This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json) Hash identifier: ioheDqDCxKiRc6+01QAxorF07BunMFB9aiE8FW/6S2I= Subject key identifier: B1:AD:62:4E:81:22:7B:83:59:B3:9B:5B:40:36:E7:47:E6:AA:90:3D Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60 Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60 Certificate serial: 01995C7C0067399571161105ACEE38A09FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft Manifest number: 168C Signing time: Thu 18 Sep 2025 11:00:54 +0000 Manifest this update: Thu 18 Sep 2025 11:00:54 +0000 Manifest next update: Fri 19 Sep 2025 11:00:54 +0000 Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: HCQtLvKkprpfWX63/Zl+YkwiTIO9XaJEKavo4BiZMK0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5c:7c:00:67:39:95:71:16:11:05:ac:ee:38:a0:9f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60 Validity Not Before: Sep 18 11:00:54 2025 GMT Not After : Sep 19 11:00:54 2025 GMT Subject: CN=b1ad624e81227b8359b39b5b4036e747e6aa903d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:a2:6b:62:0c:7b:0b:7a:f5:da:dd:56:a5: fb:b3:47:f8:e9:57:54:24:9a:58:80:55:97:39:fb: 96:de:d7:dc:9a:ac:4c:09:8f:21:58:4c:34:ef:d1: e4:26:ae:04:3c:91:74:ce:d4:3a:9c:46:45:a5:a2: 0e:02:04:b1:85:ca:2d:19:33:e4:32:22:06:ab:ab: 43:3e:fe:99:55:4a:c9:5e:fc:98:93:51:05:f1:f1: 10:9d:23:02:c7:f1:d7:53:ff:7a:43:2f:93:9e:db: 68:48:1a:02:6e:ef:b3:b7:20:0a:58:40:39:11:e3: 02:55:6d:b4:ed:cd:a0:f0:2c:7c:dd:21:8f:04:9e: 69:09:e8:20:b4:ab:45:ce:c9:26:96:57:c8:63:86: cb:3c:08:54:a9:88:5e:75:d3:97:0d:ac:8a:45:dc: 9c:6e:54:2b:c0:05:16:28:77:48:5c:db:fd:4e:4a: f9:96:dc:8f:7b:f0:00:70:c7:fd:a3:35:80:26:5c: db:22:00:a0:3e:1a:0c:e9:e3:b8:7f:91:47:fc:86: 64:22:01:99:9d:bc:61:52:89:85:2e:62:0f:43:cf: b9:2c:52:f4:eb:78:29:8b:c6:61:1d:af:69:7d:93: 5e:71:d0:56:f7:cb:3e:59:ee:c0:d0:73:aa:b4:47: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AD:62:4E:81:22:7B:83:59:B3:9B:5B:40:36:E7:47:E6:AA:90:3D X509v3 Authority Key Identifier: keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b1:d2:2c:b3:10:e6:a0:53:5a:35:44:0f:35:5c:4e:1b:8c: d0:96:f7:35:6d:07:c2:4b:9a:f7:91:cf:5a:06:0b:a9:81:da: 08:31:1d:5c:fc:7e:07:a9:5e:5a:5f:4a:42:bd:35:a8:c5:6d: cd:2a:0b:c9:14:ad:43:43:db:ca:05:be:bf:8a:dd:cf:fd:36: 84:27:bf:64:79:2c:9b:27:61:29:77:f1:55:f2:b6:c6:0d:8a: 45:05:a4:b8:01:29:60:a0:b0:5d:ed:8b:eb:88:9a:d3:50:ca: c1:c0:63:4f:55:79:40:34:66:f0:35:de:d7:7e:dd:c1:2c:82: 14:14:f9:fe:d6:23:23:04:d2:e5:57:86:b0:42:ed:e8:3b:04: b0:ff:b6:ff:1d:b4:cb:52:13:7b:5e:b4:c5:a5:66:59:ab:9c: db:1c:c8:71:be:0e:5b:c4:02:83:19:fc:52:9b:fa:ed:a7:96: bd:1c:45:ba:78:3e:56:3a:e5:2e:11:75:89:b6:4e:d1:49:37: a3:93:44:62:37:46:2f:96:97:60:d6:41:88:0f:7f:d8:03:07: 56:a3:34:2b:01:10:39:f5:b3:c9:1a:cf:0e:8f:00:18:5a:b3: d1:11:0e:84:f2:8f:ab:ca:a7:ec:02:08:ec:a9:42:4f:9d:4a: ab:69:d7:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlcfABnOZVxFhEFrO44oJ/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Yjg4OGM3M2M4YmQ5MmNhYjJiMmY0NjVmZTY3NWVlMWY2 ZTlkNjAwHhcNMjUwOTE4MTEwMDU0WhcNMjUwOTE5MTEwMDU0WjAzMTEwLwYDVQQD EyhiMWFkNjI0ZTgxMjI3YjgzNTliMzliNWI0MDM2ZTc0N2U2YWE5MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B+ia2IMewt69drdVqX7s0f46VdU JJpYgFWXOfuW3tfcmqxMCY8hWEw079HkJq4EPJF0ztQ6nEZFpaIOAgSxhcotGTPk MiIGq6tDPv6ZVUrJXvyYk1EF8fEQnSMCx/HXU/96Qy+TnttoSBoCbu+ztyAKWEA5 EeMCVW207c2g8Cx83SGPBJ5pCeggtKtFzskmllfIY4bLPAhUqYheddOXDayKRdyc blQrwAUWKHdIXNv9Tkr5ltyPe/AAcMf9ozWAJlzbIgCgPhoM6eO4f5FH/IZkIgGZ nbxhUomFLmIPQ8+5LFL063gpi8ZhHa9pfZNecdBW98s+We7A0HOqtEcPYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGtYk6BInuDWbObW0A250fmqpA9MB8GA1UdIwQY MBaAFAW4iMc8i9ksqysvRl/mde4fbp1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJpSXh6eUwyU3lyS3k5R1gtWjE3aDl1bldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xNTQxZTAtODhkNy00OGRkLTg5YmMt Y2U2MzY3ZTQ0ZTZiLzEvQmJpSXh6eUwyU3lyS3k5R1gtWjE3aDl1bldBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xNTQxZTAtODhkNy00OGRkLTg5YmMtY2U2MzY3ZTQ0ZTZi LzEvQmJpSXh6eUwyU3lyS3k5R1gtWjE3aDl1bldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbHSLLMQ 5qBTWjVEDzVcThuM0Jb3NW0Hwkua95HPWgYLqYHaCDEdXPx+B6leWl9KQr01qMVt zSoLyRStQ0PbygW+v4rdz/02hCe/ZHksmydhKXfxVfK2xg2KRQWkuAEpYKCwXe2L 64ia01DKwcBjT1V5QDRm8DXe137dwSyCFBT5/tYjIwTS5VeGsELt6DsEsP+2/x20 y1ITe160xaVmWauc2xzIcb4OW8QCgxn8Upv67aeWvRxFung+VjrlLhF1ibZO0Uk3 o5NEYjdGL5aXYNZBiA9/2AMHVqM0KwEQOfWzyRrPDo8AGFqz0REOhPKPq8qn7AII 7KlCT51Kq2nXuw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:55 2025 by rpki-client