This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft File: 2f2qHAH51r-3yaAN4AlCpGY2A2U.mft (raw, json) Hash identifier: Ta4THNr/7F0XaVONwhfDf7FXTxp9cz3Dx5/2DGPtDKg= Subject key identifier: 9F:AD:25:34:8B:FE:02:3C:95:F9:AA:E6:50:8F:9A:E0:19:97:93:A5 Authority key identifier: D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65 Certificate issuer: /CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365 Certificate serial: 0194DE91EAE241043003D736D2C63306F263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft Manifest number: 08C3 Signing time: Fri 07 Feb 2025 04:01:32 +0000 Manifest this update: Fri 07 Feb 2025 04:01:32 +0000 Manifest next update: Sat 08 Feb 2025 04:01:32 +0000 Files and hashes: 1: 2f2qHAH51r-3yaAN4AlCpGY2A2U.crl (hash: nV+IGLDTlqszp6DkDcEkheg11uu8a1DChmSqDnicRKY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:de:91:ea:e2:41:04:30:03:d7:36:d2:c6:33:06:f2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365 Validity Not Before: Feb 7 04:01:32 2025 GMT Not After : Feb 8 04:01:32 2025 GMT Subject: CN=9fad25348bfe023c95f9aae6508f9ae0199793a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c6:45:99:f5:1f:28:6f:7d:0f:12:11:ad:48: e5:5e:32:1b:c5:84:3d:51:61:29:74:25:fe:bc:e3: 1d:fc:28:bc:4f:65:62:15:fb:85:65:09:c6:0b:dc: 45:c7:cd:cd:09:30:04:eb:11:93:45:ce:f0:8b:86: f0:7e:ff:51:0d:cb:62:27:e8:d1:22:6a:a8:90:cf: 0a:97:bb:a4:2d:99:e3:1a:18:1a:93:bc:93:9b:7a: f8:21:65:96:d7:36:e3:b7:40:26:c3:66:1e:b9:76: d8:2f:2a:fd:6e:b3:f6:8b:6d:cd:b6:a0:e4:c7:a8: 98:53:7c:75:61:81:4d:76:05:0c:d4:2e:99:04:8e: 1b:44:9f:31:20:f1:cb:5e:d1:26:77:ad:3a:ea:fc: 9b:7f:2e:3f:55:9a:63:68:70:53:82:60:12:7d:2c: 16:62:69:78:ee:37:33:bb:f2:e9:74:ce:51:36:5e: fa:65:8e:fa:57:16:4e:e1:63:6d:36:23:ec:d0:21: ee:2a:d7:5f:30:a6:69:bf:e3:32:5a:eb:2c:34:59: a0:51:02:cd:4d:95:65:ab:3f:2f:4f:42:53:cc:3b: 83:69:9e:c2:7a:b6:11:ec:92:7f:c8:90:3a:ab:3e: 15:7e:3b:37:c7:99:3c:40:ae:9c:61:00:47:85:ab: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AD:25:34:8B:FE:02:3C:95:F9:AA:E6:50:8F:9A:E0:19:97:93:A5 X509v3 Authority Key Identifier: keyid:D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:65:e1:1e:c6:29:84:24:69:da:83:c2:8a:1d:e8:a2:23:ff: 96:ff:2b:6b:d6:84:1b:ec:c4:f7:9a:06:7d:af:db:81:a5:f2: b3:93:8b:29:1e:86:0f:79:37:1d:c2:40:86:70:7e:42:01:5e: 34:87:f4:fe:19:e7:75:72:81:79:85:77:8d:1e:d3:8e:4a:4a: 0f:c1:19:99:53:81:08:28:11:a3:40:9c:a0:57:ee:6a:3f:c2: d9:06:6d:c8:3c:4e:03:3a:65:4e:fa:de:c5:e3:cb:23:d0:21: 50:ce:ca:75:6a:c6:14:14:6a:df:32:92:3a:ea:ef:d6:3f:18: 6b:00:c8:85:54:c7:3b:24:fc:b5:70:4f:34:35:18:cc:ad:a9: b9:ee:1c:c2:4d:7a:e9:cc:6d:0f:48:a2:f4:68:e8:1c:78:b2: a6:af:44:07:7b:1c:e5:6b:9a:f1:bd:a3:7f:64:d7:5e:7d:df: 22:ae:a9:39:6a:36:35:8e:37:30:29:23:7e:47:4b:e4:01:ec: f2:e9:4c:6d:82:d5:6d:ab:85:d0:56:7a:bb:74:36:7c:fd:47: 4c:df:77:a8:ca:65:ec:23:6f:1d:aa:ef:d9:ec:74:23:97:d8: 09:22:48:00:62:28:0b:3d:5c:14:f7:44:39:7b:91:56:a3:98: 58:1b:34:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZTekeriQQQwA9c20sYzBvJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmRhYTFjMDFmOWQ2YmZiN2M5YTAwZGUwMDk0MmE0NjYz NjAzNjUwHhcNMjUwMjA3MDQwMTMyWhcNMjUwMjA4MDQwMTMyWjAzMTEwLwYDVQQD Eyg5ZmFkMjUzNDhiZmUwMjNjOTVmOWFhZTY1MDhmOWFlMDE5OTc5M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cZFmfUfKG99DxIRrUjlXjIbxYQ9 UWEpdCX+vOMd/Ci8T2ViFfuFZQnGC9xFx83NCTAE6xGTRc7wi4bwfv9RDctiJ+jR ImqokM8Kl7ukLZnjGhgak7yTm3r4IWWW1zbjt0Amw2YeuXbYLyr9brP2i23NtqDk x6iYU3x1YYFNdgUM1C6ZBI4bRJ8xIPHLXtEmd6066vybfy4/VZpjaHBTgmASfSwW Yml47jczu/LpdM5RNl76ZY76VxZO4WNtNiPs0CHuKtdfMKZpv+MyWussNFmgUQLN TZVlqz8vT0JTzDuDaZ7CerYR7JJ/yJA6qz4Vfjs3x5k8QK6cYQBHhavoawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+tJTSL/gI8lfmq5lCPmuAZl5OlMB8GA1UdIwQY MBaAFNn9qhwB+da/t8mgDeAJQqRmNgNlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmYycUhBSDUxci0zeWFBTjRBbENwR1kyQTJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iYjA0MGEtYzgwMi00OTYwLThkYmYt YjliYWE5ZjA2MWZlLzEvMmYycUhBSDUxci0zeWFBTjRBbENwR1kyQTJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iYjA0MGEtYzgwMi00OTYwLThkYmYtYjliYWE5ZjA2MWZl LzEvMmYycUhBSDUxci0zeWFBTjRBbENwR1kyQTJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2XhHsYp hCRp2oPCih3ooiP/lv8ra9aEG+zE95oGfa/bgaXys5OLKR6GD3k3HcJAhnB+QgFe NIf0/hnndXKBeYV3jR7TjkpKD8EZmVOBCCgRo0CcoFfuaj/C2QZtyDxOAzplTvre xePLI9AhUM7KdWrGFBRq3zKSOurv1j8YawDIhVTHOyT8tXBPNDUYzK2pue4cwk16 6cxtD0ii9GjoHHiypq9EB3sc5Wua8b2jf2TXXn3fIq6pOWo2NY43MCkjfkdL5AHs 8ulMbYLVbauF0FZ6u3Q2fP1HTN93qMpl7CNvHarv2ex0I5fYCSJIAGIoCz1cFPdE OXuRVqOYWBs00Q== -----END CERTIFICATE-----Generated at Fri Dec 19 08:09:17 2025 by rpki-client