This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft File: ApeliZjwl0NHCBwX8l7t1l-tlmE.mft (raw, json) Hash identifier: BXjlc/nCy2+6x7Av1zMXZeGqiUpGkkilgw/ssnlFkGg= Subject key identifier: F0:C2:A4:F8:33:72:6E:15:39:E3:B5:26:B5:DB:78:F1:4D:DD:9F:34 Authority key identifier: 02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61 Certificate issuer: /CN=0297a58998f0974347081c17f25eedd65fad9661 Certificate serial: 0193F099FEDF49DEFDD17F388F0CB355B75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft Manifest number: 13C0 Signing time: Sun 22 Dec 2024 23:00:44 +0000 Manifest this update: Sun 22 Dec 2024 23:00:44 +0000 Manifest next update: Mon 23 Dec 2024 23:00:44 +0000 Files and hashes: 1: ApeliZjwl0NHCBwX8l7t1l-tlmE.crl (hash: sGBbvUbAJwitDSDJT1xGBQmRBO1qwCTcLiWoFh0z2kQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:f0:99:fe:df:49:de:fd:d1:7f:38:8f:0c:b3:55:b7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0297a58998f0974347081c17f25eedd65fad9661 Validity Not Before: Dec 22 23:00:44 2024 GMT Not After : Dec 23 23:00:44 2024 GMT Subject: CN=f0c2a4f833726e1539e3b526b5db78f14ddd9f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:1b:66:20:63:db:c4:eb:62:55:03:88:b2: 28:12:6e:6a:96:68:3f:bd:f2:da:26:77:ee:cf:57: 8a:0c:bc:42:5e:41:b9:d4:ab:05:78:a4:c2:6f:23: 0a:7c:c0:1d:8c:f2:4d:bd:a3:ae:54:f4:e3:22:0c: 53:30:e2:0d:94:54:ec:d5:8a:51:98:be:b7:e5:5f: 95:29:a6:a0:5d:fe:91:d6:1e:ec:8c:40:f6:e1:2e: 75:c6:5a:48:e4:df:b7:d9:97:d6:c6:1a:f8:a1:15: b0:c0:09:f7:aa:74:f6:1a:71:18:1c:92:05:02:99: b7:04:ac:18:9d:b3:e5:32:5b:90:93:68:d6:73:e8: 83:86:cf:0c:ed:57:23:f7:4c:5e:81:8b:f7:94:28: d3:66:11:5f:f3:a3:00:a2:3a:c3:84:fb:be:17:4f: 6a:6b:35:57:19:13:0f:7a:32:4a:82:1f:2c:55:ab: 44:f2:d1:2f:53:ab:d9:9e:17:d7:fa:42:2c:2a:34: 32:ff:f1:8a:fc:9b:59:b7:2d:b7:88:a5:53:0f:86: 21:17:56:ac:ff:da:85:7c:15:df:d6:bd:07:b1:68: 4c:f8:69:a0:1a:18:01:26:5a:32:f6:0a:85:a9:d4: dd:a1:05:b5:8a:32:2b:c3:e7:94:88:81:21:38:90: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C2:A4:F8:33:72:6E:15:39:E3:B5:26:B5:DB:78:F1:4D:DD:9F:34 X509v3 Authority Key Identifier: keyid:02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:23:9a:36:2c:dc:1b:55:a3:96:03:12:d3:ea:45:24:8c: 0a:25:18:62:7f:12:bf:f0:c0:20:57:09:62:8b:96:de:8b:da: 58:69:61:db:d5:67:cd:66:5f:d8:74:1b:21:ca:e4:dd:d9:a9: 7c:5e:e8:ef:b2:7b:48:4c:c8:e8:bc:67:30:bc:04:98:53:e2: a7:aa:ff:4c:0d:5c:e4:99:3c:0b:5e:b4:90:63:6a:25:c6:39: 14:4b:e4:42:76:63:e6:56:72:23:22:be:27:51:a8:eb:64:86: ac:1f:84:d4:85:00:30:93:97:b1:07:b4:d9:be:77:f6:c1:52: 1c:e5:54:cf:ff:e4:48:8c:cb:9b:08:c7:53:ae:d4:c9:04:8f: 61:eb:c7:d6:fc:dc:43:10:c1:d7:94:f8:af:2a:fe:1d:0c:5a: 3c:c2:bd:c1:80:bb:65:f8:1b:3f:40:73:89:8b:22:99:dc:ba: 45:29:64:f8:72:20:fd:69:d7:f7:49:48:67:c6:d8:f5:21:f4: 96:be:b0:cb:0d:e6:59:c9:6d:3a:5f:8a:06:f6:f4:48:9f:19: 03:78:65:e3:c2:51:ca:5b:fd:5d:fa:c4:ec:f2:80:37:0d:46: 91:47:0b:f1:69:c8:b1:80:1c:43:a1:6a:c9:91:ff:83:2b:6f: d4:4c:b2:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZPwmf7fSd790X84jwyzVbddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOTdhNTg5OThmMDk3NDM0NzA4MWMxN2YyNWVlZGQ2NWZh ZDk2NjEwHhcNMjQxMjIyMjMwMDQ0WhcNMjQxMjIzMjMwMDQ0WjAzMTEwLwYDVQQD EyhmMGMyYTRmODMzNzI2ZTE1MzllM2I1MjZiNWRiNzhmMTRkZGQ5ZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00gbZiBj28TrYlUDiLIoEm5qlmg/ vfLaJnfuz1eKDLxCXkG51KsFeKTCbyMKfMAdjPJNvaOuVPTjIgxTMOINlFTs1YpR mL635V+VKaagXf6R1h7sjED24S51xlpI5N+32ZfWxhr4oRWwwAn3qnT2GnEYHJIF Apm3BKwYnbPlMluQk2jWc+iDhs8M7Vcj90xegYv3lCjTZhFf86MAojrDhPu+F09q azVXGRMPejJKgh8sVatE8tEvU6vZnhfX+kIsKjQy//GK/JtZty23iKVTD4YhF1as /9qFfBXf1r0HsWhM+GmgGhgBJloy9gqFqdTdoQW1ijIrw+eUiIEhOJCeqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDCpPgzcm4VOeO1JrXbePFN3Z80MB8GA1UdIwQY MBaAFAKXpYmY8JdDRwgcF/Je7dZfrZZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXBlbGlaandsME5IQ0J3WDhsN3QxbC10bG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xMjkzZGItYzc1Mi00ZDAzLTg1N2Qt NTc5NTMxZTVhMDBmLzEvQXBlbGlaandsME5IQ0J3WDhsN3QxbC10bG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xMjkzZGItYzc1Mi00ZDAzLTg1N2QtNTc5NTMxZTVhMDBm LzEvQXBlbGlaandsME5IQ0J3WDhsN3QxbC10bG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmcjmjYs 3BtVo5YDEtPqRSSMCiUYYn8Sv/DAIFcJYouW3ovaWGlh29VnzWZf2HQbIcrk3dmp fF7o77J7SEzI6LxnMLwEmFPip6r/TA1c5Jk8C160kGNqJcY5FEvkQnZj5lZyIyK+ J1Go62SGrB+E1IUAMJOXsQe02b539sFSHOVUz//kSIzLmwjHU67UyQSPYevH1vzc QxDB15T4ryr+HQxaPMK9wYC7ZfgbP0BziYsimdy6RSlk+HIg/WnX90lIZ8bY9SH0 lr6wyw3mWcltOl+KBvb0SJ8ZA3hl48JRylv9XfrE7PKANw1GkUcL8WnIsYAcQ6Fq yZH/gytv1Eyyjg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:32 2025 by rpki-client