This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json) Hash identifier: qENkDJfQPBvJHWl4LtsH9RylYe15pCBBecZITrKVODI= Subject key identifier: ED:31:A3:ED:8F:60:33:05:1E:16:82:53:AD:0C:80:B1:B1:60:42:B2 Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57 Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257 Certificate serial: 01997A18DAFC0B855FBF1E9CDB9E4D74BDA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft Manifest number: 06CE Signing time: Wed 24 Sep 2025 05:01:13 +0000 Manifest this update: Wed 24 Sep 2025 05:01:13 +0000 Manifest next update: Thu 25 Sep 2025 05:01:13 +0000 Files and hashes: 1: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: XxqOkMt/dG5XCJX4bItsSleamBeEvwHWdip6PNC1WLc=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:7a:18:da:fc:0b:85:5f:bf:1e:9c:db:9e:4d:74:bd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257 Validity Not Before: Sep 24 05:01:13 2025 GMT Not After : Sep 25 05:01:13 2025 GMT Subject: CN=ed31a3ed8f6033051e168253ad0c80b1b16042b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:4f:76:54:3f:9e:f7:7b:33:8f:4a:0c:a1: 77:78:98:93:37:86:ce:18:2b:31:dc:b1:2a:40:a5: 04:be:32:63:c9:02:d8:26:39:f5:ac:63:58:c0:46: db:cb:e6:12:44:02:24:e0:4b:cf:24:20:a5:3a:e3: a9:b2:eb:47:5a:61:83:49:d7:36:7e:de:54:45:74: 7e:2d:a1:66:80:b4:68:ba:af:4b:dc:61:50:bf:d3: 47:63:b6:f1:fb:e4:3e:6e:aa:b0:f6:4e:fd:8d:f6: d1:ed:ef:bc:38:63:64:f0:b0:f1:0e:27:33:5f:c9: 60:bc:82:3d:b5:e2:94:45:2c:b7:9b:16:b8:21:4c: 7c:f7:a6:d1:a5:d1:db:2c:65:57:02:de:de:3d:59: f2:f5:4a:63:6d:db:83:f5:dc:b6:6a:cd:79:d9:be: 18:d2:c8:c5:1e:11:71:08:82:66:ad:40:29:cf:09: 11:5c:8a:63:16:29:7a:23:b6:fc:0e:8b:b1:8c:8c: 0a:5c:54:7c:0b:6a:18:8c:b5:7a:df:93:52:1c:f6: 3a:91:d5:2b:0d:83:52:74:15:c1:55:c5:47:2e:91: 9c:3b:23:e6:5b:7c:1c:de:0c:28:be:db:3e:b1:6b: c7:79:cf:13:87:0c:c3:c4:fe:17:ba:be:c2:43:f2: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:31:A3:ED:8F:60:33:05:1E:16:82:53:AD:0C:80:B1:B1:60:42:B2 X509v3 Authority Key Identifier: keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:68:53:7c:d4:12:c2:42:9f:9a:b7:7b:b5:eb:82:6b:89:41: 64:e5:c1:ee:38:47:9f:50:3e:81:02:d5:ed:94:d4:51:65:ce: 7d:b5:59:0b:ce:52:06:50:16:9c:5f:3c:de:ec:75:be:71:cc: 7b:80:20:30:59:d5:ce:6f:0d:db:a9:a1:30:ef:7c:86:f2:95: 40:cb:39:a9:2b:d3:e8:56:02:1e:58:0e:42:8a:08:1b:82:f9: d0:f2:55:59:63:aa:c1:e6:08:e6:f3:d3:25:a3:0b:ff:23:ec: cf:0b:58:c2:1b:17:c9:58:49:49:c5:7d:c6:fb:07:06:ac:09: 8e:47:3a:63:e6:e8:5c:1f:1f:bf:86:33:90:3c:c3:3a:e0:22: aa:c4:0b:81:ab:b6:8a:55:3d:e6:b7:ae:83:dc:32:e5:8b:84: 28:25:a3:03:fc:28:bf:e0:8a:36:cd:00:a3:a6:32:fe:3f:66: 7c:25:23:6f:59:b1:16:71:7c:d7:df:c4:bb:6b:4d:e5:19:d1: b1:d8:bc:12:ce:88:59:5f:54:94:4d:05:ae:b3:26:0d:0f:58: ea:d9:59:3b:d8:81:0f:41:1a:5b:a5:c1:e7:f5:07:07:b0:5f: 20:e8:a8:32:33:76:c2:79:d1:b0:34:8e:88:f6:75:de:11:0d: 25:e3:fd:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZl6GNr8C4Vfvx6c255NdL2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTU2OTlhMDhjN2JmZDcwN2NmYjA2ZDMyMTNmNWNhY2Jm MjgyNTcwHhcNMjUwOTI0MDUwMTEzWhcNMjUwOTI1MDUwMTEzWjAzMTEwLwYDVQQD EyhlZDMxYTNlZDhmNjAzMzA1MWUxNjgyNTNhZDBjODBiMWIxNjA0MmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1PdlQ/nvd7M49KDKF3eJiTN4bO GCsx3LEqQKUEvjJjyQLYJjn1rGNYwEbby+YSRAIk4EvPJCClOuOpsutHWmGDSdc2 ft5URXR+LaFmgLRouq9L3GFQv9NHY7bx++Q+bqqw9k79jfbR7e+8OGNk8LDxDicz X8lgvII9teKURSy3mxa4IUx896bRpdHbLGVXAt7ePVny9UpjbduD9dy2as152b4Y 0sjFHhFxCIJmrUApzwkRXIpjFil6I7b8DouxjIwKXFR8C2oYjLV635NSHPY6kdUr DYNSdBXBVcVHLpGcOyPmW3wc3gwovts+sWvHec8ThwzDxP4Xur7CQ/J5owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0xo+2PYDMFHhaCU60MgLGxYEKyMB8GA1UdIwQY MBaAFLClaZoIx7/XB8+wbTIT9crL8oJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tWcG1nakh2OWNIejdCdE1oUDF5c3Z5Z2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZmQ2ZTktMTdkMy00MDE5LTg2Njkt OTY2NmQ5NzYyODVkLzEvc0tWcG1nakh2OWNIejdCdE1oUDF5c3Z5Z2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZmQ2ZTktMTdkMy00MDE5LTg2NjktOTY2NmQ5NzYyODVk LzEvc0tWcG1nakh2OWNIejdCdE1oUDF5c3Z5Z2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2hTfNQS wkKfmrd7teuCa4lBZOXB7jhHn1A+gQLV7ZTUUWXOfbVZC85SBlAWnF883ux1vnHM e4AgMFnVzm8N26mhMO98hvKVQMs5qSvT6FYCHlgOQooIG4L50PJVWWOqweYI5vPT JaML/yPszwtYwhsXyVhJScV9xvsHBqwJjkc6Y+boXB8fv4YzkDzDOuAiqsQLgau2 ilU95reug9wy5YuEKCWjA/wov+CKNs0Ao6Yy/j9mfCUjb1mxFnF819/Eu2tN5RnR sdi8Es6IWV9UlE0FrrMmDQ9Y6tlZO9iBD0EaW6XB5/UHB7BfIOioMjN2wnnRsDSO iPZ13hENJeP96g== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:29 2025 by rpki-client