This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft File: _h7q315_VCD2dKjrh7tLE3fNvWQ.mft (raw, json) Hash identifier: MorjSuidwu534y1LSawdxwJiH3a3rZ3S6iYDE2x8ogw= Subject key identifier: DC:89:23:29:6B:65:F0:E0:5D:5F:2D:05:6D:E0:FA:ED:AA:A6:2C:4F Authority key identifier: FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64 Certificate issuer: /CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64 Certificate serial: 019AFD31247B6C221FD81AFBD94AB16A1C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft Manifest number: 03CB Signing time: Mon 08 Dec 2025 09:00:47 +0000 Manifest this update: Mon 08 Dec 2025 09:00:47 +0000 Manifest next update: Tue 09 Dec 2025 09:00:47 +0000 Files and hashes: 1: _h7q315_VCD2dKjrh7tLE3fNvWQ.crl (hash: 9BsRE5T7bcz1Jte07uS2cQL7MTul6l8pEf9JaImMcdg=) 2: doL4Cn2ma0kPf9AhJrRKrVG3Az0.roa (hash: SUzYz5u/F8jt5TpzuvWgvwZ7xHoIJE9Sk3avrITgKS8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:31:24:7b:6c:22:1f:d8:1a:fb:d9:4a:b1:6a:1c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64 Validity Not Before: Dec 8 09:00:47 2025 GMT Not After : Dec 9 09:00:47 2025 GMT Subject: CN=dc8923296b65f0e05d5f2d056de0faedaaa62c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:e2:d2:ef:e0:ae:66:51:de:37:7e:ff:09: fb:cd:80:66:ec:ef:3f:77:29:4d:22:f6:6d:cb:92: 8d:0b:40:66:d2:b3:89:6f:3d:85:53:c6:69:bf:dc: 89:0c:df:52:ff:4f:38:8a:16:f6:79:dd:76:9f:a5: ac:2e:c4:7f:33:5d:d4:16:92:49:7c:66:f0:f4:08: f5:2f:bf:58:da:ee:f0:bf:16:4e:73:ea:7b:e4:cf: d2:f1:bf:b1:4d:5d:96:65:6a:c4:79:43:2c:ed:9e: 4c:d1:18:96:65:3e:da:d3:20:4f:1e:70:f1:c4:5d: 8d:13:26:28:09:58:9c:8c:48:7e:85:72:86:b0:03: 42:74:84:01:fe:47:a9:f2:c1:00:74:08:f7:d9:aa: 6e:f0:88:0b:84:29:c6:33:4d:ae:50:7b:6e:9b:7d: bf:6b:8f:51:6a:7e:27:cc:43:b5:09:32:ab:a9:fb: 7e:0c:c4:dd:3d:d8:0f:be:5a:07:a1:31:16:c9:b6: 1a:33:2b:67:b5:8c:e0:f6:48:ea:cf:b6:27:70:90: 0d:3d:cb:43:97:a3:37:b4:7b:bf:36:dc:42:6a:fc: 04:28:b7:f6:ae:06:00:8b:70:df:04:89:cc:5b:d1: 6e:d7:a4:34:ea:8d:1b:37:a7:ca:b9:de:c5:80:0c: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:23:29:6B:65:F0:E0:5D:5F:2D:05:6D:E0:FA:ED:AA:A6:2C:4F X509v3 Authority Key Identifier: keyid:FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:a0:fd:db:fb:30:3b:c6:5f:6b:da:3b:43:64:f2:09:f0: 69:83:81:98:da:e1:55:a3:c7:7e:f1:9d:5c:1c:8f:8f:69:12: d5:2c:50:b8:4c:75:f9:19:a5:bf:40:35:ed:e6:d7:41:01:00: 8c:f6:e8:b3:db:a8:63:4a:8a:b1:aa:64:75:c5:0a:ff:01:35: 72:9e:4d:80:11:db:40:8b:b2:29:69:1b:31:e3:b5:74:19:30: 91:b6:0f:a6:4a:ba:d1:a3:fa:09:1b:e8:2a:2e:4b:78:b0:b0: af:c0:73:f7:94:88:aa:d8:fa:48:42:bf:6d:1b:94:55:52:fe: 5b:0d:77:b4:f6:48:d4:d4:48:5b:52:2a:d0:89:1d:c7:37:91: 8c:05:23:58:0f:f1:b5:d6:6c:d3:8f:79:94:f7:0c:d4:85:c3: cc:ad:5c:e8:76:18:d6:71:1b:6f:b5:26:e7:48:d4:bf:da:f9: 0c:0c:fb:bd:ed:b9:79:c9:c0:c0:f3:78:13:4d:ca:8f:5e:8e: 77:55:a0:be:75:6b:ba:1d:1e:4c:43:6f:30:b7:45:bf:56:51: ad:ec:14:90:20:59:a0:6b:62:36:c5:70:d3:a9:4d:4b:39:4e: 9c:06:0e:01:68:b6:4b:c6:e3:ab:e3:67:6b:8c:0c:dc:fe:c4: 21:d7:93:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9MSR7bCIf2Br72UqxahxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMWVlYWRmNWU3ZjU0MjBmNjc0YThlYjg3YmI0YjEzNzdj ZGJkNjQwHhcNMjUxMjA4MDkwMDQ3WhcNMjUxMjA5MDkwMDQ3WjAzMTEwLwYDVQQD EyhkYzg5MjMyOTZiNjVmMGUwNWQ1ZjJkMDU2ZGUwZmFlZGFhYTYyYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzi0u/grmZR3jd+/wn7zYBm7O8/ dylNIvZty5KNC0Bm0rOJbz2FU8Zpv9yJDN9S/084ihb2ed12n6WsLsR/M13UFpJJ fGbw9Aj1L79Y2u7wvxZOc+p75M/S8b+xTV2WZWrEeUMs7Z5M0RiWZT7a0yBPHnDx xF2NEyYoCVicjEh+hXKGsANCdIQB/kep8sEAdAj32apu8IgLhCnGM02uUHtum32/ a49Ran4nzEO1CTKrqft+DMTdPdgPvloHoTEWybYaMytntYzg9kjqz7YncJANPctD l6M3tHu/NtxCavwEKLf2rgYAi3DfBInMW9Fu16Q06o0bN6fKud7FgAzAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyJIylrZfDgXV8tBW3g+u2qpixPMB8GA1UdIwQY MBaAFP4e6t9ef1Qg9nSo64e7SxN3zb1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUt MzUwN2RmZmExZWYyLzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUtMzUwN2RmZmExZWYy LzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8ag/dv7 MDvGX2vaO0Nk8gnwaYOBmNrhVaPHfvGdXByPj2kS1SxQuEx1+Rmlv0A17ebXQQEA jPbos9uoY0qKsapkdcUK/wE1cp5NgBHbQIuyKWkbMeO1dBkwkbYPpkq60aP6CRvo Ki5LeLCwr8Bz95SIqtj6SEK/bRuUVVL+Ww13tPZI1NRIW1Iq0IkdxzeRjAUjWA/x tdZs0495lPcM1IXDzK1c6HYY1nEbb7Um50jUv9r5DAz7ve25ecnAwPN4E03Kj16O d1WgvnVruh0eTENvMLdFv1ZRrewUkCBZoGtiNsVw06lNSzlOnAYOAWi2S8bjq+Nn a4wM3P7EIdeTzQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:41:02 2025 by rpki-client