This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft File: Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json) Hash identifier: H8KvKPNm0VCd7wN1r/SAJygp3T3MRgbtdqQSw98CLAA= Subject key identifier: FF:65:EC:CC:5E:9C:64:F4:A9:99:56:78:1C:2D:08:64:F5:98:8D:93 Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9 Certificate issuer: /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9 Certificate serial: 019A81617BF86A2A86872B50FAC59987CDC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft Manifest number: 0FE2 Signing time: Fri 14 Nov 2025 08:00:40 +0000 Manifest this update: Fri 14 Nov 2025 08:00:40 +0000 Manifest next update: Sat 15 Nov 2025 08:00:40 +0000 Files and hashes: 1: 4Kmif40dDkly4NuYVwMwrvfokPU.roa (hash: 9ux9u4A+UskZlpKx7LSeZ84U4P8fiZhv7BuICKdCRAY=) 2: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: jujQJyNYN3CDJSyE2kVNMikK7eeS4M5XaUcD+ZCnRzY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:61:7b:f8:6a:2a:86:87:2b:50:fa:c5:99:87:cd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9 Validity Not Before: Nov 14 08:00:40 2025 GMT Not After : Nov 15 08:00:40 2025 GMT Subject: CN=ff65eccc5e9c64f4a99956781c2d0864f5988d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:3e:7b:89:e0:b8:61:80:ce:e9:08:09:f4: e2:3d:08:25:89:e8:a2:e5:b7:32:11:db:f5:6c:be: 68:5c:77:24:b9:04:aa:3e:69:14:bb:62:1c:b4:4d: d9:94:4c:86:3e:d9:c0:f5:e2:b0:e5:f8:75:24:14: ca:dd:fa:79:79:06:14:17:8e:8e:ea:c0:6e:61:c0: 2d:da:17:2e:c9:a4:c5:16:56:3f:c0:54:06:6b:91: 2e:6b:d1:bc:5a:d2:b9:04:8b:38:cf:8e:26:14:32: 3a:a6:5e:10:ab:2b:7c:38:68:c5:2c:3e:6b:35:dd: 6f:ed:0b:95:a6:43:ec:3b:d7:fa:b2:4d:3e:ef:de: 01:d8:2f:9a:a0:81:63:c2:e1:e5:be:b8:c2:7b:a7: 5a:13:fb:1b:0a:60:aa:e7:19:77:e7:bd:f0:12:79: 14:20:51:14:2c:ae:9d:31:78:8d:ca:75:89:a4:f2: 85:ef:16:83:72:ab:8d:e9:0b:7f:0a:0c:27:2c:bd: bd:b9:a5:01:c0:2b:cc:ec:08:3d:71:f3:37:83:44: 23:d5:56:b4:e3:38:97:06:29:61:80:22:ee:60:c0: b9:0c:93:f8:46:15:d3:04:db:5e:b5:04:a7:5f:31: 7d:6f:d8:8a:fd:d2:a0:71:9d:38:99:a9:68:4b:a7: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:EC:CC:5E:9C:64:F4:A9:99:56:78:1C:2D:08:64:F5:98:8D:93 X509v3 Authority Key Identifier: keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ca:8e:3a:1d:e5:50:ae:6c:79:cf:fa:1b:3b:4f:f0:a3:a1: bd:64:cc:b8:a6:6d:55:3b:4a:e0:45:2b:be:69:44:a1:e3:fa: 54:ed:67:a5:70:c2:6d:3e:80:96:ad:3a:f2:17:0a:f9:2a:e0: cc:fb:ff:59:3c:3a:6b:25:bf:db:ea:c8:02:af:ce:7a:46:f8: da:5e:98:6b:1d:6a:9a:f3:8f:06:58:47:78:7f:af:3e:8d:32: 72:5f:18:42:e6:0f:4d:54:55:61:3f:07:ad:e3:ec:bc:57:d9: 46:5d:4a:3c:93:e6:06:b9:a3:fb:73:90:fb:d6:e1:62:a9:94: 30:4f:99:3a:8c:ef:d6:08:65:48:e3:18:79:7f:93:aa:3d:1b: 4b:e6:dc:8f:0d:1d:0d:be:b6:a9:a6:da:8c:fb:01:c9:e8:18: 63:6c:5f:1b:7b:15:9a:51:cb:e2:8f:28:58:5e:64:98:73:23: fe:87:15:66:1b:9f:49:71:4e:4f:33:5e:f1:76:16:29:26:b2: 76:4e:18:21:b1:c3:a3:d1:4d:ca:7f:ef:aa:be:af:08:e8:60: 8e:e1:81:1f:05:d2:35:a7:2f:bc:4b:5f:58:2b:38:43:ab:ad: e1:c5:69:5e:21:4e:d9:c9:94:a4:bd:7c:5e:e6:8c:2e:c1:8c: 51:fc:5d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqBYXv4aiqGhytQ+sWZh83BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzN2Q2NGQ0NzI1NjNiN2U4NzNmNWI3OWY5MWM5ZDNmZmZj M2RiZjkwHhcNMjUxMTE0MDgwMDQwWhcNMjUxMTE1MDgwMDQwWjAzMTEwLwYDVQQD EyhmZjY1ZWNjYzVlOWM2NGY0YTk5OTU2NzgxYzJkMDg2NGY1OTg4ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0U+e4nguGGAzukICfTiPQglieii 5bcyEdv1bL5oXHckuQSqPmkUu2IctE3ZlEyGPtnA9eKw5fh1JBTK3fp5eQYUF46O 6sBuYcAt2hcuyaTFFlY/wFQGa5Eua9G8WtK5BIs4z44mFDI6pl4Qqyt8OGjFLD5r Nd1v7QuVpkPsO9f6sk0+794B2C+aoIFjwuHlvrjCe6daE/sbCmCq5xl3573wEnkU IFEULK6dMXiNynWJpPKF7xaDcquN6Qt/CgwnLL29uaUBwCvM7Ag9cfM3g0Qj1Va0 4ziXBilhgCLuYMC5DJP4RhXTBNtetQSnXzF9b9iK/dKgcZ04maloS6emZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9l7MxenGT0qZlWeBwtCGT1mI2TMB8GA1UdIwQY MBaAFGN9ZNRyVjt+hz9befkcnT//w9v5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTMxazFISldPMzZIUDF0NS1SeWRQX19EMl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYmQ2YjQtZWViMi00ZjFiLThhYWYt ODE3YWY4YTc2MjUwLzEvWTMxazFISldPMzZIUDF0NS1SeWRQX19EMl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yYmQ2YjQtZWViMi00ZjFiLThhYWYtODE3YWY4YTc2MjUw LzEvWTMxazFISldPMzZIUDF0NS1SeWRQX19EMl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8qOOh3l UK5sec/6GztP8KOhvWTMuKZtVTtK4EUrvmlEoeP6VO1npXDCbT6Alq068hcK+Srg zPv/WTw6ayW/2+rIAq/Oekb42l6Yax1qmvOPBlhHeH+vPo0ycl8YQuYPTVRVYT8H rePsvFfZRl1KPJPmBrmj+3OQ+9bhYqmUME+ZOozv1ghlSOMYeX+Tqj0bS+bcjw0d Db62qabajPsByegYY2xfG3sVmlHL4o8oWF5kmHMj/ocVZhufSXFOTzNe8XYWKSay dk4YIbHDo9FNyn/vqr6vCOhgjuGBHwXSNacvvEtfWCs4Q6ut4cVpXiFO2cmUpL18 XuaMLsGMUfxdlQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:48:54 2025 by rpki-client