a4:ff:76:9c:c4:5e:b6: 5b:47:1c:41:1b:85:7e:9a:3f:78:74:c0:c4:80:a3:dc:2a:5b: e8:27:3c:bb:b2:77:8f:8f:25:ae:67:94:c9:ae:86:01:1c:f4: 71:9e:af:39:74:80:2e:07:17:4a:10:64:fe:29:06:9a:22:87: 44:05:bf:c9:92:21:e6:35:24:39:46:ab:91:31:cb:0e:15:c3: f0:e7:17:1d:c3:90:c5:0f:d7:49:4c:14:39:32:df:b5:42:96: 63:d8:fd:a1:e8:0b:9c:a7:29:fe:fa:53:04:72:c3:61:8e:cd: 00:33:ce:44:96:b7:d1:2b:20:6b:df:47:68:ba:a5:cd:4f:8c: bc:84:69:44:ca:5a:ff:12:42:80:fe:1d:2c:d3:da:19:c2:d8: e7:71:01:0c:a0:89:91:5c:64:05:60:44:18:bd:c4:64:98:4f: 18:c4:36:8e:e8:70:a3:96:6c:d6:ad:52:ca:ca:cc:1e:19:2c: ca:5d:c4:86:dd:84:55:12:3f:33:7d:50:5d:66:0b:59:1e:a9: 04:2f:d7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrYSbQi0pWnmO/E6Xkg97h/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDQ2MTlhYjBmMTIwOWI3MGYxMDU5OGM2OTk0NGJmMzRk YmYyMzIwHhcNMjUxMjAxMDUwMTQwWhcNMjUxMjAyMDUwMTQwWjAzMTEwLwYDVQQD Eyg3MzlhN2E3NWI5ODZkYjNlZDM3N2JiNmU5OGM3NmFjNGI4ZTMzZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rr0z2zqa6ECDL06n0R1ZgeFG5E+ MeQ9zygNT88n2jyraBGgp4VpdJ0U7x+tgvJC905EbrqL7s59dSitYzFni1GjPUda uMF+0uLFXv9CMaANsrP5oNRY74/g1IJV7wwOrU7PgY8rJP12mYZSmWZRx5wokG17 ah4Xksdf5raA5/Pu75tKMo9PodJAKtX4/P3tVdyJZp+76y2DD0DUBxIeAJ9fmwSC HW3U15R6yYPBjvLAHKvfZxExNPJgUT1l5rKHLN/kNNHJdCI497H7Uf+SpEVA3/HA 977liLc3SL1toiUOVyLImTdtd8Pmy6Cvac0JZ/Am+D3inqyQ5pCF0HS+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOaenW5hts+03e7bpjHasS44z4rMB8GA1UdIwQY MBaAFH4EYZqw8SCbcPEFmMaZRL802/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdSaG1yRHhJSnR3OFFXWXhwbEV2elRiOGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80NTNlZmMtZjE5My00MjdiLWE0OTgt MTc5MDNhMzAyZWMwLzEvZmdSaG1yRHhJSnR3OFFXWXhwbEV2elRiOGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80NTNlZmMtZjE5My00MjdiLWE0OTgtMTc5MDNhMzAyZWMw LzEvZmdSaG1yRHhJSnR3OFFXWXhwbEV2elRiOGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0Xv8kQ/ 66tICFVC1fM4DI2SJW8B8ZVR3ZUZ3W3/MnWxlkqF45fU+pEU8wkUseek/3acxF62 W0ccQRuFfpo/eHTAxICj3Cpb6Cc8u7J3j48lrmeUya6GARz0cZ6vOXSALgcXShBk /ikGmiKHRAW/yZIh5jUkOUarkTHLDhXD8OcXHcOQxQ/XSUwUOTLftUKWY9j9oegL nKcp/vpTBHLDYY7NADPORJa30Ssga99HaLqlzU+MvIRpRMpa/xJCgP4dLNPaGcLY 53EBDKCJkVxkBWBEGL3EZJhPGMQ2juhwo5Zs1q1SysrMHhksyl3Eht2EVRI/M31Q XWYLWR6pBC/XJA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:04:02 2025 by rpki-client