This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json) Hash identifier: aP8N0HZnkWDLd7Q3DX5SQoXGBG7wO42HmXrtKzn0jck= Subject key identifier: 0F:9F:2B:E9:40:A9:2C:7A:6F:29:1B:6E:6D:AA:65:87:D2:1C:05:E5 Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9 Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9 Certificate serial: 019AE3A92A130D0DF6EBE877BC592BD0B104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft Manifest number: 064E Signing time: Wed 03 Dec 2025 10:01:45 +0000 Manifest this update: Wed 03 Dec 2025 10:01:45 +0000 Manifest next update: Thu 04 Dec 2025 10:01:45 +0000 Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: oFCLjSulGBWlDHVMGfq01QL5Tl1F/NV/9Kqpz9ZRUvM=) 2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a9:2a:13:0d:0d:f6:eb:e8:77:bc:59:2b:d0:b1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9 Validity Not Before: Dec 3 10:01:45 2025 GMT Not After : Dec 4 10:01:45 2025 GMT Subject: CN=0f9f2be940a92c7a6f291b6e6daa6587d21c05e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:e4:74:ad:58:02:fa:01:34:24:f7:6c:66: 4e:62:c4:dc:9d:d5:cb:ad:cd:b2:c1:a7:07:99:de: c8:be:43:03:34:03:fd:77:07:f8:01:df:0f:50:93: 58:21:54:1c:f1:b3:93:e8:21:3b:39:de:61:1e:99: 8b:42:8b:33:bd:01:cc:a6:de:e5:d1:f1:16:f6:04: 87:12:d1:ee:6e:74:92:e2:62:a6:dd:c3:81:7c:74: f7:3b:a8:5e:a5:fb:ef:eb:6a:5e:7e:00:6a:9f:47: da:f0:28:db:0a:26:ba:f5:a7:2c:9e:ab:f4:46:64: 71:53:20:b8:2e:6d:6a:11:d4:5a:29:e9:ea:ab:7a: 9a:01:3e:8c:84:a0:9d:2c:1b:d8:52:ff:2e:13:80: c5:20:7d:56:5c:ea:aa:4d:c3:a7:bf:92:e9:03:c7: 77:1f:dc:1f:93:37:64:09:8d:ad:7a:51:e3:8f:0a: 7c:89:21:d1:2a:3b:09:37:73:af:13:3d:66:cc:ef: 5b:e0:03:54:9c:1b:7a:7e:46:dc:30:e5:0b:ff:80: e4:b9:ca:2c:79:f8:77:35:a2:08:6f:e6:06:62:ec: 6d:bf:7b:5d:8c:50:bb:03:c7:58:e3:45:47:ba:9e: 7f:4a:4e:b4:b5:53:a1:e9:5c:f2:60:29:e9:64:76: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9F:2B:E9:40:A9:2C:7A:6F:29:1B:6E:6D:AA:65:87:D2:1C:05:E5 X509v3 Authority Key Identifier: keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:88:78:b6:1d:36:d5:93:be:46:b5:e3:42:25:fe:a6:d6:c4: 4f:47:e4:72:22:92:8f:c5:e3:7b:f2:52:41:14:d3:16:ad:4c: b0:8b:c0:13:56:de:e1:79:3e:09:48:35:d5:f0:40:f5:e1:35: da:ce:ef:f0:f4:ed:8d:5f:2e:83:af:cf:78:59:57:35:07:5e: 4d:19:a1:84:52:5c:68:01:46:ae:15:1f:c9:ff:ec:16:7d:f4: c1:d7:b8:12:09:b1:d7:3e:fd:4b:0b:95:62:53:4a:ca:6b:1b: 25:1b:e2:01:86:9a:ed:f5:f5:6d:ec:4d:d5:c0:61:0b:11:a2: 40:04:9c:5c:be:cd:2f:23:1b:24:ec:63:b7:78:43:ca:8e:c7: eb:f4:4b:60:02:b5:1b:d3:78:14:6b:2d:9a:e2:cc:1e:25:47: 92:70:47:f3:ba:14:9a:5f:11:63:b1:b4:2d:3a:43:ca:83:4b: 39:34:80:50:a8:86:fc:6e:05:a9:d9:23:25:dd:5b:d9:9a:ce: 52:85:f9:67:4b:58:97:2d:d6:92:fe:dd:80:b4:a6:83:6f:9d: 53:87:5c:90:2b:29:16:3a:cd:8e:3a:e3:59:c2:9f:96:2e:e3: 38:5d:a8:b6:18:9e:b8:11:53:4e:1a:26:53:3d:5f:d7:e0:7a: bb:4e:13:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjqSoTDQ326+h3vFkr0LEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWE4MmJlMWUxNjQyMmY5YTg4NTQ5YWY2ZDU0MjQ4MWQ2 OTFhYzkwHhcNMjUxMjAzMTAwMTQ1WhcNMjUxMjA0MTAwMTQ1WjAzMTEwLwYDVQQD EygwZjlmMmJlOTQwYTkyYzdhNmYyOTFiNmU2ZGFhNjU4N2QyMWMwNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUnkdK1YAvoBNCT3bGZOYsTcndXL rc2ywacHmd7IvkMDNAP9dwf4Ad8PUJNYIVQc8bOT6CE7Od5hHpmLQoszvQHMpt7l 0fEW9gSHEtHubnSS4mKm3cOBfHT3O6hepfvv62pefgBqn0fa8CjbCia69acsnqv0 RmRxUyC4Lm1qEdRaKenqq3qaAT6MhKCdLBvYUv8uE4DFIH1WXOqqTcOnv5LpA8d3 H9wfkzdkCY2telHjjwp8iSHRKjsJN3OvEz1mzO9b4ANUnBt6fkbcMOUL/4Dkucos efh3NaIIb+YGYuxtv3tdjFC7A8dY40VHup5/Sk60tVOh6VzyYCnpZHaJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+fK+lAqSx6bykbbm2qZYfSHAXlMB8GA1UdIwQY MBaAFEGagr4eFkIvmohUmvbVQkgdaRrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MDAzYmQtNDk0ZC00MjQ2LWJlOTQt Yzg2NTlmNzZhMmVhLzEvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80MDAzYmQtNDk0ZC00MjQ2LWJlOTQtYzg2NTlmNzZhMmVh LzEvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4h4th02 1ZO+RrXjQiX+ptbET0fkciKSj8Xje/JSQRTTFq1MsIvAE1be4Xk+CUg11fBA9eE1 2s7v8PTtjV8ug6/PeFlXNQdeTRmhhFJcaAFGrhUfyf/sFn30wde4Egmx1z79SwuV YlNKymsbJRviAYaa7fX1bexN1cBhCxGiQAScXL7NLyMbJOxjt3hDyo7H6/RLYAK1 G9N4FGstmuLMHiVHknBH87oUml8RY7G0LTpDyoNLOTSAUKiG/G4FqdkjJd1b2ZrO UoX5Z0tYly3Wkv7dgLSmg2+dU4dckCspFjrNjjrjWcKfli7jOF2othieuBFTThom Uz1f1+B6u04TlA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:52 2026 by rpki-client