This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json) Hash identifier: apBscYXY0RLM2dOPOgcBBybbTehIiWVw+yKqMFnhTMs= Subject key identifier: 24:FA:81:4A:C3:EB:F3:41:BF:4A:17:58:CA:7E:28:48:A1:7A:FA:0B Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2 Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2 Certificate serial: 019A72CA2B09C89E9AFED2EF4F2864C1E874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft Manifest number: 171D Signing time: Tue 11 Nov 2025 12:00:43 +0000 Manifest this update: Tue 11 Nov 2025 12:00:43 +0000 Manifest next update: Wed 12 Nov 2025 12:00:43 +0000 Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=) 2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: tjTg41SPVC7XwiZ/h1PECQLtwT3TSVDzjV5nkElJ+/8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:ca:2b:09:c8:9e:9a:fe:d2:ef:4f:28:64:c1:e8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2 Validity Not Before: Nov 11 12:00:43 2025 GMT Not After : Nov 12 12:00:43 2025 GMT Subject: CN=24fa814ac3ebf341bf4a1758ca7e2848a17afa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c2:7c:28:f1:65:6f:07:9c:d0:6f:e9:cc:7d: 7e:af:30:a0:38:d4:e2:72:c9:cf:fc:78:9d:e8:bf: 85:df:8b:9c:b1:d1:81:b3:c1:d9:df:13:e6:2b:44: 52:98:be:4c:ff:ae:b1:50:cd:f9:48:b6:b9:b6:d4: 2c:f9:72:a9:f5:df:5f:45:59:b2:58:3c:9c:b6:3a: 09:28:ba:3d:e9:3d:ca:7e:47:63:17:9f:fb:ad:34: 01:1d:26:b1:eb:84:ff:9a:8e:90:49:3f:85:0f:08: ca:b0:5b:02:2b:ef:de:51:0d:97:5a:48:3e:11:84: df:6c:dc:9d:3e:51:8d:a1:f5:a4:ab:a7:77:ad:91: 6a:a5:30:0b:64:df:8b:f4:44:c0:93:1e:e3:d9:e4: c2:1c:a5:83:22:c5:01:ee:1d:ce:6a:6e:da:db:db: 57:cb:e0:88:31:0a:e9:50:f1:7d:03:e5:5d:13:55: de:45:9d:12:62:d8:10:0d:3a:15:5c:94:0a:b5:92: a3:55:e6:74:aa:7a:79:d0:e2:d8:ab:fa:13:d4:bf: 0c:f9:ad:c8:6b:5d:6d:d5:6c:f9:84:b3:d3:c0:dd: e9:49:fc:af:0c:dd:e0:3e:68:22:76:1a:ab:2c:9e: 22:1c:86:86:42:71:c5:81:11:d4:bf:e8:04:10:f7: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:81:4A:C3:EB:F3:41:BF:4A:17:58:CA:7E:28:48:A1:7A:FA:0B X509v3 Authority Key Identifier: keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:88:49:67:8f:c0:48:05:73:f1:94:b8:a8:18:96:1d:6d:aa: 88:8c:a9:6c:56:62:bf:ca:3e:23:68:04:8a:dd:b8:8f:5c:c5: 58:f2:5b:04:42:e8:9c:da:ca:b5:d1:2d:06:43:a2:7a:d6:93: 4c:a9:51:7a:1a:14:05:e7:e3:a7:d6:84:99:cb:24:47:a8:59: d8:57:14:53:e9:ec:ad:05:5d:cd:ac:ef:3b:bd:2b:c2:ed:ca: be:b1:ab:18:48:10:4c:36:b5:14:9d:91:6f:8f:0d:af:56:c4: 81:43:c2:b4:38:94:62:08:85:c1:e2:9b:99:fb:c2:07:e0:61: 6a:53:6d:16:4c:31:81:4c:03:34:73:6b:78:a4:22:d8:58:ba: 27:32:a3:f6:e8:fd:24:41:54:7d:a9:14:0e:99:27:a4:4b:43: 13:45:c1:6c:3a:f4:21:fe:d0:4a:71:31:88:17:47:54:05:ff: 6a:f8:2b:a4:cb:af:14:67:e0:1e:4a:a2:72:6b:7e:33:ec:3a: 6f:1c:dd:91:0e:6c:dd:d7:a3:b8:26:2e:a1:ba:64:28:78:01: 9e:03:ae:be:41:8c:69:36:0c:0e:58:80:a4:f0:06:6c:8d:ca: 02:fb:b5:45:6f:64:be:ef:f6:e3:a3:1b:a8:1a:ce:5d:26:ed: ee:8f:c1:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpyyisJyJ6a/tLvTyhkweh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwNDliNmQxNzYwMmJmN2I0OGQxMDRkMDhkYWYwMTQz MWRiYzIwHhcNMjUxMTExMTIwMDQzWhcNMjUxMTEyMTIwMDQzWjAzMTEwLwYDVQQD EygyNGZhODE0YWMzZWJmMzQxYmY0YTE3NThjYTdlMjg0OGExN2FmYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9sJ8KPFlbwec0G/pzH1+rzCgONTi csnP/Hid6L+F34ucsdGBs8HZ3xPmK0RSmL5M/66xUM35SLa5ttQs+XKp9d9fRVmy WDyctjoJKLo96T3KfkdjF5/7rTQBHSax64T/mo6QST+FDwjKsFsCK+/eUQ2XWkg+ EYTfbNydPlGNofWkq6d3rZFqpTALZN+L9ETAkx7j2eTCHKWDIsUB7h3Oam7a29tX y+CIMQrpUPF9A+VdE1XeRZ0SYtgQDToVXJQKtZKjVeZ0qnp50OLYq/oT1L8M+a3I a11t1Wz5hLPTwN3pSfyvDN3gPmgidhqrLJ4iHIaGQnHFgRHUv+gEEPepXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT6gUrD6/NBv0oXWMp+KEihevoLMB8GA1UdIwQY MBaAFKtPBJttF2Ar97SNEE0I2vAUMdvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4RW0yMFhZQ3YzdEkwUVRRamE4QlF4MjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NGQ0OWItYjBiOC00ZjBmLWExODgt OTRhMTk2OGJjYWRiLzEvcTA4RW0yMFhZQ3YzdEkwUVRRamE4QlF4MjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85NGQ0OWItYjBiOC00ZjBmLWExODgtOTRhMTk2OGJjYWRi LzEvcTA4RW0yMFhZQ3YzdEkwUVRRamE4QlF4MjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIhJZ4/A SAVz8ZS4qBiWHW2qiIypbFZiv8o+I2gEit24j1zFWPJbBELonNrKtdEtBkOietaT TKlRehoUBefjp9aEmcskR6hZ2FcUU+nsrQVdzazvO70rwu3KvrGrGEgQTDa1FJ2R b48Nr1bEgUPCtDiUYgiFweKbmfvCB+BhalNtFkwxgUwDNHNreKQi2Fi6JzKj9uj9 JEFUfakUDpknpEtDE0XBbDr0If7QSnExiBdHVAX/avgrpMuvFGfgHkqicmt+M+w6 bxzdkQ5s3dejuCYuobpkKHgBngOuvkGMaTYMDliApPAGbI3KAvu1RW9kvu/246Mb qBrOXSbt7o/BoA== -----END CERTIFICATE-----Generated at Tue Dec 16 05:00:06 2025 by rpki-client