This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft File: M7-dbirEKjrXVDcRN9XSSyRz0mU.mft (raw, json) Hash identifier: iP9VVzZYwPbUluyH2CX/qJGAXiUrTQKnrxR+Cfx7xuo= Subject key identifier: 97:3C:B4:BD:09:4E:46:2C:53:D7:B5:DA:38:4A:12:E2:CC:CF:52:81 Authority key identifier: 33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65 Certificate issuer: /CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265 Certificate serial: 019993D7FB94EC273712FBF04155AE315CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft Manifest number: 017F Signing time: Mon 29 Sep 2025 05:00:29 +0000 Manifest this update: Mon 29 Sep 2025 05:00:29 +0000 Manifest next update: Tue 30 Sep 2025 05:00:29 +0000 Files and hashes: 1: M7-dbirEKjrXVDcRN9XSSyRz0mU.crl (hash: SZzNzah3bqWOoDN9iXQGjNY2Webhxq49XA+8M0tcIfI=) 2: X8KnFrMZvhtZ4Wnd7sCuYYb-z5U.roa (hash: GNsSYGNSDwNlfyU/HljGk6wnUDcc+id8yWHC280iL+E=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:93:d7:fb:94:ec:27:37:12:fb:f0:41:55:ae:31:5c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265 Validity Not Before: Sep 29 05:00:29 2025 GMT Not After : Sep 30 05:00:29 2025 GMT Subject: CN=973cb4bd094e462c53d7b5da384a12e2cccf5281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:1c:1b:44:ff:7a:1c:27:c7:1a:d7:12:4f: 8d:df:d3:96:d1:4b:f7:4b:fb:75:9a:5d:91:ca:b0: 51:c2:5f:36:a3:2c:ca:f9:ef:cd:bb:0a:d0:74:c6: 8c:2c:4d:b2:fa:b7:c8:9c:bd:58:e3:81:e5:30:86: 0d:a0:4f:76:70:1d:da:4b:31:d6:da:11:f0:23:d0: 88:db:f0:c3:7c:9d:f9:36:83:a4:ee:04:db:4f:09: a6:cd:f2:d5:ed:02:41:1c:4c:15:c6:d4:c9:36:b0: be:e8:1e:2f:80:08:90:d4:ff:18:22:d4:20:7d:00: 55:3a:2c:bb:25:b4:5d:1a:e2:a2:0e:37:86:97:7b: ab:0a:37:a3:57:b2:6f:1e:56:2b:35:9d:bf:a4:19: d5:4f:e6:d6:16:50:6d:1e:31:91:30:37:78:a8:76: 23:ef:fd:2b:3f:24:d2:28:53:ce:f2:cc:40:bc:ea: 95:97:98:54:50:24:90:d7:84:be:20:12:0f:44:b9: 79:91:69:de:ed:d8:eb:6e:44:c1:59:09:ad:ea:0e: 4a:2a:c8:e9:da:07:23:62:6a:ea:c3:93:60:7f:f1: f5:2f:fa:b2:5c:69:f2:11:45:b7:e9:84:a8:3b:09: 21:f3:6b:48:35:5f:2a:57:82:38:ef:25:72:d4:b3: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:B4:BD:09:4E:46:2C:53:D7:B5:DA:38:4A:12:E2:CC:CF:52:81 X509v3 Authority Key Identifier: keyid:33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:cb:a2:2c:15:60:14:00:0d:bf:86:96:d7:f9:b7:ac:8f:8a: 3b:43:dd:ec:b0:3f:94:e0:39:b4:02:7c:a9:e4:6b:2f:70:fe: 6e:1d:29:f6:ce:97:3a:63:0d:a5:26:eb:94:2e:6e:61:29:9c: e8:00:41:30:db:f8:7c:87:fa:0a:03:9e:49:b3:ea:4d:a1:13: d3:22:c8:a1:21:3a:92:11:f6:ad:56:ab:37:a8:c1:76:73:55: b0:d0:26:1b:f3:bd:dd:47:b0:17:61:32:b2:6e:84:7c:c4:30: 2f:6e:c8:1e:64:c9:83:34:74:bd:47:f0:f4:9a:59:65:35:81: e8:c5:3a:56:ec:c6:0d:1a:4d:4c:5c:9e:e0:64:6e:f0:6d:3b: 80:3e:30:3c:59:db:3e:aa:ff:4b:2a:1b:94:b5:8b:57:63:34: 7a:b1:63:90:90:a9:01:3c:0c:b4:1a:63:82:50:9d:d1:9e:41: 7f:ef:90:43:2d:5a:31:dd:d9:08:50:7e:3d:e4:90:48:34:40: 5a:f5:9f:1a:7b:79:44:a5:e7:9c:51:43:b9:d4:26:ae:d1:1c: a1:3e:b9:b1:1d:6b:3d:a2:f7:e8:2e:a4:c8:b3:9b:b4:12:37: 4e:21:9f:6c:16:d4:ab:c2:34:38:12:8b:13:46:b7:d6:cf:45: 9e:b5:48:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZmT1/uU7Cc3EvvwQVWuMVywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYmY5ZDZlMmFjNDJhM2FkNzU0MzcxMTM3ZDVkMjRiMjQ3 M2QyNjUwHhcNMjUwOTI5MDUwMDI5WhcNMjUwOTMwMDUwMDI5WjAzMTEwLwYDVQQD Eyg5NzNjYjRiZDA5NGU0NjJjNTNkN2I1ZGEzODRhMTJlMmNjY2Y1MjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJIcG0T/ehwnxxrXEk+N39OW0Uv3 S/t1ml2RyrBRwl82oyzK+e/NuwrQdMaMLE2y+rfInL1Y44HlMIYNoE92cB3aSzHW 2hHwI9CI2/DDfJ35NoOk7gTbTwmmzfLV7QJBHEwVxtTJNrC+6B4vgAiQ1P8YItQg fQBVOiy7JbRdGuKiDjeGl3urCjejV7JvHlYrNZ2/pBnVT+bWFlBtHjGRMDd4qHYj 7/0rPyTSKFPO8sxAvOqVl5hUUCSQ14S+IBIPRLl5kWne7djrbkTBWQmt6g5KKsjp 2gcjYmrqw5Ngf/H1L/qyXGnyEUW36YSoOwkh82tINV8qV4I47yVy1LNwzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc8tL0JTkYsU9e12jhKEuLMz1KBMB8GA1UdIwQY MBaAFDO/nW4qxCo611Q3ETfV0kskc9JlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xMzNhODMtODg5Mi00YTc1LWE1YTQt NTU1OWViN2NjMjE4LzEvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xMzNhODMtODg5Mi00YTc1LWE1YTQtNTU1OWViN2NjMjE4 LzEvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsuiLBVg FAANv4aW1/m3rI+KO0Pd7LA/lOA5tAJ8qeRrL3D+bh0p9s6XOmMNpSbrlC5uYSmc 6ABBMNv4fIf6CgOeSbPqTaET0yLIoSE6khH2rVarN6jBdnNVsNAmG/O93UewF2Ey sm6EfMQwL27IHmTJgzR0vUfw9JpZZTWB6MU6VuzGDRpNTFye4GRu8G07gD4wPFnb Pqr/SyoblLWLV2M0erFjkJCpATwMtBpjglCd0Z5Bf++QQy1aMd3ZCFB+PeSQSDRA WvWfGnt5RKXnnFFDudQmrtEcoT65sR1rPaL36C6kyLObtBI3TiGfbBbUq8I0OBKL E0a31s9FnrVInw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:39:36 2025 by rpki-client