This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft File: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json) Hash identifier: E8BQsQFiijgvhu3+M3aY6ne7HRj+BuMgXEfsR2/Yl3s= Subject key identifier: 51:6B:C1:25:96:C9:8E:C8:00:96:46:B9:C3:AA:9E:C3:3E:F8:10:D4 Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48 Certificate issuer: /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248 Certificate serial: 019A812B92D57041B043DFD19EB313ACA1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft Manifest number: 1725 Signing time: Fri 14 Nov 2025 07:01:47 +0000 Manifest this update: Fri 14 Nov 2025 07:01:47 +0000 Manifest next update: Sat 15 Nov 2025 07:01:47 +0000 Files and hashes: 1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: yTtWlxEPeMlI7V49iP/cr8vhQHuaUP3V7roLq9fXSTs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:2b:92:d5:70:41:b0:43:df:d1:9e:b3:13:ac:a1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248 Validity Not Before: Nov 14 07:01:47 2025 GMT Not After : Nov 15 07:01:47 2025 GMT Subject: CN=516bc12596c98ec8009646b9c3aa9ec33ef810d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:35:b2:ce:d5:c3:be:7f:cb:7e:25:fc:4d: 42:44:c0:3f:31:00:18:be:29:6a:4d:50:7d:f8:ee: fe:ff:fa:ce:02:69:fd:0b:48:cf:5d:11:ec:9a:be: 6a:60:8b:c5:b3:8d:8c:71:6e:10:61:a1:7d:9a:ba: ba:ff:2b:69:d9:e2:01:1e:3f:06:57:09:ef:fe:75: 58:b0:fe:78:12:d2:7a:ab:92:ff:b1:4c:4a:8d:88: 42:f1:c4:0e:1d:26:76:66:c3:b4:2c:3f:e8:44:8c: 62:29:cb:6a:09:16:12:56:8e:0e:a6:5e:ca:bb:59: 30:ae:57:69:c4:16:92:31:14:7a:a7:6c:9b:14:55: 24:ec:f8:b4:dd:4c:e0:9c:d5:db:79:29:f1:c7:59: 8a:ce:1c:89:b1:38:0f:f4:3c:46:96:4a:14:69:e6: 9c:84:43:c8:47:9d:00:84:6c:ee:6b:cb:ac:9e:05: b4:c3:6e:d9:41:ef:ad:41:09:25:69:c1:03:47:fb: 50:b8:b5:b0:28:fd:76:6e:c2:0f:b8:ad:97:ec:26: b7:52:f9:eb:1e:78:44:76:75:df:83:0d:15:f3:4e: c1:f0:9f:31:34:1a:9e:53:21:4b:f0:83:96:8f:41: a1:31:de:ac:cb:bc:ce:24:1f:53:95:a0:5c:25:92: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6B:C1:25:96:C9:8E:C8:00:96:46:B9:C3:AA:9E:C3:3E:F8:10:D4 X509v3 Authority Key Identifier: keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:29:96:c7:b5:97:15:ff:49:c6:66:3f:7b:73:c8:7b:b8:c6: 47:e3:1c:c9:9e:7b:9f:dd:b3:fa:a8:35:58:22:fc:31:3e:0b: 6e:63:be:f0:77:69:f1:7d:10:b8:2b:8e:00:b4:31:af:a8:15: 17:a5:24:f5:1a:37:9d:5b:c7:ca:1e:73:b9:55:cd:ac:d3:0b: cf:f7:d0:d3:b8:03:8f:bc:95:48:93:1d:38:6f:06:4f:8f:05: f4:b7:d4:5e:ed:14:cf:a9:da:14:68:81:4c:3f:9a:d3:9b:b7: 18:bc:68:3e:1f:83:f4:73:cd:c9:33:5c:39:3c:16:32:28:9e: ce:78:85:5d:4c:06:17:f9:cf:0c:8c:44:e2:51:f8:2b:81:e5: 88:ab:2e:df:32:fb:00:43:6b:9b:e5:40:ba:7f:64:22:b7:dc: 6b:bf:ab:c3:ef:cb:1f:83:9d:8b:ca:59:eb:27:66:b6:71:64: bf:00:bd:5f:ca:88:25:3c:c5:b2:bc:7b:ab:6a:21:55:1a:9f: 85:26:a4:84:b1:ef:e8:19:4e:0b:c4:f2:53:6e:d2:d2:7f:7b: 7d:ec:16:29:34:f1:64:e9:bb:f3:0a:ff:1b:29:9e:8f:f5:6a: 16:4e:da:9b:c4:87:12:4f:66:5f:06:87:2a:c1:c5:24:39:57: 62:e7:88:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqBK5LVcEGwQ9/RnrMTrKH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZmM0ZWYyMzJhZTIzOTRlODg4NTQ0ZjUyYWIwOGIxN2Fm ZTMyNDgwHhcNMjUxMTE0MDcwMTQ3WhcNMjUxMTE1MDcwMTQ3WjAzMTEwLwYDVQQD Eyg1MTZiYzEyNTk2Yzk4ZWM4MDA5NjQ2YjljM2FhOWVjMzNlZjgxMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj41ss7Vw75/y34l/E1CRMA/MQAY vilqTVB9+O7+//rOAmn9C0jPXRHsmr5qYIvFs42McW4QYaF9mrq6/ytp2eIBHj8G Vwnv/nVYsP54EtJ6q5L/sUxKjYhC8cQOHSZ2ZsO0LD/oRIxiKctqCRYSVo4Opl7K u1kwrldpxBaSMRR6p2ybFFUk7Pi03UzgnNXbeSnxx1mKzhyJsTgP9DxGlkoUaeac hEPIR50AhGzua8usngW0w27ZQe+tQQklacEDR/tQuLWwKP12bsIPuK2X7Ca3Uvnr HnhEdnXfgw0V807B8J8xNBqeUyFL8IOWj0GhMd6sy7zOJB9TlaBcJZJpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFrwSWWyY7IAJZGucOqnsM++BDUMB8GA1UdIwQY MBaAFPP8TvIyriOU6IhUT1KrCLF6/jJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF94TzhqS3VJNVRvaUZSUFVxc0lzWHItTWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MzcxNDQtYjg2YS00MDhiLWJkZTEt OTM1ZmIxYmVkMmQ4LzEvOF94TzhqS3VJNVRvaUZSUFVxc0lzWHItTWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85MzcxNDQtYjg2YS00MDhiLWJkZTEtOTM1ZmIxYmVkMmQ4 LzEvOF94TzhqS3VJNVRvaUZSUFVxc0lzWHItTWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCmWx7WX Ff9JxmY/e3PIe7jGR+McyZ57n92z+qg1WCL8MT4LbmO+8Hdp8X0QuCuOALQxr6gV F6Uk9Ro3nVvHyh5zuVXNrNMLz/fQ07gDj7yVSJMdOG8GT48F9LfUXu0Uz6naFGiB TD+a05u3GLxoPh+D9HPNyTNcOTwWMiiezniFXUwGF/nPDIxE4lH4K4HliKsu3zL7 AENrm+VAun9kIrfca7+rw+/LH4Odi8pZ6ydmtnFkvwC9X8qIJTzFsrx7q2ohVRqf hSakhLHv6BlOC8TyU27S0n97fewWKTTxZOm78wr/Gymej/VqFk7am8SHEk9mXwaH KsHFJDlXYueIMw== -----END CERTIFICATE-----Generated at Wed Dec 17 03:53:46 2025 by rpki-client