This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json) Hash identifier: 5fXyCdw1ydhUnXUZtU1SoBiM2dL5NNY4+b3Rjsupn14= Subject key identifier: 9D:8E:EE:56:AE:CF:7A:CB:0B:83:D7:F9:D6:4E:91:28:B3:FC:32:D7 Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13 Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213 Certificate serial: 019AA0B5F5E69C7FC5AF93795828606E2558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft Manifest number: 0E0A Signing time: Thu 20 Nov 2025 10:01:10 +0000 Manifest this update: Thu 20 Nov 2025 10:01:10 +0000 Manifest next update: Fri 21 Nov 2025 10:01:10 +0000 Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: ikURjOus5JQjkps1qh8E2U0+Jzrk/+Iouw75My0tDnc=) 2: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:b5:f5:e6:9c:7f:c5:af:93:79:58:28:60:6e:25:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213 Validity Not Before: Nov 20 10:01:10 2025 GMT Not After : Nov 21 10:01:10 2025 GMT Subject: CN=9d8eee56aecf7acb0b83d7f9d64e9128b3fc32d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:50:54:af:56:81:08:9b:96:56:9e:5e:64: 70:85:cd:51:f0:bd:04:6a:74:de:10:71:b4:07:94: 05:79:e4:08:51:e9:05:db:d7:14:73:8d:1c:fe:ac: 5f:ee:b4:d0:b9:1e:e8:b1:3c:45:24:b0:82:7d:51: 13:59:03:4e:7f:ee:ee:97:0b:66:84:a1:b8:02:f0: 13:96:0e:af:2e:b6:f3:5d:91:ac:fa:96:58:43:c6: 54:7e:08:76:95:c7:57:ab:58:af:1a:7f:b7:2a:25: 37:1c:d2:57:16:e1:a9:7e:bd:d1:0f:90:8a:e0:d2: be:59:ac:db:6b:72:d7:1d:64:ba:d3:79:48:d6:9b: 02:bf:e0:e7:b1:e4:85:b7:a0:d1:c6:f3:1f:c1:73: eb:ec:89:fd:b6:34:a5:cf:38:38:7f:7e:9d:b8:86: 42:f3:47:81:78:03:66:90:3a:7e:3b:bd:d0:76:b2: 00:08:2e:bd:4d:0a:ca:d4:21:68:99:26:7b:d1:04: d1:48:a0:3c:36:e4:ae:bb:bd:e9:e4:55:52:08:ee: 28:ce:5e:6f:3d:cd:ae:29:1a:ee:c7:67:31:18:27: 5e:b2:9d:ae:b4:06:6f:3c:b6:88:40:98:5b:5f:7a: 88:b2:a0:27:6a:37:60:a9:e0:41:94:39:ff:8f:ab: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8E:EE:56:AE:CF:7A:CB:0B:83:D7:F9:D6:4E:91:28:B3:FC:32:D7 X509v3 Authority Key Identifier: keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:58:47:90:c7:8f:14:f4:17:e0:0d:2c:46:55:12:f4:4c:49: 85:f8:6f:b4:15:57:c7:de:4f:4b:a6:fb:6c:f6:8a:5d:9f:69: 1a:9b:c1:b4:fe:44:cc:fb:d8:61:e7:7c:c7:16:5d:6a:45:0e: 36:3f:13:e0:a8:ae:f1:c2:37:7f:07:62:b2:c3:52:33:c7:b0: 98:d6:60:c7:d8:d6:c7:87:3c:61:68:4d:9d:ad:00:01:1b:6a: 38:11:c4:44:e0:42:a8:9f:5b:c2:f4:0e:8a:16:f2:b1:f9:74: b9:c5:b6:d6:e1:e5:75:6c:db:b4:08:58:de:cf:46:dc:7f:d2: 2c:89:39:e8:2c:2e:91:31:ac:f9:b3:da:6f:e2:fd:1d:7b:f9: d3:c1:9a:39:fe:aa:ba:5b:a2:c0:98:fa:b6:61:11:6a:c6:eb: 6e:dc:90:06:1c:c6:1e:21:1e:75:71:cb:c1:8f:37:39:7e:44: 63:e3:48:11:8e:4b:f0:0c:e0:65:3f:20:c7:47:72:63:be:7b: 04:11:7e:ab:25:3d:e9:ea:b4:3c:29:ea:ff:ad:f7:95:48:1f: 33:5b:e0:e3:bb:be:27:09:30:be:89:db:23:22:52:23:b4:56: 9e:5f:81:b0:09:29:83:60:9b:9e:ee:12:8b:5a:f3:39:28:71: d7:fb:d8:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqgtfXmnH/Fr5N5WChgbiVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyM2I2ZjNiN2FmODdiYjhlZjZkZDg0M2JlYmQ2ZDgxYjA1 NTkyMTMwHhcNMjUxMTIwMTAwMTEwWhcNMjUxMTIxMTAwMTEwWjAzMTEwLwYDVQQD Eyg5ZDhlZWU1NmFlY2Y3YWNiMGI4M2Q3ZjlkNjRlOTEyOGIzZmMzMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/VQVK9WgQibllaeXmRwhc1R8L0E anTeEHG0B5QFeeQIUekF29cUc40c/qxf7rTQuR7osTxFJLCCfVETWQNOf+7ulwtm hKG4AvATlg6vLrbzXZGs+pZYQ8ZUfgh2lcdXq1ivGn+3KiU3HNJXFuGpfr3RD5CK 4NK+Wazba3LXHWS603lI1psCv+DnseSFt6DRxvMfwXPr7In9tjSlzzg4f36duIZC 80eBeANmkDp+O73QdrIACC69TQrK1CFomSZ70QTRSKA8NuSuu73p5FVSCO4ozl5v Pc2uKRrux2cxGCdesp2utAZvPLaIQJhbX3qIsqAnajdgqeBBlDn/j6vUrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2O7lauz3rLC4PX+dZOkSiz/DLXMB8GA1UdIwQY MBaAFII7bzt6+Hu4723YQ769bYGwVZITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2p0dk8zcjRlN2p2YmRoRHZyMXRnYkJWa2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDk0Y2ItMjUxNy00MWE4LWE0NTct ZTcxMGMyYTE0YmNlLzEvZ2p0dk8zcjRlN2p2YmRoRHZyMXRnYkJWa2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jNDk0Y2ItMjUxNy00MWE4LWE0NTctZTcxMGMyYTE0YmNl LzEvZ2p0dk8zcjRlN2p2YmRoRHZyMXRnYkJWa2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlhHkMeP FPQX4A0sRlUS9ExJhfhvtBVXx95PS6b7bPaKXZ9pGpvBtP5EzPvYYed8xxZdakUO Nj8T4Kiu8cI3fwdissNSM8ewmNZgx9jWx4c8YWhNna0AARtqOBHEROBCqJ9bwvQO ihbysfl0ucW21uHldWzbtAhY3s9G3H/SLIk56CwukTGs+bPab+L9HXv508GaOf6q uluiwJj6tmERasbrbtyQBhzGHiEedXHLwY83OX5EY+NIEY5L8AzgZT8gx0dyY757 BBF+qyU96eq0PCnq/633lUgfM1vg47u+JwkwvonbIyJSI7RWnl+BsAkpg2Cbnu4S i1rzOShx1/vYcw== -----END CERTIFICATE-----Generated at Sun Dec 14 08:44:44 2025 by rpki-client