This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json) Hash identifier: tuLNLb/pGLoPARIOcRdVgeGGazhAXAHDdFZiZ+bfJuQ= Subject key identifier: 3C:D4:65:0C:19:D5:7E:22:FC:C9:FF:91:DD:7C:76:EF:08:62:42:C1 Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb Certificate serial: 019AD88093A201F60EC97A357CF397C9CA66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft Manifest number: 1581 Signing time: Mon 01 Dec 2025 06:01:36 +0000 Manifest this update: Mon 01 Dec 2025 06:01:36 +0000 Manifest next update: Tue 02 Dec 2025 06:01:36 +0000 Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: QVh1vgp+UovFy6SrRb6/4hPrW0W8kjhUGGy4FAyDHc4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:80:93:a2:01:f6:0e:c9:7a:35:7c:f3:97:c9:ca:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb Validity Not Before: Dec 1 06:01:36 2025 GMT Not After : Dec 2 06:01:36 2025 GMT Subject: CN=3cd4650c19d57e22fcc9ff91dd7c76ef086242c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:dc:3d:c4:12:66:93:93:71:43:91:37:73: af:fc:0a:f3:06:cc:39:b8:eb:b6:15:ee:67:fe:63: ca:df:df:01:f9:75:da:99:9f:79:da:3d:27:ad:15: ed:62:80:25:62:77:ba:a2:f0:07:2a:c4:d4:06:25: 4f:4b:bb:bb:ca:4d:c9:8e:94:eb:2a:81:db:1e:b4: bc:b7:7c:74:e4:67:c4:bc:1e:86:da:6d:f4:96:0a: ab:4f:06:63:87:d9:72:4d:75:8f:d3:80:c5:36:e3: 5e:d1:60:e5:be:5a:2c:70:49:0c:6b:97:81:4a:fb: c5:d1:02:17:cd:0e:c8:b3:6f:e7:26:6a:6d:89:e7: c9:0a:12:92:35:15:4e:7b:8e:55:f4:89:99:33:72: 96:ba:47:54:b6:dd:f3:e3:44:13:83:02:24:0d:52: b4:1c:5d:80:07:96:25:5b:29:16:33:c6:25:37:4d: ea:9e:55:04:15:52:2b:56:6f:dd:53:d3:e6:fe:d3: 63:ce:86:c0:de:cc:01:a4:c0:2f:b3:7d:8b:28:f7: bc:58:fc:a4:4f:01:b4:0c:f6:5e:ca:07:fe:96:b1: 7f:a3:14:5c:19:85:93:af:e4:47:da:1d:b7:fc:c3: da:56:28:a6:3a:ab:0f:3c:77:ea:70:b0:c9:31:8c: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:65:0C:19:D5:7E:22:FC:C9:FF:91:DD:7C:76:EF:08:62:42:C1 X509v3 Authority Key Identifier: keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:78:1d:b0:e5:de:64:c8:4e:90:ec:42:8e:8e:e9:ab:7a:17: 3b:f0:0e:ef:45:d7:85:e7:ae:8b:f2:9a:b9:6d:d9:3f:88:91: 2a:6c:34:c6:84:a6:00:79:a2:2a:15:0b:e7:73:8a:90:f4:70: d3:a8:d5:96:81:2b:bc:5c:e3:51:98:c2:a0:0d:ce:ac:ed:e9: 5e:45:e8:42:91:44:79:14:a0:2e:04:55:2b:0e:cc:41:f5:aa: 94:ec:31:2a:b2:99:ad:ca:77:22:c3:15:25:ab:3c:50:7a:4f: 77:0a:8e:e8:4a:80:1e:eb:cf:72:4f:b0:29:ea:03:67:89:59: c7:4c:3c:a7:95:f3:a3:b4:60:38:db:9a:4e:e0:f0:7b:7c:ee: 04:49:b4:e3:cd:7f:e9:91:c6:e6:df:79:1e:2b:f5:ba:ae:79: d8:d7:59:b1:4f:12:90:bd:a0:c6:3c:9c:f6:c4:ee:24:3e:a7: 73:ab:05:09:c2:44:ec:8a:7d:bb:b9:ab:96:67:61:f9:e9:5f: 80:db:40:0d:f0:33:44:3c:c8:6c:96:c5:39:a6:11:35:be:2f: 17:ca:ec:f1:65:7b:05:99:1f:34:b6:22:8f:b3:0d:6f:97:30: ed:d2:d6:4a:7c:e9:d9:5d:77:90:d6:d8:d7:7f:af:12:f0:ab: 90:86:b7:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrYgJOiAfYOyXo1fPOXycpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzQ1YjA0Y2JlNjM2MGI1ZWMxM2EzYWVjYjMyZmI4ODVk NDg2ZmIwHhcNMjUxMjAxMDYwMTM2WhcNMjUxMjAyMDYwMTM2WjAzMTEwLwYDVQQD EygzY2Q0NjUwYzE5ZDU3ZTIyZmNjOWZmOTFkZDdjNzZlZjA4NjI0MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRLcPcQSZpOTcUORN3Ov/ArzBsw5 uOu2Fe5n/mPK398B+XXamZ952j0nrRXtYoAlYne6ovAHKsTUBiVPS7u7yk3JjpTr KoHbHrS8t3x05GfEvB6G2m30lgqrTwZjh9lyTXWP04DFNuNe0WDlvloscEkMa5eB SvvF0QIXzQ7Is2/nJmptiefJChKSNRVOe45V9ImZM3KWukdUtt3z40QTgwIkDVK0 HF2AB5YlWykWM8YlN03qnlUEFVIrVm/dU9Pm/tNjzobA3swBpMAvs32LKPe8WPyk TwG0DPZeygf+lrF/oxRcGYWTr+RH2h23/MPaViimOqsPPHfqcLDJMYwZRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzUZQwZ1X4i/Mn/kd18du8IYkLBMB8GA1UdIwQY MBaAFGl0WwTL5jYLXsE6OuyzL7iF1Ib7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhSYkJNdm1OZ3Rld1RvNjdMTXZ1SVhVaHZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mOGFmMTEtODhlYS00NDYyLWIxOTgt MWIyY2VhMjJiODJlLzEvYVhSYkJNdm1OZ3Rld1RvNjdMTXZ1SVhVaHZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mOGFmMTEtODhlYS00NDYyLWIxOTgtMWIyY2VhMjJiODJl LzEvYVhSYkJNdm1OZ3Rld1RvNjdMTXZ1SVhVaHZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXgdsOXe ZMhOkOxCjo7pq3oXO/AO70XXheeui/KauW3ZP4iRKmw0xoSmAHmiKhUL53OKkPRw 06jVloErvFzjUZjCoA3OrO3pXkXoQpFEeRSgLgRVKw7MQfWqlOwxKrKZrcp3IsMV Jas8UHpPdwqO6EqAHuvPck+wKeoDZ4lZx0w8p5Xzo7RgONuaTuDwe3zuBEm0481/ 6ZHG5t95Hiv1uq552NdZsU8SkL2gxjyc9sTuJD6nc6sFCcJE7Ip9u7mrlmdh+elf gNtADfAzRDzIbJbFOaYRNb4vF8rs8WV7BZkfNLYij7MNb5cw7dLWSnzp2V13kNbY 13+vEvCrkIa3aQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:30 2025 by rpki-client