This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft File: pcvT2g02IF_SyP0d-VXFC1UB7dE.mft (raw, json) Hash identifier: GTb9p+nNAbIDpLZMmj+axgASRbXGtkvj+RKEQELpNmU= Subject key identifier: D3:41:49:27:13:4A:EB:C4:D5:7F:47:57:F2:C6:46:F1:B3:47:62:AF Authority key identifier: A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1 Certificate issuer: /CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1 Certificate serial: 019B20D048B2E7954E2C8A75E3696B01D802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft Manifest number: 0226 Signing time: Mon 15 Dec 2025 07:01:19 +0000 Manifest this update: Mon 15 Dec 2025 07:01:19 +0000 Manifest next update: Tue 16 Dec 2025 07:01:19 +0000 Files and hashes: 1: pcvT2g02IF_SyP0d-VXFC1UB7dE.crl (hash: 6EOnrI+tUZYIOzdPe9PfS0DXdz1uF83SgmlrL3XsBuo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:48:b2:e7:95:4e:2c:8a:75:e3:69:6b:01:d8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1 Validity Not Before: Dec 15 07:01:19 2025 GMT Not After : Dec 16 07:01:19 2025 GMT Subject: CN=d3414927134aebc4d57f4757f2c646f1b34762af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:c2:9e:54:e1:85:7d:ae:08:2d:c1:a2:56: 09:e0:52:f6:0a:69:0b:bf:23:21:af:e7:17:ed:f0: a2:c2:2e:c5:91:18:62:2b:51:19:46:e1:c0:a1:e6: 20:1e:ee:ee:1c:9b:0a:01:1e:e1:6b:79:da:5c:e1: b1:a0:0e:0d:82:f5:83:f0:c2:37:1b:95:11:14:cf: 91:e2:6d:d6:35:18:c7:cc:0e:76:25:26:94:4f:98: 30:d6:91:94:6e:a1:db:d3:56:b8:02:ea:74:4a:78: 07:d2:9b:b7:66:99:72:fc:04:f3:26:17:e5:96:72: 7a:a9:7a:86:c0:17:e2:8b:15:a5:e3:30:23:da:cf: f4:97:ad:4b:5c:0d:b4:27:4c:fe:f0:20:4a:06:27: a7:86:2b:95:89:4b:89:04:cc:9c:81:a9:dd:18:ad: eb:89:15:b7:97:e5:0b:62:e2:a0:d2:6a:5f:82:38: 23:07:d8:58:96:4f:b7:b7:0a:40:29:86:fe:d7:17: fe:74:02:6b:01:d6:d9:d6:bf:66:6a:86:ec:1a:9a: f7:ff:4b:0a:5a:7f:b8:59:bb:4b:85:bf:ef:50:be: 14:bc:e0:1f:4d:90:96:e6:9c:31:51:6b:62:23:61: 67:21:a1:11:93:e2:07:3e:37:b2:04:d6:b3:8a:ae: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:49:27:13:4A:EB:C4:D5:7F:47:57:F2:C6:46:F1:B3:47:62:AF X509v3 Authority Key Identifier: keyid:A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ed:11:c0:72:91:b4:fb:13:5e:d3:f4:50:36:0e:5b:b5:a8: 3d:60:91:3f:5a:6e:fc:69:26:53:e2:6f:e1:0d:a6:96:eb:8c: fa:a3:72:b8:37:08:0a:21:e5:9c:17:35:b5:cf:44:bc:83:f1: 40:d0:35:f7:39:2b:e4:95:6b:0e:7f:c8:f8:32:21:42:d8:e2: 14:66:91:d0:71:32:e3:54:ad:18:fe:64:86:eb:e8:ca:32:be: e8:bf:47:65:9d:e3:c6:87:fd:d2:bb:9a:82:02:7c:3c:af:5a: 6a:59:72:4e:fb:1e:bd:b2:ef:0f:de:c5:25:c8:de:ee:20:19: a9:ad:de:19:5b:1a:7f:1e:f0:bb:67:07:6f:da:17:8c:36:af: e1:ea:a5:6e:e5:27:fb:23:91:e3:5d:26:f5:14:6d:18:eb:da: 1a:32:30:5f:ff:7f:04:58:f1:4c:b5:03:4e:ab:ec:41:88:91: 8b:50:c3:f6:fa:43:c6:ef:d9:2e:96:5b:53:6c:98:57:d1:ce: 11:82:62:4e:b0:bb:dd:00:87:28:4e:47:3b:73:90:f5:a2:82: 11:17:db:e4:49:0f:ff:3b:fd:59:23:97:49:6d:a8:7b:0e:1f: ce:9d:ea:63:ff:88:df:b9:43:d6:44:be:c7:be:5f:2b:b2:a5: 1c:a3:9f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0Eiy55VOLIp142lrAdgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1Y2JkM2RhMGQzNjIwNWZkMmM4ZmQxZGY5NTVjNTBiNTUw MWVkZDEwHhcNMjUxMjE1MDcwMTE5WhcNMjUxMjE2MDcwMTE5WjAzMTEwLwYDVQQD EyhkMzQxNDkyNzEzNGFlYmM0ZDU3ZjQ3NTdmMmM2NDZmMWIzNDc2MmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9jCnlThhX2uCC3BolYJ4FL2CmkL vyMhr+cX7fCiwi7FkRhiK1EZRuHAoeYgHu7uHJsKAR7ha3naXOGxoA4NgvWD8MI3 G5URFM+R4m3WNRjHzA52JSaUT5gw1pGUbqHb01a4Aup0SngH0pu3Zply/ATzJhfl lnJ6qXqGwBfiixWl4zAj2s/0l61LXA20J0z+8CBKBienhiuViUuJBMycgandGK3r iRW3l+ULYuKg0mpfgjgjB9hYlk+3twpAKYb+1xf+dAJrAdbZ1r9maobsGpr3/0sK Wn+4WbtLhb/vUL4UvOAfTZCW5pwxUWtiI2FnIaERk+IHPjeyBNaziq7G9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNBSScTSuvE1X9HV/LGRvGzR2KvMB8GA1UdIwQY MBaAFKXL09oNNiBf0sj9HflVxQtVAe3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGN2VDJnMDJJRl9TeVAwZC1WWEZDMVVCN2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wOGI5ZjYtNGFjYS00MTMxLWIwODQt MzgyNmMyYTllNzIyLzEvcGN2VDJnMDJJRl9TeVAwZC1WWEZDMVVCN2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wOGI5ZjYtNGFjYS00MTMxLWIwODQtMzgyNmMyYTllNzIy LzEvcGN2VDJnMDJJRl9TeVAwZC1WWEZDMVVCN2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+0RwHKR tPsTXtP0UDYOW7WoPWCRP1pu/GkmU+Jv4Q2mluuM+qNyuDcICiHlnBc1tc9EvIPx QNA19zkr5JVrDn/I+DIhQtjiFGaR0HEy41StGP5khuvoyjK+6L9HZZ3jxof90rua ggJ8PK9aallyTvsevbLvD97FJcje7iAZqa3eGVsafx7wu2cHb9oXjDav4eqlbuUn +yOR410m9RRtGOvaGjIwX/9/BFjxTLUDTqvsQYiRi1DD9vpDxu/ZLpZbU2yYV9HO EYJiTrC73QCHKE5HO3OQ9aKCERfb5EkP/zv9WSOXSW2oew4fzp3qY/+I37lD1kS+ x75fK7KlHKOfpA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:17 2025 by rpki-client