This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft File: rx1xu1v1LBNf8HCGaq1M25U6iZA.mft (raw, json) Hash identifier: iSnRJ9IXXKqeMpWkoXe96sKNtzVDa5iARLkApOdb9rM= Subject key identifier: 2C:53:83:5B:1B:ED:61:AD:42:7F:05:11:E9:CA:05:3C:BD:1E:06:70 Authority key identifier: AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90 Certificate issuer: /CN=af1d71bb5bf52c135ff070866aad4cdb953a8990 Certificate serial: 019C416A697899DC8E50CC3F0F13C90912F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft Manifest number: 0171 Signing time: Mon 09 Feb 2026 08:00:18 +0000 Manifest this update: Mon 09 Feb 2026 08:00:18 +0000 Manifest next update: Tue 10 Feb 2026 08:00:18 +0000 Files and hashes: 1: rx1xu1v1LBNf8HCGaq1M25U6iZA.crl (hash: FBocaKsvjKn55UVC71wC88j6+bah/tbohlhjpEX9b/w=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:69:78:99:dc:8e:50:cc:3f:0f:13:c9:09:12:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af1d71bb5bf52c135ff070866aad4cdb953a8990 Validity Not Before: Feb 9 08:00:18 2026 GMT Not After : Feb 10 08:00:18 2026 GMT Subject: CN=2c53835b1bed61ad427f0511e9ca053cbd1e0670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:73:bc:05:8c:7d:2d:7f:59:c2:9f:7a:38: 7e:b4:5b:87:0c:4d:be:d1:a3:db:2d:9d:27:dc:83: b8:af:14:53:f4:23:b4:87:11:9f:c7:b5:0f:8e:77: f5:e9:18:48:78:6e:b7:89:5e:7f:b6:98:10:2a:3f: e2:11:fa:0a:6e:7a:f7:9c:ac:43:20:32:fd:0d:2a: 12:6c:27:1a:b9:2f:9f:b1:a5:67:3c:95:69:3e:e4: a9:6d:76:03:f8:93:11:ef:ff:9c:01:60:40:72:15: 4e:87:a4:56:37:af:45:4d:05:dd:93:05:20:21:33: f6:26:57:e3:dd:11:25:1c:0f:ac:d2:bd:b8:51:95: 93:6f:99:7d:e4:4f:c0:ad:d6:3a:70:a4:58:21:c3: dc:2c:27:78:25:53:b4:40:d3:ae:e3:c4:f5:57:e8: d8:ef:08:07:ae:2e:08:fa:62:ae:f8:a8:d0:16:44: 8c:a4:a2:71:49:05:74:e3:b2:21:81:8f:26:79:d4: 3d:81:71:45:86:1c:58:39:81:fa:7d:37:2c:92:8b: c9:8d:5f:74:c9:88:b1:c3:7b:b9:b5:94:75:88:3c: 3c:36:05:ab:75:c5:1e:ec:e6:31:c1:77:fc:a2:fd: 4b:03:6f:2e:02:96:94:0e:a1:92:27:a4:1d:0a:00: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:53:83:5B:1B:ED:61:AD:42:7F:05:11:E9:CA:05:3C:BD:1E:06:70 X509v3 Authority Key Identifier: keyid:AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bb:eb:06:ff:97:b7:f5:86:58:25:b0:17:24:62:b3:6a:65: ef:48:89:85:b3:61:88:f0:30:e0:31:1c:67:2b:97:43:3e:96: 20:02:e6:1d:9f:74:76:f9:ba:f3:53:76:e7:99:8d:12:32:1f: 26:14:ad:97:9b:dc:87:3f:9b:70:dd:23:13:54:04:93:70:4e: 24:3a:59:e7:9a:2c:b8:1f:4d:3b:e3:f8:67:08:b6:a2:dd:5d: 93:4a:ab:27:03:71:a8:a4:bb:cc:82:e1:1f:35:10:33:99:8e: 6c:6e:f9:b3:eb:d7:bd:f0:d4:30:eb:1c:ad:51:6f:49:0e:57: 91:61:d3:17:f4:4f:d9:b9:fa:35:97:15:7d:a9:e6:33:44:0b: 8d:71:f2:f9:7c:ce:62:c4:e2:58:42:35:ff:84:70:7a:eb:32: c3:00:1c:5e:43:1f:27:f1:b6:03:2c:2b:98:67:b1:aa:93:99: 2c:43:26:3f:e0:f7:af:fb:9d:f0:52:ce:46:3d:77:8c:2f:8f: d6:14:ae:3d:60:34:df:21:78:08:1e:05:7b:c4:56:c3:4b:d9: c1:b3:a6:c6:be:3a:e1:15:55:f3:d0:1f:09:c0:a3:2f:87:b0: 8c:37:eb:67:3e:f7:cc:52:ca:b3:9d:95:56:68:a8:b5:94:38: e0:93:d4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBaml4mdyOUMw/DxPJCRL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMWQ3MWJiNWJmNTJjMTM1ZmYwNzA4NjZhYWQ0Y2RiOTUz YTg5OTAwHhcNMjYwMjA5MDgwMDE4WhcNMjYwMjEwMDgwMDE4WjAzMTEwLwYDVQQD EygyYzUzODM1YjFiZWQ2MWFkNDI3ZjA1MTFlOWNhMDUzY2JkMWUwNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C5zvAWMfS1/WcKfejh+tFuHDE2+ 0aPbLZ0n3IO4rxRT9CO0hxGfx7UPjnf16RhIeG63iV5/tpgQKj/iEfoKbnr3nKxD IDL9DSoSbCcauS+fsaVnPJVpPuSpbXYD+JMR7/+cAWBAchVOh6RWN69FTQXdkwUg ITP2Jlfj3RElHA+s0r24UZWTb5l95E/ArdY6cKRYIcPcLCd4JVO0QNOu48T1V+jY 7wgHri4I+mKu+KjQFkSMpKJxSQV047IhgY8medQ9gXFFhhxYOYH6fTcskovJjV90 yYixw3u5tZR1iDw8NgWrdcUe7OYxwXf8ov1LA28uApaUDqGSJ6QdCgANTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxTg1sb7WGtQn8FEenKBTy9HgZwMB8GA1UdIwQY MBaAFK8dcbtb9SwTX/BwhmqtTNuVOomQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcngxeHUxdjFMQk5mOEhDR2FxMU0yNVU2aVpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80YjI2MTctYTkyNi00YTNiLTliODAt MDI1ODk2MjIzZDk3LzEvcngxeHUxdjFMQk5mOEhDR2FxMU0yNVU2aVpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80YjI2MTctYTkyNi00YTNiLTliODAtMDI1ODk2MjIzZDk3 LzEvcngxeHUxdjFMQk5mOEhDR2FxMU0yNVU2aVpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7vrBv+X t/WGWCWwFyRis2pl70iJhbNhiPAw4DEcZyuXQz6WIALmHZ90dvm681N255mNEjIf JhStl5vchz+bcN0jE1QEk3BOJDpZ55osuB9NO+P4Zwi2ot1dk0qrJwNxqKS7zILh HzUQM5mObG75s+vXvfDUMOscrVFvSQ5XkWHTF/RP2bn6NZcVfanmM0QLjXHy+XzO YsTiWEI1/4RweusywwAcXkMfJ/G2AywrmGexqpOZLEMmP+D3r/ud8FLORj13jC+P 1hSuPWA03yF4CB4Fe8RWw0vZwbOmxr464RVV89AfCcCjL4ewjDfrZz73zFLKs52V VmiotZQ44JPUWA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:43 2026 by rpki-client