This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json) Hash identifier: IqtqZ+rt9zqPtuCWGcjM10uIIvjH/Ae6ZEoGDw0Mg1M= Subject key identifier: 27:62:C4:4E:A1:B5:09:55:93:72:AF:BD:97:B5:23:B1:A1:F5:85:36 Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f Certificate serial: 019A812AD4DA72CA42C5606093EF3B9694CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft Manifest number: 1736 Signing time: Fri 14 Nov 2025 07:00:59 +0000 Manifest this update: Fri 14 Nov 2025 07:00:59 +0000 Manifest next update: Sat 15 Nov 2025 07:00:59 +0000 Files and hashes: 1: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: Q2eO8DOph0xwKikmrBNcu6wwUXsCngAIEwQn/GrhGd8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:2a:d4:da:72:ca:42:c5:60:60:93:ef:3b:96:94:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f Validity Not Before: Nov 14 07:00:59 2025 GMT Not After : Nov 15 07:00:59 2025 GMT Subject: CN=2762c44ea1b509559372afbd97b523b1a1f58536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:04:9d:8b:dd:26:dc:79:92:53:8e:4d:5e: 2c:64:ed:78:76:92:17:a3:d5:08:c5:1d:0e:dd:81: 61:73:53:fa:39:26:e7:65:4c:72:34:ac:17:2e:37: 94:08:d3:57:a0:7b:b8:c4:6e:89:2c:9a:82:74:14: 50:7e:48:f7:c0:db:2f:02:f8:d5:9a:da:71:b3:82: 4c:a8:a9:8b:ac:7b:de:7f:be:c2:d6:3c:4f:75:f9: 55:46:16:1d:eb:a3:5c:1f:9d:97:ed:4f:3e:1b:28: 18:b5:8f:29:ac:52:57:aa:ec:31:15:2a:b0:f4:a9: 54:d9:09:5f:ba:7d:89:bf:8b:b9:49:80:39:94:7b: bf:17:93:af:d1:63:21:16:11:70:8c:8b:f7:4d:b5: ba:1d:0f:15:be:ed:77:9a:bb:bc:55:b2:9c:ea:87: 92:4b:f4:89:6b:6c:3f:c5:62:b3:39:4c:a1:5a:d7: 13:57:23:95:7c:90:8a:a8:27:4c:db:ab:50:6d:1d: 08:00:d4:b2:2f:6d:76:c0:21:4b:ff:02:f6:a5:c1: 09:d8:1d:8c:f8:a3:33:68:ed:9f:e7:ba:22:fa:90: 41:c4:1a:53:56:05:c1:56:f8:93:3f:03:a8:9f:4a: 35:41:34:9d:ef:a5:26:a3:1d:3f:0a:d1:42:ad:ba: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:C4:4E:A1:B5:09:55:93:72:AF:BD:97:B5:23:B1:A1:F5:85:36 X509v3 Authority Key Identifier: keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ce:cd:ee:93:ec:25:26:73:01:91:07:7f:e2:2c:35:ac:fc: 30:d0:7d:ae:3a:c2:7b:bf:7c:59:57:90:d2:e8:79:17:c4:dc: 33:97:e7:5a:f1:f5:94:c8:55:1c:bd:71:e2:fd:ee:55:d0:26: 0a:a2:d2:25:1a:f3:91:09:14:63:a3:30:6d:45:1a:0b:18:29: 63:ff:60:a5:56:a0:04:a7:f0:99:60:96:85:e0:52:23:51:6d: 49:67:f9:51:20:5b:3c:ad:85:56:94:8c:fd:5f:8f:c0:d2:63: 91:82:04:81:37:f1:3e:ca:27:90:e9:4e:ab:be:94:d2:fa:45: 82:5c:55:45:54:d1:4d:db:81:10:61:6d:90:88:10:9d:47:dd: b4:76:01:33:4f:df:09:c9:5d:ee:63:df:71:11:a8:dc:fc:5f: 87:02:10:a8:eb:35:6c:0c:88:ef:d3:2a:43:d2:db:86:e2:26: e1:ab:da:1e:28:83:9a:3b:ea:a4:d6:32:31:99:50:b2:57:62: cc:7b:f4:9a:3f:f0:6b:6a:b1:4f:a9:26:37:4a:c0:e8:90:b0: 81:86:a6:ca:70:c9:b6:a2:d8:00:d5:37:a7:08:1d:14:a2:bc: 63:97:ec:1c:85:47:ed:ca:71:bc:03:e7:07:de:5c:d2:a1:81: 25:a8:1b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqBKtTacspCxWBgk+87lpTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YzQwYTc0N2UzYWMxYWNjNjExYTRjNDAzYjYwMDczOThl N2Q3OWYwHhcNMjUxMTE0MDcwMDU5WhcNMjUxMTE1MDcwMDU5WjAzMTEwLwYDVQQD EygyNzYyYzQ0ZWExYjUwOTU1OTM3MmFmYmQ5N2I1MjNiMWExZjU4NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzkEnYvdJtx5klOOTV4sZO14dpIX o9UIxR0O3YFhc1P6OSbnZUxyNKwXLjeUCNNXoHu4xG6JLJqCdBRQfkj3wNsvAvjV mtpxs4JMqKmLrHvef77C1jxPdflVRhYd66NcH52X7U8+GygYtY8prFJXquwxFSqw 9KlU2Qlfun2Jv4u5SYA5lHu/F5Ov0WMhFhFwjIv3TbW6HQ8Vvu13mru8VbKc6oeS S/SJa2w/xWKzOUyhWtcTVyOVfJCKqCdM26tQbR0IANSyL212wCFL/wL2pcEJ2B2M +KMzaO2f57oi+pBBxBpTVgXBVviTPwOon0o1QTSd76Umox0/CtFCrbppowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdixE6htQlVk3KvvZe1I7Gh9YU2MB8GA1UdIwQY MBaAFLfECnR+OsGsxhGkxAO2AHOY59efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDkt Nzc2MzVhMjJlYjk2LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDktNzc2MzVhMjJlYjk2 LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc7N7pPs JSZzAZEHf+IsNaz8MNB9rjrCe798WVeQ0uh5F8TcM5fnWvH1lMhVHL1x4v3uVdAm CqLSJRrzkQkUY6MwbUUaCxgpY/9gpVagBKfwmWCWheBSI1FtSWf5USBbPK2FVpSM /V+PwNJjkYIEgTfxPsonkOlOq76U0vpFglxVRVTRTduBEGFtkIgQnUfdtHYBM0/f Ccld7mPfcRGo3PxfhwIQqOs1bAyI79MqQ9LbhuIm4avaHiiDmjvqpNYyMZlQsldi zHv0mj/wa2qxT6kmN0rA6JCwgYamynDJtqLYANU3pwgdFKK8Y5fsHIVH7cpxvAPn B95c0qGBJagbXg== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:29 2025 by rpki-client