This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json) Hash identifier: rVVztHOpphGeqP9mV0rU/G1ir3G1/OPUXm00jSAT/Yk= Subject key identifier: 2D:D0:65:2B:9D:66:64:C3:00:19:57:BD:57:C6:04:2B:5D:21:8D:FC Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a Certificate serial: 019AE8D5893E52A613D9B33595DAE479B7AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft Manifest number: 0719 Signing time: Thu 04 Dec 2025 10:08:19 +0000 Manifest this update: Thu 04 Dec 2025 10:08:19 +0000 Manifest next update: Fri 05 Dec 2025 10:08:19 +0000 Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: yyw3PSc3d9EV5yDhlCapNNDSQRmBQBdGiFsjVrCqRy8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:d5:89:3e:52:a6:13:d9:b3:35:95:da:e4:79:b7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a Validity Not Before: Dec 4 10:08:19 2025 GMT Not After : Dec 5 10:08:19 2025 GMT Subject: CN=2dd0652b9d6664c3001957bd57c6042b5d218dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:4a:ed:5a:19:b9:aa:e8:9c:dc:12:2b:c7: 84:3a:9f:25:af:4b:73:e4:10:d5:bf:a2:b4:f6:05: 6e:72:15:0d:84:89:c3:a7:91:f6:9c:5a:60:73:9a: 9f:da:5d:e9:5a:c0:6b:3e:c2:7f:5e:b6:3e:22:1d: 3a:6a:86:4b:b2:99:96:01:d1:a0:9d:2e:96:7b:04: a6:96:47:c9:4b:48:0d:c0:30:2e:99:c5:1a:20:67: 11:e3:f9:1d:0b:57:85:db:6a:6b:25:36:46:9b:2a: 68:8e:77:d6:8d:63:13:4f:42:bb:da:18:78:0c:38: b7:50:d8:95:3f:36:f9:74:db:3d:d4:48:fc:4a:8f: 37:d4:01:8a:65:ec:a8:3c:56:73:33:fb:b6:5e:21: f0:b4:fd:17:82:38:4c:f0:87:22:f7:da:d3:d9:58: 6c:4c:1b:39:3a:78:b0:e0:86:40:12:9e:03:8f:60: 90:cf:b6:ca:82:fa:f6:82:5c:7e:44:31:6a:2a:60: 3d:29:04:73:43:88:66:37:81:51:c6:a8:13:8a:40: e5:93:ff:d4:37:82:d7:8e:eb:10:c6:2d:5a:c6:99: dc:e0:3a:d8:e5:5c:e6:bd:79:d9:c2:fd:ea:d7:07: db:9f:f6:e3:2f:70:d0:2a:53:88:eb:c9:5e:3d:c2: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D0:65:2B:9D:66:64:C3:00:19:57:BD:57:C6:04:2B:5D:21:8D:FC X509v3 Authority Key Identifier: keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a2:d9:57:47:98:0f:98:cf:31:75:91:85:b6:20:db:84:31: 36:e8:31:11:83:12:2b:80:f0:43:51:15:e4:8d:44:a4:39:ff: 6e:62:b7:d8:93:9f:ed:5d:07:6d:80:58:52:c5:93:89:ba:f4: 74:99:a4:b7:8f:f8:d8:b3:ac:3d:32:e6:b6:8a:58:0b:c8:da: 6b:4f:26:0a:e1:fa:3a:7e:86:fa:e7:2e:4a:7b:78:80:d7:09: d3:a6:a3:45:e9:c1:3d:2f:a8:94:cf:4b:7f:d2:a8:d2:0e:49: 6b:67:e9:dc:79:f0:61:b4:f6:85:d6:63:f3:a0:d4:b4:60:e0: 71:d9:21:56:82:36:d6:a3:74:2c:8e:5e:60:34:f2:77:f5:8a: 53:b3:db:09:8a:df:99:9a:1e:80:af:85:06:2a:fb:bf:0b:66: 8b:df:37:2e:fd:c7:b8:32:ab:b4:c0:76:c8:33:61:37:77:4a: 9b:e8:9c:49:8c:c1:26:28:f2:aa:a9:21:34:ae:f9:8b:2f:b1: 06:0a:49:e7:24:fc:26:2a:27:1e:9f:51:fa:2c:43:6b:5e:78: 39:68:de:f3:2b:12:28:f4:ec:8f:0f:86:61:77:3c:2a:08:6b: 5d:3e:12:8c:75:c6:7e:a7:d9:eb:8b:e2:49:56:9f:b4:e4:73: 44:9f:b0:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZro1Yk+UqYT2bM1ldrkebeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjdkMGU0NzEyMmFlZmVmYjYyY2VhMjE2NzRhODEwMjU1 NTliMWEwHhcNMjUxMjA0MTAwODE5WhcNMjUxMjA1MTAwODE5WjAzMTEwLwYDVQQD EygyZGQwNjUyYjlkNjY2NGMzMDAxOTU3YmQ1N2M2MDQyYjVkMjE4ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso5K7VoZuaronNwSK8eEOp8lr0tz 5BDVv6K09gVuchUNhInDp5H2nFpgc5qf2l3pWsBrPsJ/XrY+Ih06aoZLspmWAdGg nS6WewSmlkfJS0gNwDAumcUaIGcR4/kdC1eF22prJTZGmypojnfWjWMTT0K72hh4 DDi3UNiVPzb5dNs91Ej8So831AGKZeyoPFZzM/u2XiHwtP0XgjhM8Ici99rT2Vhs TBs5Oniw4IZAEp4Dj2CQz7bKgvr2glx+RDFqKmA9KQRzQ4hmN4FRxqgTikDlk//U N4LXjusQxi1axpnc4DrY5VzmvXnZwv3q1wfbn/bjL3DQKlOI68lePcKPnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3QZSudZmTDABlXvVfGBCtdIY38MB8GA1UdIwQY MBaAFFv30ORxIq7++2LOohZ0qBAlVZsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19mUTVIRWlydjc3WXM2aUZuU29FQ1ZWbXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOTRjNTAtMmM4Ni00YTU1LThlYjAt MWNmNzIyNTE3YmFmLzEvV19mUTVIRWlydjc3WXM2aUZuU29FQ1ZWbXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wOTRjNTAtMmM4Ni00YTU1LThlYjAtMWNmNzIyNTE3YmFm LzEvV19mUTVIRWlydjc3WXM2aUZuU29FQ1ZWbXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqLZV0eY D5jPMXWRhbYg24QxNugxEYMSK4DwQ1EV5I1EpDn/bmK32JOf7V0HbYBYUsWTibr0 dJmkt4/42LOsPTLmtopYC8jaa08mCuH6On6G+ucuSnt4gNcJ06ajRenBPS+olM9L f9Ko0g5Ja2fp3HnwYbT2hdZj86DUtGDgcdkhVoI21qN0LI5eYDTyd/WKU7PbCYrf mZoegK+FBir7vwtmi983Lv3HuDKrtMB2yDNhN3dKm+icSYzBJijyqqkhNK75iy+x BgpJ5yT8JionHp9R+ixDa154OWje8ysSKPTsjw+GYXc8KghrXT4SjHXGfqfZ64vi SVaftORzRJ+wCg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:47 2025 by rpki-client