This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft File: mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json) Hash identifier: 6fkSuotkX+bwcdryu92Z94xdE28xcgldJ8QPYQmASL8= Subject key identifier: 06:E4:3B:93:E0:B9:BF:2A:06:27:84:3D:01:AE:DB:E2:4B:9B:33:9A Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF Certificate issuer: /CN=98d2d8720a7835bdab53b45313381abb176d5dff Certificate serial: 019ABA75638057657D425CEDBFB0DAFF0A60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft Manifest number: 0669 Signing time: Tue 25 Nov 2025 10:00:46 +0000 Manifest this update: Tue 25 Nov 2025 10:00:46 +0000 Manifest next update: Wed 26 Nov 2025 10:00:46 +0000 Files and hashes: 1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: pwp2w2I532dIj5N3zevMLK65OX3DCfk71PfvnoW7uj4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:75:63:80:57:65:7d:42:5c:ed:bf:b0:da:ff:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff Validity Not Before: Nov 25 10:00:46 2025 GMT Not After : Nov 26 10:00:46 2025 GMT Subject: CN=06e43b93e0b9bf2a0627843d01aedbe24b9b339a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:45:1f:ff:d5:65:59:08:93:8b:ff:ec:74: b0:64:6c:53:60:08:b5:47:17:09:55:74:cc:95:ef: 9f:2a:f3:57:3f:b7:3c:06:25:4d:16:77:36:f1:7c: d1:a0:d9:59:4f:3b:7b:2b:a9:53:11:d8:42:5b:d0: 62:3b:49:b7:bb:e6:2e:f7:6f:9f:23:19:e8:53:7f: 65:68:20:31:da:a6:43:ce:5d:53:be:1a:28:21:63: 88:97:45:6b:09:8d:1e:ee:8f:70:a0:fe:ba:88:26: 96:82:d5:d1:d1:ec:ed:80:41:9e:88:2f:88:77:e0: 6f:bb:69:8e:86:65:04:b0:f0:2a:dc:f7:09:ee:eb: 3a:28:f8:43:7d:53:55:fc:bc:1c:8a:62:18:b7:1e: 78:aa:c4:b5:7e:6d:47:21:d5:c4:e3:bd:40:8d:55: 34:37:0e:15:d8:a5:53:82:99:58:c2:7d:23:59:6e: d2:1f:ce:11:ac:42:71:5e:52:15:83:90:97:a7:e3: 3e:49:97:6c:ca:a9:55:58:2a:3f:61:16:8d:90:e2: da:89:7c:d8:a2:c6:30:29:a4:e5:9a:f2:51:06:60: 52:8f:17:b8:54:1b:3e:d2:98:72:fc:ec:bd:eb:55: 41:c4:89:e5:43:95:b5:d6:cd:62:b8:a3:9d:ef:c4: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E4:3B:93:E0:B9:BF:2A:06:27:84:3D:01:AE:DB:E2:4B:9B:33:9A X509v3 Authority Key Identifier: keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d4:28:8e:dc:a5:88:9f:64:c8:48:80:dc:b1:a9:17:ae:d5: be:6b:e4:ca:6d:d6:11:93:2b:1e:2e:45:c6:cb:c0:f6:d6:97: 39:c9:28:17:de:06:11:4c:e8:6b:49:45:2f:6b:58:ce:10:1c: 88:e3:9c:a5:8b:9e:6e:e7:22:50:9c:76:4d:57:e0:fb:59:ac: 70:c2:00:e6:f1:67:79:80:ed:67:b3:c9:f8:9b:c4:96:26:76: ca:75:49:fc:ce:6c:c7:be:e6:c1:41:f1:b9:b4:74:19:32:51: 77:04:1a:a7:ce:79:d5:a6:61:1f:3c:e5:c0:bf:ac:8b:d4:c9: f8:e1:19:c1:8f:78:7c:c1:6d:97:4e:17:2e:86:9e:50:88:13: 17:40:a8:2c:17:7d:2d:34:9a:c8:5f:e4:4b:c9:3b:89:da:e1: 43:33:bc:f2:ab:9b:8a:08:9d:d4:94:ac:95:ec:1d:0e:e0:fe: 37:52:5d:38:29:c5:a9:1e:c8:d5:80:f7:1f:3d:6e:45:fc:c9: 83:0e:fd:78:95:d5:71:48:30:f5:42:4e:e1:14:3d:2e:ff:70: 8e:74:2d:4d:a1:1c:85:15:90:e5:d2:2a:35:13:9c:c1:cc:6f: dd:f9:37:05:0a:b7:10:78:25:af:66:ff:a4:50:16:34:0c:82: d1:61:85:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6dWOAV2V9Qlztv7Da/wpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZDJkODcyMGE3ODM1YmRhYjUzYjQ1MzEzMzgxYWJiMTc2 ZDVkZmYwHhcNMjUxMTI1MTAwMDQ2WhcNMjUxMTI2MTAwMDQ2WjAzMTEwLwYDVQQD EygwNmU0M2I5M2UwYjliZjJhMDYyNzg0M2QwMWFlZGJlMjRiOWIzMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo5FH//VZVkIk4v/7HSwZGxTYAi1 RxcJVXTMle+fKvNXP7c8BiVNFnc28XzRoNlZTzt7K6lTEdhCW9BiO0m3u+Yu92+f IxnoU39laCAx2qZDzl1TvhooIWOIl0VrCY0e7o9woP66iCaWgtXR0eztgEGeiC+I d+Bvu2mOhmUEsPAq3PcJ7us6KPhDfVNV/LwcimIYtx54qsS1fm1HIdXE471AjVU0 Nw4V2KVTgplYwn0jWW7SH84RrEJxXlIVg5CXp+M+SZdsyqlVWCo/YRaNkOLaiXzY osYwKaTlmvJRBmBSjxe4VBs+0phy/Oy961VBxInlQ5W11s1iuKOd78TnUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbkO5Pgub8qBieEPQGu2+JLmzOaMB8GA1UdIwQY MBaAFJjS2HIKeDW9q1O0UxM4GrsXbV3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU5MWWNncDROYjJyVTdSVEV6Z2F1eGR0WGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNDRmODAtYzY5MS00MTI5LWE5NjEt ZjMyMGJhNWE0NGRhLzEvbU5MWWNncDROYjJyVTdSVEV6Z2F1eGR0WGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lNDRmODAtYzY5MS00MTI5LWE5NjEtZjMyMGJhNWE0NGRh LzEvbU5MWWNncDROYjJyVTdSVEV6Z2F1eGR0WGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdQojtyl iJ9kyEiA3LGpF67Vvmvkym3WEZMrHi5FxsvA9taXOckoF94GEUzoa0lFL2tYzhAc iOOcpYuebuciUJx2TVfg+1mscMIA5vFneYDtZ7PJ+JvEliZ2ynVJ/M5sx77mwUHx ubR0GTJRdwQap8551aZhHzzlwL+si9TJ+OEZwY94fMFtl04XLoaeUIgTF0CoLBd9 LTSayF/kS8k7idrhQzO88qubigid1JSslewdDuD+N1JdOCnFqR7I1YD3Hz1uRfzJ gw79eJXVcUgw9UJO4RQ9Lv9wjnQtTaEchRWQ5dIqNROcwcxv3fk3BQq3EHglr2b/ pFAWNAyC0WGFKg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:49 2025 by rpki-client