This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft File: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft (raw, json) Hash identifier: DG/hkTumy9QiIC6JyqNLpVCu1qtCPnE0eNLx+LlFMRQ= Subject key identifier: 7E:EB:74:40:C7:B1:5F:39:A3:43:25:42:A6:1D:68:07:D5:0F:55:05 Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74 Certificate issuer: /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374 Certificate serial: 019ADEB91A06CAC084B7E1E993E203AC2EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft Manifest number: 0B66 Signing time: Tue 02 Dec 2025 11:01:03 +0000 Manifest this update: Tue 02 Dec 2025 11:01:03 +0000 Manifest next update: Wed 03 Dec 2025 11:01:03 +0000 Files and hashes: 1: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl (hash: XVYrpH6Vg9CSqZ6ola2AitnjgO+ILQt7AyOptJ8yObs=) 2: tylNMSSvS99Dcyy-HHi_PFuMqa4.roa (hash: ccMlffzxJqfYWwFrr0eYQi/P7Vh6cNEU7oOeSOxzYpY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:b9:1a:06:ca:c0:84:b7:e1:e9:93:e2:03:ac:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374 Validity Not Before: Dec 2 11:01:03 2025 GMT Not After : Dec 3 11:01:03 2025 GMT Subject: CN=7eeb7440c7b15f39a3432542a61d6807d50f5505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:13:d5:34:13:2d:6c:b8:1f:08:e1:8b:8c: d0:cb:4a:8d:4c:9e:76:59:69:91:fa:0c:5b:d6:42: 25:4b:ab:15:6c:e6:f3:7e:06:eb:3b:e3:73:6d:90: 65:5a:e9:8c:15:b6:10:0b:29:51:ec:34:de:44:08: cc:5f:f9:23:f6:ce:6f:f8:19:b2:d2:ad:57:6a:18: c4:80:3a:91:51:7a:e0:9f:87:28:9a:2b:a0:cc:b3: e7:bc:e9:c5:a3:77:93:55:a7:d4:05:bc:19:65:ed: a4:e8:be:83:fd:ed:ed:e6:71:7f:3d:e2:8c:32:26: 79:72:b8:40:0c:4e:c6:f9:dc:63:1e:a1:57:1e:6f: cf:8b:bb:d8:b2:3b:d2:26:a0:59:0c:07:dd:17:73: 24:09:11:2d:3c:bf:42:a3:ba:0d:78:e0:b0:30:bb: 48:37:c3:28:db:e9:ee:58:98:1a:bc:f8:00:87:c2: c1:68:32:64:58:bf:f8:41:6b:f4:be:8e:c9:7a:ed: a3:42:2c:5c:4c:44:85:2f:22:69:a3:d6:86:4f:d8: d5:fe:a6:fd:ad:13:38:ca:3b:42:1c:0c:7e:83:8d: d3:02:67:ed:33:a3:a0:40:63:ca:6c:7f:ab:95:f0: 76:6d:d2:c5:44:09:0d:87:94:72:1f:ec:e1:15:c7: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EB:74:40:C7:B1:5F:39:A3:43:25:42:A6:1D:68:07:D5:0F:55:05 X509v3 Authority Key Identifier: keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:69:7b:cc:67:88:d2:fd:ce:49:c7:cb:3a:a7:5a:9e:ee:9a: 35:ba:55:8b:32:8b:cf:42:21:a1:2f:f1:77:36:24:ff:09:9e: ba:8b:21:ea:46:58:90:47:c0:26:e3:93:cd:35:18:d4:63:8d: 57:44:c7:f4:9b:1e:5c:b0:e6:81:e9:22:18:fc:11:db:28:f9: cb:a1:d4:7d:b2:46:a7:55:e9:b6:2c:2e:4f:18:94:d0:e8:be: ef:c3:d5:a3:02:06:d9:3a:f2:77:7b:ae:8f:fd:af:c0:ab:f2: fb:eb:42:1e:70:8f:2d:63:1a:59:bd:4a:79:33:93:6f:65:68: 0c:88:cc:29:28:76:0d:48:fe:1e:6f:5c:22:28:3e:af:3f:9a: e6:44:a2:95:b7:69:40:3b:ae:9b:2a:ad:41:63:57:36:64:8c: 19:27:01:b7:88:99:8d:9b:27:52:fd:8e:9b:49:5f:4a:cc:3f: 60:f2:cf:b8:33:fa:c0:1a:e7:c5:a9:0d:e8:6a:7a:e3:d1:82: 69:29:56:d2:03:39:b0:fd:0b:fe:bb:d9:b5:7f:b4:1e:14:47: c9:4d:40:1b:3b:c0:80:6b:06:af:5a:8a:9f:b2:40:3f:96:3a: dd:5a:2c:5d:57:9d:4a:47:54:4d:e7:bc:40:20:3d:ee:44:0a: 52:eb:da:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZreuRoGysCEt+Hpk+IDrC7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWZlMGFlMjVjNmVhZTI3NzYzZGNkZWM1MWEwZTEwZWJj NmMzNzQwHhcNMjUxMjAyMTEwMTAzWhcNMjUxMjAzMTEwMTAzWjAzMTEwLwYDVQQD Eyg3ZWViNzQ0MGM3YjE1ZjM5YTM0MzI1NDJhNjFkNjgwN2Q1MGY1NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+0T1TQTLWy4Hwjhi4zQy0qNTJ52 WWmR+gxb1kIlS6sVbObzfgbrO+NzbZBlWumMFbYQCylR7DTeRAjMX/kj9s5v+Bmy 0q1XahjEgDqRUXrgn4comiugzLPnvOnFo3eTVafUBbwZZe2k6L6D/e3t5nF/PeKM MiZ5crhADE7G+dxjHqFXHm/Pi7vYsjvSJqBZDAfdF3MkCREtPL9Co7oNeOCwMLtI N8Mo2+nuWJgavPgAh8LBaDJkWL/4QWv0vo7Jeu2jQixcTESFLyJpo9aGT9jV/qb9 rRM4yjtCHAx+g43TAmftM6OgQGPKbH+rlfB2bdLFRAkNh5RyH+zhFcexoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7rdEDHsV85o0MlQqYdaAfVD1UFMB8GA1UdIwQY MBaAFB5f4K4lxurid2Pc3sUaDhDrxsN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxfZ3JpWEc2dUozWTl6ZXhSb09FT3ZHdzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NmZiMjItMTI0Yy00ODY2LThlNGQt OGI3OTJhNDJkMGVmLzEvSGxfZ3JpWEc2dUozWTl6ZXhSb09FT3ZHdzNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83NmZiMjItMTI0Yy00ODY2LThlNGQtOGI3OTJhNDJkMGVm LzEvSGxfZ3JpWEc2dUozWTl6ZXhSb09FT3ZHdzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWl7zGeI 0v3OScfLOqdanu6aNbpVizKLz0IhoS/xdzYk/wmeuosh6kZYkEfAJuOTzTUY1GON V0TH9JseXLDmgekiGPwR2yj5y6HUfbJGp1XptiwuTxiU0Oi+78PVowIG2Tryd3uu j/2vwKvy++tCHnCPLWMaWb1KeTOTb2VoDIjMKSh2DUj+Hm9cIig+rz+a5kSilbdp QDuumyqtQWNXNmSMGScBt4iZjZsnUv2Om0lfSsw/YPLPuDP6wBrnxakN6Gp649GC aSlW0gM5sP0L/rvZtX+0HhRHyU1AGzvAgGsGr1qKn7JAP5Y63VosXVedSkdUTee8 QCA97kQKUuvaSQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:46:17 2025 by rpki-client