This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft File: 3J7LD7cQIEluO8IkDdKeQgjB6ig.mft (raw, json) Hash identifier: MkeGjKJNQkonUU5g17RoEbj9RJ9+dkQmUhz0O4u9pFs= Subject key identifier: C6:32:87:CD:F2:3A:D0:69:AB:94:EC:D4:06:DE:02:86:5B:B9:81:D0 Authority key identifier: DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28 Certificate issuer: /CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28 Certificate serial: 0CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer Subject info access: rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft Manifest number: 0CA9 Signing time: Thu 06 Nov 2025 13:20:14 +0000 Manifest this update: Thu 06 Nov 2025 13:20:14 +0000 Manifest next update: Thu 06 Nov 2025 19:20:14 +0000 Files and hashes: 1: 3J7LD7cQIEluO8IkDdKeQgjB6ig.crl (hash: sgdsHnhyPoPIWHwklECqN9mwymN3w12QwLwyG/NCAgw=) 2: Uw8AystMXoSVYxl4YDX3LWDVRQU.roa (hash: kl4ALDSDxVMjmw6VvdXpJlvnocyw+1Zrhihnea/yv3E=) 3: j3OXhalFi3CwIfuIU57yW6G8a3M.roa (hash: uioABHKSmnQC91rLGSR3m3Dqwm1iJYGnLo8Cnh3zCLc=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28 Validity Not Before: Nov 6 13:20:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=C63287CDF23AD069AB94ECD406DE02865BB981D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:6c:10:e3:ed:cd:2e:2a:28:8c:66:e3:aa: b9:4e:45:2b:44:3c:87:c0:8f:3a:15:f9:16:82:5f: 18:ae:ad:a9:fb:35:02:41:0a:02:d7:35:10:ae:8d: 36:e7:a2:09:72:ba:af:e8:19:27:c0:1b:7d:62:84: 50:ea:c9:c2:8c:08:58:69:cd:fe:b1:44:ac:74:f7: 4a:d8:1f:1e:4d:e5:eb:68:36:ad:f4:b6:ac:44:14: 1f:2d:c0:ad:33:a2:c2:7d:72:da:92:44:f7:8d:e1: a3:27:48:e4:92:47:89:6f:51:07:6e:01:98:95:99: 4b:51:dd:78:db:e6:95:66:a7:e3:82:5d:b5:7f:c6: 68:ea:d2:35:24:cf:50:23:23:1d:66:0e:3c:bc:dd: 81:6d:05:6e:70:0f:9f:e2:f9:9d:bd:8d:12:24:dd: ae:20:1f:66:cc:41:16:0e:fa:2c:7b:98:69:0d:ef: ab:62:8b:cc:23:d1:26:12:20:d4:ec:48:d9:6f:06: ef:05:70:bd:16:5c:65:81:16:94:51:b4:24:b1:c4: 1b:a8:04:1d:ed:41:5a:5b:c9:12:da:32:c2:b3:a9: 99:3c:ae:b2:f7:7e:e4:2a:c2:4e:0b:5a:e6:61:51: ea:50:0b:95:3c:86:85:81:aa:b4:af:a4:3e:2a:ab: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:32:87:CD:F2:3A:D0:69:AB:94:EC:D4:06:DE:02:86:5B:B9:81:D0 X509v3 Authority Key Identifier: keyid:DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f8:c9:59:6e:01:1c:3c:3f:58:16:82:21:59:25:e2:2a:12: f6:c6:42:d2:d6:be:ea:a9:35:ca:75:78:b3:53:5e:be:ea:9e: c9:51:5d:c7:7e:64:07:f6:b2:e2:f6:91:d1:ed:95:7b:90:06: c1:6d:98:e8:5f:c0:95:d6:af:0a:13:22:4b:e1:93:4f:29:f7: 7e:bb:55:f2:f7:66:39:fc:fc:db:7f:3d:89:0f:a2:ad:f6:99: 01:73:b2:b1:6f:e0:05:22:6f:dc:17:1a:cd:5e:d2:d7:ac:d8: 39:da:ca:7c:fc:b2:94:d4:94:73:3e:4f:3e:db:27:82:4b:32: eb:4e:3b:33:4a:56:15:52:41:91:c8:cb:20:10:98:58:97:e8: 41:e2:fb:19:1a:b7:b0:a2:6d:c0:4b:86:17:08:f1:32:08:44: 19:b9:d6:a7:ee:61:c5:00:c8:c8:b6:84:7f:03:13:1e:4d:08: 79:db:10:70:fd:d1:b1:30:ec:66:11:df:ed:c7:dd:7e:3b:93: e2:83:8e:aa:0d:1c:4c:6c:8c:49:5f:d0:c8:b1:37:a6:0b:f9: 14:dc:af:20:1b:99:11:4e:cb:19:f6:be:30:1f:62:d4:d5:4b: 6c:90:17:b7:43:8d:03:ab:44:51:4d:66:6a:63:08:f2:15:55: 91:2f:76:8a -----BEGIN CERTIFICATE----- MIIEsTCCA5mgAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZGM5 ZWNiMGZiNzEwMjA0OTZlM2JjMjI0MGRkMjllNDIwOGMxZWEyODAeFw0yNTExMDYx MzIwMTRaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEM2MzI4N0NERjIzQUQw NjlBQjk0RUNENDA2REUwMjg2NUJCOTgxRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf7mwQ4+3NLioojGbjqrlORStEPIfAjzoV+RaCXxiuran7NQJB CgLXNRCujTbnoglyuq/oGSfAG31ihFDqycKMCFhpzf6xRKx090rYHx5N5etoNq30 tqxEFB8twK0zosJ9ctqSRPeN4aMnSOSSR4lvUQduAZiVmUtR3Xjb5pVmp+OCXbV/ xmjq0jUkz1AjIx1mDjy83YFtBW5wD5/i+Z29jRIk3a4gH2bMQRYO+ix7mGkN76ti i8wj0SYSINTsSNlvBu8FcL0WXGWBFpRRtCSxxBuoBB3tQVpbyRLaMsKzqZk8rrL3 fuQqwk4LWuZhUepQC5U8hoWBqrSvpD4qq9GhAgMBAAGjggHNMIIByTAdBgNVHQ4E FgQUxjKHzfI60GmrlOzUBt4Chlu5gdAwHwYDVR0jBBgwFoAU3J7LD7cQIEluO8Ik DdKeQgjB6igwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBgNVHR8EUTBPME2g S6BJhkdyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS91cGxpZnQvM0o3 TEQ3Y1FJRWx1TzhJa0RkS2VRZ2pCNmlnLmNybDBkBggrBgEFBQcBAQRYMFYwVAYI KwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFV TFQvM0o3TEQ3Y1FJRWx1TzhJa0RkS2VRZ2pCNmlnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwYwYIKwYBBQUHAQsEVzBVMFMGCCsGAQUFBzALhkdyc3luYzovL2NobG9lLnNv Ym9ybm9zdC5uZXQvcnBraS91cGxpZnQvM0o3TEQ3Y1FJRWx1TzhJa0RkS2VRZ2pC NmlnLm1mdDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAG/4yVluARw8P1gW giFZJeIqEvbGQtLWvuqpNcp1eLNTXr7qnslRXcd+ZAf2suL2kdHtlXuQBsFtmOhf wJXWrwoTIkvhk08p9367VfL3Zjn8/Nt/PYkPoq32mQFzsrFv4AUib9wXGs1e0tes 2Dnaynz8spTUlHM+Tz7bJ4JLMutOOzNKVhVSQZHIyyAQmFiX6EHi+xkat7CibcBL hhcI8TIIRBm51qfuYcUAyMi2hH8DEx5NCHnbEHD90bEw7GYR3+3H3X47k+KDjqoN HExsjElf0MixN6YL+RTcryAbmRFOyxn2vjAfYtTVS2yQF7dDjQOrRFFNZmpjCPIV VZEvdoo= -----END CERTIFICATE-----Generated at Fri Dec 19 15:56:04 2025 by rpki-client