This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json) Hash identifier: 7JG3DGhw3OvG+rX66j8XwWYvX4lXgTE77Lw9F12kAG8= Subject key identifier: AC:47:80:F4:90:EC:81:CB:3D:83:F7:8F:3E:7B:B3:F1:DB:8C:E8:2A Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51 Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51 Certificate serial: 019B43C9C0B8FD77FE9D924391142E007632 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft Manifest number: 1191 Signing time: Mon 22 Dec 2025 02:00:54 +0000 Manifest this update: Mon 22 Dec 2025 02:00:54 +0000 Manifest next update: Tue 23 Dec 2025 02:00:54 +0000 Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=) 2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: 8kl8cWdlYQbe+ZlrDk9M12jMKjZ0/xlcR86lfAreGY0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:c0:b8:fd:77:fe:9d:92:43:91:14:2e:00:76:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51 Validity Not Before: Dec 22 02:00:54 2025 GMT Not After : Dec 23 02:00:54 2025 GMT Subject: CN=ac4780f490ec81cb3d83f78f3e7bb3f1db8ce82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:8b:08:c7:32:82:5e:17:29:03:27:d9:fd: a8:42:11:c5:e9:29:92:b2:11:d2:10:ea:52:c2:a9: c0:e3:f2:e3:77:3c:4d:aa:dc:97:9c:9d:49:ff:15: 6c:d9:df:e2:14:83:f4:12:10:16:98:24:6b:33:43: 30:cc:c2:8f:04:02:d4:41:52:1d:bd:89:9d:43:b2: 81:24:d5:fe:72:86:d1:52:5f:40:41:79:c4:59:e9: 45:b5:86:ca:11:d1:29:36:e5:b8:bc:88:41:a3:25: 1b:7e:02:12:49:d6:15:4c:ba:bf:b7:38:3d:95:0f: e7:fc:3d:bc:97:20:a3:b1:71:ac:79:00:ee:4f:6e: dd:cb:5d:56:94:4e:22:a2:2f:79:08:53:51:d9:ff: 2c:a5:1b:1e:e3:05:51:0c:47:f9:8d:2c:22:c4:71: 7c:b2:0b:94:3f:88:cc:75:31:1b:bf:15:4d:e5:ab: 6e:e1:1d:02:bd:3b:60:fc:7f:03:48:b3:44:5e:1f: 48:dc:aa:c2:54:a1:6b:d3:d3:1d:cb:f6:57:15:bf: 16:ad:ae:4f:f2:26:1c:a0:bf:e1:0b:35:f9:1e:a7: af:0f:87:0e:7f:16:8d:78:ec:6c:0b:6f:c5:9e:23: 3b:28:6b:cd:11:7c:52:a2:89:82:98:a4:dd:16:ec: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:47:80:F4:90:EC:81:CB:3D:83:F7:8F:3E:7B:B3:F1:DB:8C:E8:2A X509v3 Authority Key Identifier: keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b5:77:c6:83:f0:a7:82:99:89:df:6e:de:ee:2d:6c:a3:55: ef:4e:5c:17:e8:94:d0:90:e5:08:2e:a1:1c:88:fa:8e:1f:ff: 42:c6:61:32:83:2b:db:77:02:7e:7e:cf:0b:32:46:da:17:7c: 85:3d:f9:b3:30:3d:af:cc:f3:f7:1a:cd:12:63:8a:95:cb:f6: 03:ca:17:32:9b:dd:e4:5f:3a:66:33:2b:f6:ec:52:75:75:6a: 34:57:d0:79:74:28:ac:08:74:dd:d6:e3:11:e3:0b:74:53:5c: 0b:7b:ec:35:67:69:c1:6e:96:b8:64:53:18:4e:ea:2b:67:0a: 55:3e:89:46:8c:6a:bc:48:ad:32:98:09:79:c0:48:83:25:41: 30:eb:70:63:4f:b7:3a:64:95:1b:63:a4:c8:0a:e3:9f:24:c0: 93:a0:e0:5d:e5:ac:55:5f:01:f7:28:58:00:de:28:ba:08:1c: 31:73:54:85:a1:8a:3b:f6:35:de:42:28:7b:49:b3:00:df:b1: 5b:e5:ee:a7:ee:42:01:f5:34:cc:cd:9a:f2:2b:69:b4:ee:cf: f9:26:a6:d2:a3:94:2b:28:3e:df:68:7b:6e:ae:0b:1b:95:57: 55:cc:5f:4d:4c:d2:23:e7:ec:ef:78:1f:03:ef:a0:1b:d6:c5: 3d:45:3e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDycC4/Xf+nZJDkRQuAHYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzkxNjBhMDQ0OWU4YjUwZmMwMWM4NWRjZmNlNTRiMmM2 MjliNTEwHhcNMjUxMjIyMDIwMDU0WhcNMjUxMjIzMDIwMDU0WjAzMTEwLwYDVQQD EyhhYzQ3ODBmNDkwZWM4MWNiM2Q4M2Y3OGYzZTdiYjNmMWRiOGNlODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmciLCMcygl4XKQMn2f2oQhHF6SmS shHSEOpSwqnA4/LjdzxNqtyXnJ1J/xVs2d/iFIP0EhAWmCRrM0MwzMKPBALUQVId vYmdQ7KBJNX+cobRUl9AQXnEWelFtYbKEdEpNuW4vIhBoyUbfgISSdYVTLq/tzg9 lQ/n/D28lyCjsXGseQDuT27dy11WlE4ioi95CFNR2f8spRse4wVRDEf5jSwixHF8 sguUP4jMdTEbvxVN5atu4R0CvTtg/H8DSLNEXh9I3KrCVKFr09Mdy/ZXFb8Wra5P 8iYcoL/hCzX5HqevD4cOfxaNeOxsC2/FniM7KGvNEXxSoomCmKTdFuwGgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxHgPSQ7IHLPYP3jz57s/HbjOgqMB8GA1UdIwQY MBaAFKZ5FgoESei1D8Achdz85UssYptRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTkt OGI0ZDA4ZDM3YzVmLzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTktOGI0ZDA4ZDM3YzVm LzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLV3xoPw p4KZid9u3u4tbKNV705cF+iU0JDlCC6hHIj6jh//QsZhMoMr23cCfn7PCzJG2hd8 hT35szA9r8zz9xrNEmOKlcv2A8oXMpvd5F86ZjMr9uxSdXVqNFfQeXQorAh03dbj EeMLdFNcC3vsNWdpwW6WuGRTGE7qK2cKVT6JRoxqvEitMpgJecBIgyVBMOtwY0+3 OmSVG2OkyArjnyTAk6DgXeWsVV8B9yhYAN4ouggcMXNUhaGKO/Y13kIoe0mzAN+x W+Xup+5CAfU0zM2a8itptO7P+Sam0qOUKyg+32h7bq4LG5VXVcxfTUzSI+fs73gf A++gG9bFPUU+XQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:09 2025 by rpki-client