This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json) Hash identifier: Q2DqMFtARAC0xsxJUojC3ydrPoCir43YPir01+xr31M= Subject key identifier: 12:F7:57:F0:27:78:C0:A9:90:21:2E:4D:50:72:54:BD:96:20:85:6C Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1 Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1 Certificate serial: 019B05C6E8E4774C77BCCE60482BC3E60852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft Manifest number: 05BA Signing time: Wed 10 Dec 2025 01:01:20 +0000 Manifest this update: Wed 10 Dec 2025 01:01:20 +0000 Manifest next update: Thu 11 Dec 2025 01:01:20 +0000 Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: 15+iGVFseBJUlhRGYOSwp8zeAC93ZQajiiKuHIvx5NQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:e8:e4:77:4c:77:bc:ce:60:48:2b:c3:e6:08:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1 Validity Not Before: Dec 10 01:01:20 2025 GMT Not After : Dec 11 01:01:20 2025 GMT Subject: CN=12f757f02778c0a990212e4d507254bd9620856c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:0c:17:93:4f:34:d4:62:9f:aa:4e:ea:85: 0e:72:bb:51:f6:3d:0b:1c:fa:a4:45:4a:3d:eb:fb: f5:ac:4b:31:fd:3b:af:6e:41:93:ab:1c:4b:d2:64: 26:78:ab:9a:7b:34:3d:85:ae:be:f3:75:d4:2f:09: 7b:69:f5:11:a3:fe:80:f0:61:67:cd:74:08:fd:0e: ed:b8:a5:d7:8a:84:7a:b5:37:4e:15:ad:c2:19:69: bc:59:95:c5:82:90:4d:d1:aa:b0:68:eb:9f:98:65: cf:98:ed:4c:0c:6c:89:9d:df:07:62:ab:cd:02:fc: 7f:bd:61:53:8b:c4:37:ee:29:fb:7b:4b:22:e5:fc: 28:6f:e7:f5:ff:b7:37:4b:1b:4a:23:dd:b9:31:bc: 23:a1:b2:a0:34:6f:c0:01:99:de:18:d4:8b:92:5c: 9d:a3:f1:ba:2f:c5:bf:9f:a2:bc:ab:26:5e:13:9f: c9:0c:a0:ad:ab:53:d8:ae:04:e6:20:62:4e:50:f8: 82:b6:a5:9b:a6:2e:ce:eb:cd:ee:76:d8:2b:11:5d: a0:64:b1:ad:08:d1:a2:1f:02:0f:51:6a:c4:a9:9d: 34:b0:fd:60:f2:36:eb:30:77:86:d8:44:c9:25:9b: ee:82:9a:62:bb:f9:29:28:b1:42:1e:0e:c4:4f:52: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:57:F0:27:78:C0:A9:90:21:2E:4D:50:72:54:BD:96:20:85:6C X509v3 Authority Key Identifier: keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8c:f4:f7:9b:09:b9:f4:b7:f3:d5:84:6e:79:7b:4f:20:7e: 2a:c9:68:0a:24:cb:d7:f9:5e:6a:72:a4:be:84:31:08:fd:fc: f2:69:12:a8:8e:95:bb:5f:d3:19:63:30:93:14:36:ed:fd:19: 69:a9:3d:7a:e8:8c:bf:5b:4c:10:45:5f:3c:e4:cb:af:96:80: f2:d8:32:0e:ea:97:cd:e6:53:92:0b:6d:4c:b1:68:f9:15:ed: 77:5c:bf:66:fe:5d:4d:ae:cc:8b:4e:7b:23:05:4b:7f:cf:b7: 76:ac:e0:a0:3a:ca:29:70:49:98:29:d0:9a:21:f1:1d:33:c6: 1a:84:97:32:1f:70:00:c9:93:c0:49:a5:10:4d:a2:11:16:c2: 97:31:f4:5a:16:98:88:3e:37:1e:90:97:54:8d:8e:b5:1a:73: 27:cf:45:6f:ca:f9:2a:0f:dd:2f:0c:97:49:5e:3b:b4:75:06: ab:52:0a:41:98:50:e1:c5:a9:e6:11:90:fc:c1:58:08:34:70: 8d:fc:b0:e4:2f:e9:fb:8a:b2:f2:07:f0:84:c9:79:0f:e1:5f: 3e:ed:d9:a6:06:b8:24:d9:08:c0:bf:be:0e:64:f3:25:0e:1b: 05:0e:58:3b:a1:0b:41:f6:b4:a8:b0:42:25:e2:12:b2:a1:97: 92:eb:6a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxujkd0x3vM5gSCvD5ghSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OGU1MzliY2M1ZTkzNDYyNDM0NGQ4ODRmNjIyOTkzYjFl ZTlhYTEwHhcNMjUxMjEwMDEwMTIwWhcNMjUxMjExMDEwMTIwWjAzMTEwLwYDVQQD EygxMmY3NTdmMDI3NzhjMGE5OTAyMTJlNGQ1MDcyNTRiZDk2MjA4NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWQMF5NPNNRin6pO6oUOcrtR9j0L HPqkRUo96/v1rEsx/TuvbkGTqxxL0mQmeKuaezQ9ha6+83XULwl7afURo/6A8GFn zXQI/Q7tuKXXioR6tTdOFa3CGWm8WZXFgpBN0aqwaOufmGXPmO1MDGyJnd8HYqvN Avx/vWFTi8Q37in7e0si5fwob+f1/7c3SxtKI925MbwjobKgNG/AAZneGNSLklyd o/G6L8W/n6K8qyZeE5/JDKCtq1PYrgTmIGJOUPiCtqWbpi7O683udtgrEV2gZLGt CNGiHwIPUWrEqZ00sP1g8jbrMHeG2ETJJZvugppiu/kpKLFCHg7ET1L/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL3V/AneMCpkCEuTVByVL2WIIVsMB8GA1UdIwQY MBaAFDmOU5vMXpNGJDRNiE9iKZOx7pqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMt OWQ4NjUyOGRhMDk5LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMtOWQ4NjUyOGRhMDk5 LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIz095sJ ufS389WEbnl7TyB+KsloCiTL1/leanKkvoQxCP388mkSqI6Vu1/TGWMwkxQ27f0Z aak9euiMv1tMEEVfPOTLr5aA8tgyDuqXzeZTkgttTLFo+RXtd1y/Zv5dTa7Mi057 IwVLf8+3dqzgoDrKKXBJmCnQmiHxHTPGGoSXMh9wAMmTwEmlEE2iERbClzH0WhaY iD43HpCXVI2OtRpzJ89Fb8r5Kg/dLwyXSV47tHUGq1IKQZhQ4cWp5hGQ/MFYCDRw jfyw5C/p+4qy8gfwhMl5D+FfPu3Zpga4JNkIwL++DmTzJQ4bBQ5YO6ELQfa0qLBC JeISsqGXkutqcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:52 2025 by rpki-client