This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft File: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json) Hash identifier: mZskeq3eZlqDMYFgeotIAy9lztvgOATTsnmNsdhZGZQ= Subject key identifier: 80:14:E4:47:3A:3C:66:51:B0:A6:14:13:F1:BC:98:04:88:8C:2C:56 Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3 Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3 Certificate serial: 0199A31450A51360783579DC495FAC52D79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft Manifest number: 09C7 Signing time: Thu 02 Oct 2025 04:00:41 +0000 Manifest this update: Thu 02 Oct 2025 04:00:41 +0000 Manifest next update: Fri 03 Oct 2025 04:00:41 +0000 Files and hashes: 1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: ACv9bVS82dqKQBysReIKc1krLZZ9xNHNAJ4OZAHYQYA=) 2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:a3:14:50:a5:13:60:78:35:79:dc:49:5f:ac:52:d7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3 Validity Not Before: Oct 2 04:00:41 2025 GMT Not After : Oct 3 04:00:41 2025 GMT Subject: CN=8014e4473a3c6651b0a61413f1bc9804888c2c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:00:73:de:11:fc:03:04:d3:ed:7f:c6:00: ba:31:54:70:85:1c:af:ed:bd:21:f8:17:87:93:87: 0f:d7:3c:97:89:d1:d1:b6:7f:c8:32:af:f0:e4:3e: 9b:88:96:c6:c0:04:29:a2:7d:96:6a:f1:da:e5:dc: 0b:5f:f5:fc:7a:83:b9:4b:f7:f6:9c:1d:7b:ac:c9: 60:56:31:5c:a4:58:a6:f6:9c:3c:fe:38:e2:11:8d: a7:ea:13:23:2b:d4:b4:56:c4:fe:7e:8e:a1:2e:09: d5:c7:7a:4b:82:c1:75:d6:0c:68:c5:24:06:8e:4e: 10:6b:9c:b9:7a:7f:c3:03:67:03:29:6c:8b:2b:b0: 46:48:2c:d9:f7:dc:d6:65:37:2d:da:38:57:39:ad: 46:43:65:d9:2c:87:60:de:ef:c5:f9:e5:7a:8c:57: 9e:e5:43:8f:4e:10:c7:67:68:84:0a:b1:53:59:5f: d3:ba:f7:19:e6:d8:aa:99:70:ae:bb:0b:af:4f:51: 73:fb:3f:33:80:06:6b:85:d1:f4:f6:0f:a6:cf:8f: c4:15:48:57:10:f8:e9:f1:d2:8b:39:de:16:ab:62: 77:fd:3e:8e:fc:6a:3f:d3:22:1d:30:8b:34:f3:7c: f8:90:8d:07:47:71:43:34:b1:17:d1:40:ca:dd:66: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:E4:47:3A:3C:66:51:B0:A6:14:13:F1:BC:98:04:88:8C:2C:56 X509v3 Authority Key Identifier: keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:32:5d:2b:b5:36:f1:01:a0:20:7b:c8:c1:86:13:21:98:42: de:f2:a4:09:25:1d:05:23:17:9b:a8:08:9f:d8:5b:15:f1:08: 28:d8:6b:7b:6f:49:c5:37:54:a9:1e:87:be:b7:e5:d1:92:8f: 38:11:6e:4c:19:b1:ec:f3:2f:ad:aa:cc:7d:da:1c:77:29:a5: f8:17:1b:a0:4a:4c:bc:92:e8:5a:03:77:bb:ee:db:ea:ff:12: 3a:31:c8:b0:43:67:fe:e6:e2:30:ad:35:70:11:0d:46:df:08: 5f:bb:b4:5e:e4:33:09:05:35:5f:38:ce:41:28:1c:31:88:51: ec:4c:71:bf:d8:32:59:0f:87:21:0c:e5:73:e4:05:2b:23:41: f3:0e:39:83:71:87:4a:cb:2f:b3:e8:e8:b8:b4:38:7e:a5:98: ca:1b:c2:41:65:ff:7f:0c:b7:cb:e7:0b:f4:b9:7b:81:8d:ff: 0b:3f:72:cc:6c:f3:79:5e:e8:e8:01:c2:ec:6d:e1:d5:a4:61: 1e:03:3b:a2:77:7e:7a:ca:74:ba:f1:83:12:8d:e7:11:a0:51: 63:42:df:b5:73:7c:a0:05:37:5c:1d:97:16:44:e0:6d:0b:6b: 81:4b:ea:4c:d7:5d:5e:fc:4d:8c:7f:7d:ea:09:cd:6c:06:9f: 1f:70:be:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZmjFFClE2B4NXncSV+sUtefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDMyYTNlMThiODRlZTNjNTRlMzRmYTY3ZGM2OGVmMTlk MmI3YjMwHhcNMjUxMDAyMDQwMDQxWhcNMjUxMDAzMDQwMDQxWjAzMTEwLwYDVQQD Eyg4MDE0ZTQ0NzNhM2M2NjUxYjBhNjE0MTNmMWJjOTgwNDg4OGMyYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVQAc94R/AME0+1/xgC6MVRwhRyv 7b0h+BeHk4cP1zyXidHRtn/IMq/w5D6biJbGwAQpon2WavHa5dwLX/X8eoO5S/f2 nB17rMlgVjFcpFim9pw8/jjiEY2n6hMjK9S0VsT+fo6hLgnVx3pLgsF11gxoxSQG jk4Qa5y5en/DA2cDKWyLK7BGSCzZ99zWZTct2jhXOa1GQ2XZLIdg3u/F+eV6jFee 5UOPThDHZ2iECrFTWV/TuvcZ5tiqmXCuuwuvT1Fz+z8zgAZrhdH09g+mz4/EFUhX EPjp8dKLOd4Wq2J3/T6O/Go/0yIdMIs083z4kI0HR3FDNLEX0UDK3WbMKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAU5Ec6PGZRsKYUE/G8mASIjCxWMB8GA1UdIwQY MBaAFOTTKj4YuE7jxU40+mfcaO8Z0rezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQt ODdjMmU4ZjM5MTRlLzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQtODdjMmU4ZjM5MTRl LzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDJdK7U2 8QGgIHvIwYYTIZhC3vKkCSUdBSMXm6gIn9hbFfEIKNhre29JxTdUqR6Hvrfl0ZKP OBFuTBmx7PMvrarMfdocdyml+BcboEpMvJLoWgN3u+7b6v8SOjHIsENn/ubiMK01 cBENRt8IX7u0XuQzCQU1XzjOQSgcMYhR7Exxv9gyWQ+HIQzlc+QFKyNB8w45g3GH Sssvs+jouLQ4fqWYyhvCQWX/fwy3y+cL9Ll7gY3/Cz9yzGzzeV7o6AHC7G3h1aRh HgM7ond+esp0uvGDEo3nEaBRY0LftXN8oAU3XB2XFkTgbQtrgUvqTNddXvxNjH99 6gnNbAafH3C+dw== -----END CERTIFICATE-----Generated at Sun Dec 14 08:39:53 2025 by rpki-client