This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft File: MTZAKhRELms6FTnWQlASjc3R7Ns.mft (raw, json) Hash identifier: kDHr9m5Ukj2lJwO6emt+BFDtSbdJQ1QAk6yZx52OZjY= Subject key identifier: 68:82:72:D2:09:84:B8:87:EF:5A:E6:5F:36:69:5B:A0:E6:C3:18:C1 Authority key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB Certificate issuer: /CN=3136402a14442e6b3a1539d64250128dcdd1ecdb Certificate serial: 0199F243E883D2DF972D6DDD6B3F9AAE3A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft Manifest number: 026E Signing time: Fri 17 Oct 2025 13:02:40 +0000 Manifest this update: Fri 17 Oct 2025 13:02:40 +0000 Manifest next update: Sat 18 Oct 2025 13:02:40 +0000 Files and hashes: 1: MTZAKhRELms6FTnWQlASjc3R7Ns.crl (hash: JupXa2ldLhO7du3SZpVnxXjyhHbA7JSXPEBi0avYPHE=) 2: gk7tvvpNQKzq016DYIQrQnI1zIg.roa (hash: GqU+/Xvx9R7K2mDYSrVU8YpXujBinhqdZQ6UcdPTRQQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:f2:43:e8:83:d2:df:97:2d:6d:dd:6b:3f:9a:ae:3a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb Validity Not Before: Oct 17 13:02:40 2025 GMT Not After : Oct 18 13:02:40 2025 GMT Subject: CN=688272d20984b887ef5ae65f36695ba0e6c318c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:5b:6d:89:69:5a:a1:bc:1c:75:d8:2e:e9: 39:17:0a:26:17:70:96:45:aa:94:ac:00:b5:3d:9f: 36:c4:e1:80:55:d9:36:e1:fa:a7:d3:30:b2:8c:f1: cf:33:7a:43:91:b4:78:84:54:d5:56:91:4f:95:78: 3b:ea:39:ef:a9:00:bb:c9:2d:44:14:73:b7:50:15: 9f:34:7e:59:3d:25:78:2f:14:2c:26:d3:4c:e4:05: 48:40:ad:31:62:dd:7d:ad:c3:99:7b:24:66:fb:dc: 23:5a:ac:c8:0f:aa:4f:56:41:59:5d:16:5c:45:3d: 3d:b0:d0:aa:b3:8d:90:ca:33:4d:f1:99:d1:f6:58: 7b:75:9e:7d:5d:c1:93:97:d3:48:d9:15:85:56:00: 76:e9:67:4f:48:e3:2b:94:a8:49:0a:9c:f6:19:3e: 20:42:17:97:a2:ec:92:26:8f:bd:38:58:6e:a5:9d: 81:48:2d:49:f4:96:49:ae:02:3f:18:eb:6b:87:0e: db:f1:c5:3b:46:6c:16:7a:e3:67:0b:e3:6b:7a:dd: 66:13:28:c8:df:d2:9b:f7:a6:d3:5a:03:51:68:08: 44:f3:23:42:c1:fc:06:bd:ec:39:8e:50:eb:08:89: 69:19:ee:c5:10:b6:e9:ff:6e:bf:d4:3c:d3:09:a1: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:82:72:D2:09:84:B8:87:EF:5A:E6:5F:36:69:5B:A0:E6:C3:18:C1 X509v3 Authority Key Identifier: keyid:31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6b:d6:68:55:ca:5d:e6:b3:24:32:3a:1c:2a:c4:3c:c0:ef: 1c:88:2a:e8:3b:4b:09:a1:21:ec:90:7f:aa:69:ae:d4:59:7f: 63:d6:66:56:79:7c:e7:b1:08:85:a4:99:7d:98:4b:e4:e1:f1: 39:ef:2e:dd:82:45:23:6a:2b:01:01:72:8d:3e:81:83:9c:f4: 2c:56:78:5c:9c:e0:3d:0e:97:de:e5:e0:c7:80:17:f5:96:45: 95:dd:15:c8:d0:ff:3d:70:d3:25:d9:8b:44:50:3a:a7:8f:3e: 93:d7:e1:e1:fd:86:88:16:02:8d:c1:cd:1d:c8:c6:51:1d:a2: 75:0b:93:01:c8:b6:a5:9f:49:e9:6f:34:7b:e0:8a:09:7d:63: 8f:01:fe:a9:53:86:a2:52:78:db:49:ad:67:04:94:a5:77:38: 8e:ed:6d:c5:01:45:4e:b6:9d:b1:63:60:13:ef:30:22:3c:53: dc:6d:81:90:d8:ce:01:13:87:89:0c:4a:62:1c:de:c7:67:42: 85:ac:d4:7d:cc:ab:40:f5:75:ea:cb:2f:1f:84:58:eb:68:97: ac:f2:56:d7:09:61:df:0d:38:f9:29:c2:f8:79:9b:3b:db:1c: 8a:32:02:49:71:99:ac:2b:30:c2:35:ce:44:bc:30:d6:64:d3: c6:30:5f:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnyQ+iD0t+XLW3daz+arjqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMzY0MDJhMTQ0NDJlNmIzYTE1MzlkNjQyNTAxMjhkY2Rk MWVjZGIwHhcNMjUxMDE3MTMwMjQwWhcNMjUxMDE4MTMwMjQwWjAzMTEwLwYDVQQD Eyg2ODgyNzJkMjA5ODRiODg3ZWY1YWU2NWYzNjY5NWJhMGU2YzMxOGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphNbbYlpWqG8HHXYLuk5FwomF3CW RaqUrAC1PZ82xOGAVdk24fqn0zCyjPHPM3pDkbR4hFTVVpFPlXg76jnvqQC7yS1E FHO3UBWfNH5ZPSV4LxQsJtNM5AVIQK0xYt19rcOZeyRm+9wjWqzID6pPVkFZXRZc RT09sNCqs42QyjNN8ZnR9lh7dZ59XcGTl9NI2RWFVgB26WdPSOMrlKhJCpz2GT4g QheXouySJo+9OFhupZ2BSC1J9JZJrgI/GOtrhw7b8cU7RmwWeuNnC+Nret1mEyjI 39Kb96bTWgNRaAhE8yNCwfwGvew5jlDrCIlpGe7FELbp/26/1DzTCaEbWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiCctIJhLiH71rmXzZpW6DmwxjBMB8GA1UdIwQY MBaAFDE2QCoURC5rOhU51kJQEo3N0ezbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVRaQUtoUkVMbXM2RlRuV1FsQVNqYzNSN05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMDA5Y2YtNTljYS00M2JjLWJkNTEt YzBhNDI0ZTY1OTczLzEvTVRaQUtoUkVMbXM2RlRuV1FsQVNqYzNSN05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iMDA5Y2YtNTljYS00M2JjLWJkNTEtYzBhNDI0ZTY1OTcz LzEvTVRaQUtoUkVMbXM2RlRuV1FsQVNqYzNSN05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2vWaFXK XeazJDI6HCrEPMDvHIgq6DtLCaEh7JB/qmmu1Fl/Y9ZmVnl857EIhaSZfZhL5OHx Oe8u3YJFI2orAQFyjT6Bg5z0LFZ4XJzgPQ6X3uXgx4AX9ZZFld0VyND/PXDTJdmL RFA6p48+k9fh4f2GiBYCjcHNHcjGUR2idQuTAci2pZ9J6W80e+CKCX1jjwH+qVOG olJ420mtZwSUpXc4ju1txQFFTradsWNgE+8wIjxT3G2BkNjOAROHiQxKYhzex2dC hazUfcyrQPV16ssvH4RY62iXrPJW1wlh3w04+SnC+HmbO9scijICSXGZrCswwjXO RLww1mTTxjBfBA== -----END CERTIFICATE-----Generated at Tue Dec 23 21:52:59 2025 by rpki-client