This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json) Hash identifier: Z16tYefNUXFMgazvlMPbObOZKWtZUuszPV5nm/Mzh+o= Subject key identifier: 11:B5:3A:99:97:C9:6A:A4:46:F2:1B:D9:ED:D6:C1:CC:4B:AF:C5:A4 Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88 Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88 Certificate serial: 019A51BEF9D414B30687D0DDCC2934FC8F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft Manifest number: 1710 Signing time: Wed 05 Nov 2025 02:01:01 +0000 Manifest this update: Wed 05 Nov 2025 02:01:01 +0000 Manifest next update: Thu 06 Nov 2025 02:01:01 +0000 Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: 2/wSNZ3/aYaGcDWUuIZGO+lPS+X9zZQeJ9QCl5d9tk8=) 2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:be:f9:d4:14:b3:06:87:d0:dd:cc:29:34:fc:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88 Validity Not Before: Nov 5 02:01:01 2025 GMT Not After : Nov 6 02:01:01 2025 GMT Subject: CN=11b53a9997c96aa446f21bd9edd6c1cc4bafc5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:2d:b9:09:e0:7a:a8:b3:ab:f7:f8:da:d1: b5:6c:d4:55:cf:7a:ed:71:0a:e3:62:01:8b:46:32: ec:a1:1c:a9:40:76:22:16:c1:eb:57:94:c2:27:22: 97:35:b6:26:59:78:0e:01:27:cc:dd:6b:ce:f8:b7: 95:94:21:65:e4:bb:80:8e:c8:c7:f2:91:06:a5:e5: 8d:db:d0:38:37:2b:fb:d7:fa:fd:24:f5:2b:d5:e8: 7e:26:fe:e1:a8:09:ce:32:4c:2c:94:75:99:74:8b: 8a:8c:66:2b:bf:1f:65:c1:77:6d:21:82:ad:b4:a5: 9c:08:58:89:7b:b0:49:9b:59:f1:51:f0:34:52:0d: ce:5c:64:2e:b7:3e:b1:4a:93:9b:3c:6a:b5:b7:12: 1d:f2:e1:de:fa:a5:e2:5e:a0:ee:b1:44:47:39:e8: bb:00:9b:a2:0c:07:88:c2:13:e9:6b:a5:63:a4:f2: f2:6b:fd:ba:d2:69:b6:09:10:1e:36:a6:73:05:ed: 92:b6:55:70:d0:8a:2a:8d:59:b0:d2:cd:2d:12:67: 45:8e:c4:6e:72:cc:6a:31:45:50:c6:75:0c:b6:94: 9c:0d:6c:f2:3d:18:32:9f:8b:04:db:e5:91:3c:7a: ad:b3:77:1a:45:5a:ac:c9:89:f3:3a:9b:9b:1a:60: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B5:3A:99:97:C9:6A:A4:46:F2:1B:D9:ED:D6:C1:CC:4B:AF:C5:A4 X509v3 Authority Key Identifier: keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:23:b7:2a:bb:67:31:e6:84:6c:d5:9f:de:2a:fd:09:39: c2:d8:96:1b:39:28:54:92:08:9f:8b:c5:f7:47:b3:91:f8:0c: 2c:a6:ec:ae:3d:cd:f2:d5:35:7e:a7:7a:86:92:c3:f5:fc:cb: c9:a6:4f:1b:93:92:5e:02:ca:84:51:4f:43:50:47:61:eb:91: 02:5a:29:01:4b:e6:dc:a7:94:15:9a:84:de:02:a4:94:72:b7: 1c:31:db:eb:f0:f2:4b:6d:08:9a:4c:5e:fd:f7:59:8f:0a:8e: af:59:82:cf:0b:a4:76:86:71:e1:72:94:94:78:64:be:d1:81: 9a:60:7c:c5:27:f5:10:96:ee:68:3c:d6:b1:2c:50:c3:99:23: 83:60:ef:35:a7:f1:ae:eb:cf:e7:06:e7:18:48:1a:34:35:20: 6f:a8:cc:b0:e1:c4:02:20:8e:4f:f7:ea:ce:90:7a:d8:e0:17: 18:c4:23:b2:ce:8e:99:0a:45:f1:e8:b1:c7:6a:b1:1d:b4:1e: 61:49:c4:c8:c6:cb:d3:f6:99:00:a0:68:5f:aa:96:93:03:ea: 95:b4:1c:a7:eb:2f:2e:5c:8b:15:16:ec:52:93:70:01:f8:70: ff:7b:3a:f2:c9:10:8b:fa:59:40:f9:69:17:fa:41:da:9d:96: c5:22:38:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRvvnUFLMGh9DdzCk0/I8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTdmOTA3MmU4YjMwMDRiYTA4NjgxZmIxZWY4OGMwM2Y2 MjBhODgwHhcNMjUxMTA1MDIwMTAxWhcNMjUxMTA2MDIwMTAxWjAzMTEwLwYDVQQD EygxMWI1M2E5OTk3Yzk2YWE0NDZmMjFiZDllZGQ2YzFjYzRiYWZjNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD8tuQngeqizq/f42tG1bNRVz3rt cQrjYgGLRjLsoRypQHYiFsHrV5TCJyKXNbYmWXgOASfM3WvO+LeVlCFl5LuAjsjH 8pEGpeWN29A4Nyv71/r9JPUr1eh+Jv7hqAnOMkwslHWZdIuKjGYrvx9lwXdtIYKt tKWcCFiJe7BJm1nxUfA0Ug3OXGQutz6xSpObPGq1txId8uHe+qXiXqDusURHOei7 AJuiDAeIwhPpa6VjpPLya/260mm2CRAeNqZzBe2StlVw0IoqjVmw0s0tEmdFjsRu csxqMUVQxnUMtpScDWzyPRgyn4sE2+WRPHqts3caRVqsyYnzOpubGmA70QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG1OpmXyWqkRvIb2e3WwcxLr8WkMB8GA1UdIwQY MBaAFASn+QcuizAEughoH7HviMA/YgqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYt ZTA1YWE1MTNlNWRkLzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYtZTA1YWE1MTNlNWRk LzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPMjtyq7 ZzHmhGzVn94q/Qk5wtiWGzkoVJIIn4vF90ezkfgMLKbsrj3N8tU1fqd6hpLD9fzL yaZPG5OSXgLKhFFPQ1BHYeuRAlopAUvm3KeUFZqE3gKklHK3HDHb6/DyS20Imkxe /fdZjwqOr1mCzwukdoZx4XKUlHhkvtGBmmB8xSf1EJbuaDzWsSxQw5kjg2DvNafx ruvP5wbnGEgaNDUgb6jMsOHEAiCOT/fqzpB62OAXGMQjss6OmQpF8eixx2qxHbQe YUnEyMbL0/aZAKBoX6qWkwPqlbQcp+svLlyLFRbsUpNwAfhw/3s68skQi/pZQPlp F/pB2p2WxSI4jQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:53 2025 by rpki-client