This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json) Hash identifier: GwesVOT4ER0wN2vWqgTnkRBkLJj2+k59CorGYrb8Dms= Subject key identifier: 15:3F:DC:17:4F:68:B0:54:9E:B0:07:24:BE:61:AB:9E:FD:80:57:2E Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e Certificate serial: 019B05C6703966EFAAA5162C73A7BB5061EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft Manifest number: 0667 Signing time: Wed 10 Dec 2025 01:00:49 +0000 Manifest this update: Wed 10 Dec 2025 01:00:49 +0000 Manifest next update: Thu 11 Dec 2025 01:00:49 +0000 Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: 4ClbcZcvO5tD+28kmQ6WELOOp7YM05E0ENtv6E+NXAM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:70:39:66:ef:aa:a5:16:2c:73:a7:bb:50:61:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e Validity Not Before: Dec 10 01:00:49 2025 GMT Not After : Dec 11 01:00:49 2025 GMT Subject: CN=153fdc174f68b0549eb00724be61ab9efd80572e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:a4:7a:a0:0c:1f:b7:36:de:38:a0:fb:3c: 38:ed:93:35:ab:0c:11:5c:bf:bf:26:81:c6:f7:14: 5c:2b:79:6a:41:7e:1a:b0:8c:20:a2:e5:c4:f6:09: 0e:1e:91:2b:82:bf:33:a4:bc:14:91:6e:e2:8a:c8: 22:97:26:7e:14:73:3f:32:9c:80:d6:dd:b9:77:8f: 9d:e1:13:c7:00:2c:7e:64:db:be:63:a5:b2:e8:4a: cd:48:0b:db:28:d3:fa:32:4f:93:dc:a6:35:da:c1: ae:1b:de:84:6b:8a:1e:ae:11:1e:00:46:7e:a4:84: 14:6b:85:9e:c3:ea:cc:ed:d7:2e:b4:2c:9f:97:9a: ec:89:78:2f:0a:d4:00:c6:37:39:5e:6c:40:01:c8: 6f:c6:3b:1d:77:7f:86:42:31:a4:0e:17:a1:e1:7a: fe:58:c6:62:52:65:b8:88:2a:22:07:7f:4a:f2:a4: 4e:a9:30:cd:10:e5:84:0c:c6:92:7b:25:f2:41:29: 26:93:d0:35:95:d1:e8:33:66:cb:26:16:24:0e:33: 77:be:5e:0a:39:d7:30:fa:44:62:6a:eb:5f:f2:91: 27:fd:29:22:f8:66:c7:c4:48:4b:de:09:6d:ea:40: 8a:19:b0:46:72:a7:0b:43:1e:29:8f:8b:e5:56:08: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:DC:17:4F:68:B0:54:9E:B0:07:24:BE:61:AB:9E:FD:80:57:2E X509v3 Authority Key Identifier: keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:19:6d:c0:27:60:48:e4:7b:42:69:92:9d:ca:3f:3d:6e:63: c0:ce:e6:cd:40:c5:73:6e:1a:07:04:58:a5:a3:37:a6:41:ab: a1:ca:e0:13:a3:7d:2d:9d:02:47:53:76:21:65:37:3a:7c:b0: a4:22:09:f7:08:b8:fa:50:0f:54:24:20:33:f5:a2:a2:f1:48: eb:26:96:e1:fe:09:dc:f8:1c:ee:f4:0e:b9:e3:b5:a7:bb:b4: a5:3f:e0:73:7f:f9:3c:3e:d9:69:72:6d:99:82:05:b3:66:4c: 72:c0:db:51:b3:c9:d9:af:26:44:cd:70:34:0a:bf:8d:51:52: 77:5f:39:2e:2b:bc:a2:23:d4:e5:69:ae:5d:ef:31:11:4f:aa: 2b:9c:e5:d0:ce:24:5a:8f:2f:0d:e2:ae:9b:2c:f7:3e:b1:68: 06:a9:bc:b8:6b:85:88:7d:ed:5a:12:cb:6a:a4:99:de:e1:b9: 9b:4d:da:55:b9:81:ed:e8:08:a9:3f:6a:c0:7a:b7:f7:b1:26: 4e:76:bc:a2:c7:6b:99:26:45:2c:c8:e4:22:f2:cd:f0:67:ef: be:3f:29:43:22:ec:92:b5:40:b5:ca:96:b7:f0:73:2b:cb:0a: c1:80:fc:20:63:fb:a1:97:a3:d4:66:7f:2a:ac:85:71:f2:04: ce:1a:8c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxnA5Zu+qpRYsc6e7UGHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjQzN2IzMWI1MDY3MDM4NGZhNWQyMGQ4OTI0ZDYxMWI5 MTYzM2UwHhcNMjUxMjEwMDEwMDQ5WhcNMjUxMjExMDEwMDQ5WjAzMTEwLwYDVQQD EygxNTNmZGMxNzRmNjhiMDU0OWViMDA3MjRiZTYxYWI5ZWZkODA1NzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDCkeqAMH7c23jig+zw47ZM1qwwR XL+/JoHG9xRcK3lqQX4asIwgouXE9gkOHpErgr8zpLwUkW7iisgilyZ+FHM/MpyA 1t25d4+d4RPHACx+ZNu+Y6Wy6ErNSAvbKNP6Mk+T3KY12sGuG96Ea4oerhEeAEZ+ pIQUa4Wew+rM7dcutCyfl5rsiXgvCtQAxjc5XmxAAchvxjsdd3+GQjGkDheh4Xr+ WMZiUmW4iCoiB39K8qROqTDNEOWEDMaSeyXyQSkmk9A1ldHoM2bLJhYkDjN3vl4K Odcw+kRiautf8pEn/Ski+GbHxEhL3glt6kCKGbBGcqcLQx4pj4vlVgiqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBU/3BdPaLBUnrAHJL5hq579gFcuMB8GA1UdIwQY MBaAFES0N7MbUGcDhPpdINiSTWEbkWM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgt ZGUzYjc1NDczZmRkLzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgtZGUzYjc1NDczZmRk LzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRltwCdg SOR7QmmSnco/PW5jwM7mzUDFc24aBwRYpaM3pkGrocrgE6N9LZ0CR1N2IWU3Onyw pCIJ9wi4+lAPVCQgM/WiovFI6yaW4f4J3Pgc7vQOueO1p7u0pT/gc3/5PD7ZaXJt mYIFs2ZMcsDbUbPJ2a8mRM1wNAq/jVFSd185Liu8oiPU5WmuXe8xEU+qK5zl0M4k Wo8vDeKumyz3PrFoBqm8uGuFiH3tWhLLaqSZ3uG5m03aVbmB7egIqT9qwHq397Em Tna8osdrmSZFLMjkIvLN8Gfvvj8pQyLskrVAtcqWt/BzK8sKwYD8IGP7oZej1GZ/ KqyFcfIEzhqMqA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:34 2025 by rpki-client