This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft File: V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json) Hash identifier: tLdMT4b8UzsgcOyQM0rIem8iRyjPWxLZmqHieKP6sz0= Subject key identifier: 52:6E:B9:A8:8B:6F:DC:D3:B4:1E:4F:F8:93:59:84:51:4D:51:C0:18 Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93 Certificate issuer: /CN=57d011b577f90aa7e8e0cc5229e1f29983824593 Certificate serial: 019B21ABA0CC91AEF4FBB40A42F2469D66C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 11:00:54 +0000 Manifest this update: Mon 15 Dec 2025 11:00:54 +0000 Manifest next update: Tue 16 Dec 2025 11:00:54 +0000 Files and hashes: 1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: tIeRoWDTTMcoMZQkEg/2oMhLx56lNcEsmSDPOgWAJVg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:a0:cc:91:ae:f4:fb:b4:0a:42:f2:46:9d:66:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593 Validity Not Before: Dec 15 11:00:54 2025 GMT Not After : Dec 16 11:00:54 2025 GMT Subject: CN=526eb9a88b6fdcd3b41e4ff8935984514d51c018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:50:7d:ee:30:37:44:23:5e:9e:02:1f:25: 11:1a:52:ab:2a:d4:0c:5b:d2:ae:68:fa:84:c2:79: 4f:ca:c0:19:15:95:b5:61:e6:8f:04:9a:87:76:35: fc:35:9b:a0:0a:65:44:51:57:58:88:71:a7:c3:ea: f1:66:ab:f9:e8:6c:c5:f5:f4:ca:2d:ea:db:28:2d: 17:7e:ba:d1:92:71:98:86:f3:49:e1:15:0b:20:de: 3c:64:c7:aa:82:8c:af:90:e1:05:80:ee:f9:97:d5: 36:03:43:96:65:17:bc:c9:6e:92:a1:d6:c1:12:dc: f9:66:a3:37:e0:2f:07:53:cd:1f:3f:2e:10:3f:2d: 0f:16:bb:d7:38:fc:b1:03:a3:a4:96:12:20:8b:55: e3:02:a7:1d:6b:4b:1e:e1:60:8f:8f:37:17:84:15: 98:2b:9b:b9:ea:55:83:d2:85:bc:02:b9:cb:2b:3f: 8e:5b:32:82:df:61:60:6e:a8:ba:e6:51:59:eb:0f: 36:45:0b:2d:59:db:e9:0b:70:67:fe:8c:9d:63:78: cd:26:82:a5:a5:5b:1f:8e:25:12:54:54:58:88:22: e5:32:35:78:f5:c4:86:3c:eb:1f:5f:4f:5e:09:04: bc:78:ba:75:53:5a:ad:cf:e2:07:29:9d:3e:a1:de: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6E:B9:A8:8B:6F:DC:D3:B4:1E:4F:F8:93:59:84:51:4D:51:C0:18 X509v3 Authority Key Identifier: keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ac:cb:de:17:4b:7e:ac:24:ba:6d:56:9b:61:a9:fd:da:b3: 12:91:1d:32:45:c3:e8:25:fc:d7:3c:14:ac:ea:fd:b5:52:39: 12:7c:63:9c:a0:c0:12:0b:38:36:10:fd:f1:16:4a:1b:fb:cb: 8b:e9:c2:9c:98:c2:9c:e8:bd:2d:5d:08:29:23:ed:b8:be:1e: 65:68:9c:0e:1b:15:e2:6c:d6:34:23:45:33:67:a2:b4:e1:f1: e6:cc:94:1c:2c:78:45:f2:b1:54:7f:88:91:45:ab:22:b1:11: ad:23:c6:78:19:89:5f:46:a7:cc:b9:8e:de:1f:0d:ec:eb:b2: d1:0b:da:e7:de:a8:ba:b0:ab:21:e1:b9:50:3c:46:fb:3d:6f: 82:5b:ff:76:3e:87:18:17:24:6c:c6:64:99:57:1e:a1:76:16: ba:65:27:b9:fc:ca:23:2c:e6:9d:6f:52:38:02:66:5b:03:87: fe:06:a3:17:bc:aa:e4:5f:78:b5:42:6b:4a:f2:c1:be:47:f2: b3:7a:84:4b:a5:43:40:80:7e:72:43:5f:a5:6c:b7:1e:a5:a7: 8b:aa:bb:44:72:42:15:41:5a:f0:ef:08:97:2d:52:b7:a5:d9: 7a:a8:b2:de:31:d3:ba:1b:33:6d:a9:3d:6e:8d:58:0f:fa:76: fe:45:74:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq6DMka70+7QKQvJGnWbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDAxMWI1NzdmOTBhYTdlOGUwY2M1MjI5ZTFmMjk5ODM4 MjQ1OTMwHhcNMjUxMjE1MTEwMDU0WhcNMjUxMjE2MTEwMDU0WjAzMTEwLwYDVQQD Eyg1MjZlYjlhODhiNmZkY2QzYjQxZTRmZjg5MzU5ODQ1MTRkNTFjMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQpQfe4wN0QjXp4CHyURGlKrKtQM W9KuaPqEwnlPysAZFZW1YeaPBJqHdjX8NZugCmVEUVdYiHGnw+rxZqv56GzF9fTK LerbKC0XfrrRknGYhvNJ4RULIN48ZMeqgoyvkOEFgO75l9U2A0OWZRe8yW6SodbB Etz5ZqM34C8HU80fPy4QPy0PFrvXOPyxA6OklhIgi1XjAqcda0se4WCPjzcXhBWY K5u56lWD0oW8ArnLKz+OWzKC32Fgbqi65lFZ6w82RQstWdvpC3Bn/oydY3jNJoKl pVsfjiUSVFRYiCLlMjV49cSGPOsfX09eCQS8eLp1U1qtz+IHKZ0+od7DgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJuuaiLb9zTtB5P+JNZhFFNUcAYMB8GA1UdIwQY MBaAFFfQEbV3+Qqn6ODMUinh8pmDgkWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lN2U4ZmUtZWRlNi00OWU1LWEyZGMt MGQxZGEzNzEzZmU5LzEvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lN2U4ZmUtZWRlNi00OWU1LWEyZGMtMGQxZGEzNzEzZmU5 LzEvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqazL3hdL fqwkum1Wm2Gp/dqzEpEdMkXD6CX81zwUrOr9tVI5EnxjnKDAEgs4NhD98RZKG/vL i+nCnJjCnOi9LV0IKSPtuL4eZWicDhsV4mzWNCNFM2eitOHx5syUHCx4RfKxVH+I kUWrIrERrSPGeBmJX0anzLmO3h8N7Ouy0Qva596ourCrIeG5UDxG+z1vglv/dj6H GBckbMZkmVceoXYWumUnufzKIyzmnW9SOAJmWwOH/gajF7yq5F94tUJrSvLBvkfy s3qES6VDQIB+ckNfpWy3HqWni6q7RHJCFUFa8O8Ily1St6XZeqiy3jHTuhszbak9 bo1YD/p2/kV0Rg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:45:05 2025 by rpki-client