This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json) Hash identifier: V1u/GWOmKGfOqZuvHuxxH/T5BOTRowH3jxeHxQpYgZQ= Subject key identifier: 65:8C:AF:40:14:3E:8A:96:59:CD:4F:A4:59:D3:62:2B:15:27:57:C7 Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24 Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24 Certificate serial: 0199E2D497BBB2C735B56B7E70BC76599C30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft Manifest number: 11E9 Signing time: Tue 14 Oct 2025 13:06:47 +0000 Manifest this update: Tue 14 Oct 2025 13:06:47 +0000 Manifest next update: Wed 15 Oct 2025 13:06:47 +0000 Files and hashes: 1: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: B+W8MJAyAf5V4Bu0/wugeEriyCNBrmrzyzyTW83K6Hg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:e2:d4:97:bb:b2:c7:35:b5:6b:7e:70:bc:76:59:9c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24 Validity Not Before: Oct 14 13:06:47 2025 GMT Not After : Oct 15 13:06:47 2025 GMT Subject: CN=658caf40143e8a9659cd4fa459d3622b152757c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:29:67:c9:1a:f9:38:63:d3:04:71:75:30: 04:cb:38:2b:74:7c:95:bd:6e:da:c5:8f:b6:de:15: d1:bc:5c:27:55:fb:c0:1e:ca:15:7b:f1:f1:de:1a: 93:75:ac:7e:91:95:71:6d:a6:11:b6:79:98:17:16: 88:ea:89:2b:4d:1d:10:05:5a:e9:65:ba:42:e4:2d: 61:ac:53:e7:e1:a1:13:77:bf:0f:24:22:24:a2:19: 18:f1:42:57:36:5e:c0:52:ab:5f:d2:6b:e1:e0:c6: b7:5a:dd:50:74:bc:25:9c:34:56:7c:7f:e2:29:e8: f9:6f:61:15:fb:63:94:cb:38:b7:5e:d9:04:a1:67: 75:12:e5:84:04:ae:c4:66:30:ad:cd:3b:90:89:bc: bc:c1:f0:98:62:dc:25:3d:83:3f:5e:a6:61:1b:2b: a9:4f:db:e2:0a:99:c7:b1:ce:6a:cb:c6:83:dd:40: eb:77:23:e8:33:b7:a7:d8:38:79:fa:8b:7f:2f:87: bb:21:83:5b:dd:3e:ac:7b:6e:10:3b:a6:9a:ec:0e: 65:14:76:12:b4:45:76:f2:93:8e:26:16:c5:b7:74: 77:63:e5:22:e8:c1:ed:41:62:53:d8:6d:bc:d5:0b: 97:4f:0e:31:da:98:1b:06:27:2e:bc:9e:e5:ca:9d: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8C:AF:40:14:3E:8A:96:59:CD:4F:A4:59:D3:62:2B:15:27:57:C7 X509v3 Authority Key Identifier: keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:be:70:b4:32:0c:e9:48:2d:8f:0a:20:83:48:76:96:cd:2e: f6:73:8b:f1:a9:23:d6:54:51:00:9a:cf:89:f7:8a:08:a1:64: 16:54:48:50:3b:da:13:67:ae:a2:88:20:a3:3e:01:8e:79:a4: e4:e3:3d:03:9e:1a:a1:95:20:da:a5:fd:45:0a:77:57:3f:60: be:2e:b1:10:ae:29:12:bb:6a:92:18:92:d3:8d:dd:02:d8:f3: 81:7f:98:1d:f8:2d:6a:4a:54:35:c6:81:87:3b:4d:c3:f3:d6: da:20:6f:56:9d:ce:5a:bf:1a:c3:63:d7:af:94:5e:c0:c4:f1: f8:d9:15:84:4d:ad:40:99:71:b7:07:21:75:77:c1:67:cc:f1: 0c:f1:78:ad:85:77:69:8c:06:9b:56:50:fd:0c:73:0b:29:dc: 9d:ea:cd:d7:9f:c6:28:01:51:e2:cc:8a:d1:41:d1:38:1c:92: 88:ee:8d:53:e4:2f:93:88:35:e3:27:f8:e5:a4:f5:3c:bf:97: d7:7f:f0:59:e8:21:c0:da:d3:ff:c7:bd:86:dd:3e:be:36:dd: 1d:03:05:7c:07:e4:d8:79:71:8f:31:54:2e:37:46:1b:ca:65: 6c:e2:7d:6e:99:8b:45:cc:22:2d:8b:b8:3c:4b:17:80:cf:4e: 36:00:fe:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZni1Je7ssc1tWt+cLx2WZwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzYxOGQzNDE3OWMzZWE1MjMzMDI2NGExOTY0MTg3YjIz Y2RkMjQwHhcNMjUxMDE0MTMwNjQ3WhcNMjUxMDE1MTMwNjQ3WjAzMTEwLwYDVQQD Eyg2NThjYWY0MDE0M2U4YTk2NTljZDRmYTQ1OWQzNjIyYjE1Mjc1N2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstQpZ8ka+Thj0wRxdTAEyzgrdHyV vW7axY+23hXRvFwnVfvAHsoVe/Hx3hqTdax+kZVxbaYRtnmYFxaI6okrTR0QBVrp ZbpC5C1hrFPn4aETd78PJCIkohkY8UJXNl7AUqtf0mvh4Ma3Wt1QdLwlnDRWfH/i Kej5b2EV+2OUyzi3XtkEoWd1EuWEBK7EZjCtzTuQiby8wfCYYtwlPYM/XqZhGyup T9viCpnHsc5qy8aD3UDrdyPoM7en2Dh5+ot/L4e7IYNb3T6se24QO6aa7A5lFHYS tEV28pOOJhbFt3R3Y+Ui6MHtQWJT2G281QuXTw4x2pgbBicuvJ7lyp1BkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWMr0AUPoqWWc1PpFnTYisVJ1fHMB8GA1UdIwQY MBaAFNZ2GNNBecPqUjMCZKGWQYeyPN0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80N2Y1MTMtNzZkYi00YTYxLWIxYmUt NzRkYzgzODZkYzZhLzEvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80N2Y1MTMtNzZkYi00YTYxLWIxYmUtNzRkYzgzODZkYzZh LzEvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT75wtDIM 6Ugtjwogg0h2ls0u9nOL8akj1lRRAJrPifeKCKFkFlRIUDvaE2euooggoz4Bjnmk 5OM9A54aoZUg2qX9RQp3Vz9gvi6xEK4pErtqkhiS043dAtjzgX+YHfgtakpUNcaB hztNw/PW2iBvVp3OWr8aw2PXr5RewMTx+NkVhE2tQJlxtwchdXfBZ8zxDPF4rYV3 aYwGm1ZQ/QxzCyncnerN15/GKAFR4syK0UHROBySiO6NU+Qvk4g14yf45aT1PL+X 13/wWeghwNrT/8e9ht0+vjbdHQMFfAfk2HlxjzFULjdGG8plbOJ9bpmLRcwiLYu4 PEsXgM9ONgD+Bg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:41:46 2025 by rpki-client