This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json) Hash identifier: KySFt2Dmi2pWYog0B1b+ck5MpV9602e6cgpPb2rYang= Subject key identifier: 61:86:AC:90:2A:5C:49:F2:C4:D7:35:39:15:C4:F8:CE:31:84:24:BD Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb Certificate serial: 019A571BAB685B0A1DA0A5E3AA7BD116A22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft Manifest number: 0E32 Signing time: Thu 06 Nov 2025 03:00:22 +0000 Manifest this update: Thu 06 Nov 2025 03:00:22 +0000 Manifest next update: Fri 07 Nov 2025 03:00:22 +0000 Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: hPqyRGXrO4vNyOsQUAc/XEib76Iloj8ZfsVKPkiMjsY=) 2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:57:1b:ab:68:5b:0a:1d:a0:a5:e3:aa:7b:d1:16:a2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb Validity Not Before: Nov 6 03:00:22 2025 GMT Not After : Nov 7 03:00:22 2025 GMT Subject: CN=6186ac902a5c49f2c4d7353915c4f8ce318424bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:ef:a8:75:46:4c:a5:a4:2f:84:85:6c:56: cd:35:31:1f:98:82:39:a7:6d:14:da:53:5d:2b:c0: 3d:b9:33:9f:d7:86:70:db:b7:dc:1b:93:a9:e2:d4: b8:9e:1b:a3:c6:f5:36:a0:15:36:f8:e6:e7:46:ec: 07:20:cb:30:47:08:22:2e:4c:8d:2f:49:5e:d0:8d: 35:b3:e1:1f:fe:64:9c:56:25:64:b3:48:a6:92:fd: bb:c1:9a:6e:27:81:ca:42:5e:dc:c1:a1:10:8a:f5: cc:01:3f:d8:14:20:c2:8a:63:61:62:38:c9:03:34: 21:b9:fe:8f:ee:9e:41:86:19:c7:0f:22:6c:b9:90: 38:d0:d5:29:45:cc:01:98:d7:be:59:7c:d3:b4:51: 92:bd:68:ac:65:b0:4a:1d:21:d2:6c:a7:50:68:59: 9c:0b:ef:90:96:0c:1b:0a:f8:a4:a7:44:e7:4f:2b: 1b:53:e7:7e:d3:83:dc:d3:0e:4f:cc:c1:c5:fd:48: 40:97:4e:d5:40:73:43:cb:0c:5f:ac:87:7d:ad:fc: b9:e3:b9:cd:f9:94:83:00:2e:9f:e2:08:74:66:e1: 15:f4:ab:13:c8:4e:21:61:c9:40:f7:29:71:fc:79: b9:0b:e2:dc:62:41:1f:1d:f9:3e:33:bf:5f:36:6b: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:AC:90:2A:5C:49:F2:C4:D7:35:39:15:C4:F8:CE:31:84:24:BD X509v3 Authority Key Identifier: keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:63:cb:cb:4c:0b:54:e3:3b:5a:8c:fe:3c:7b:7f:2e:81:b2: cf:15:22:2f:ba:6b:2a:0c:28:69:53:bc:1e:28:67:59:05:1b: ab:64:01:62:ad:65:fc:c9:42:64:ec:61:40:36:7c:a6:a4:d9: e1:1a:e8:5c:0f:38:91:f0:ae:f1:a1:23:50:5f:57:bb:b3:01: f2:1b:e4:19:bb:9c:84:88:7e:73:a9:d6:da:c3:f7:56:dc:38: d0:bd:db:98:1e:9d:3e:2d:df:16:c6:48:5e:04:c2:5d:73:cf: b2:04:07:20:23:6b:e0:8c:8d:8c:84:23:9d:de:51:67:3d:cd: ac:73:3d:a6:f2:6a:d3:be:d8:18:11:1f:5d:b4:2f:54:1d:3d: c7:96:42:83:21:d3:5b:0e:42:ba:b5:be:42:2a:f8:59:92:04: d0:ef:88:00:3b:7b:38:8e:d3:27:d8:40:cb:40:87:2d:15:37: 55:d5:2b:bc:52:a5:d3:32:d3:45:b4:e2:a7:3d:2e:c0:05:c8: b9:ed:bc:ad:34:1d:f5:68:78:73:b9:6d:79:d3:4b:a4:5c:4d: 0f:c3:15:23:9f:71:06:cb:34:86:23:21:9f:f7:f4:47:e6:5a: fe:db:a9:f6:c4:e7:6b:2a:de:6b:64:32:cf:ea:b7:01:a3:de: f7:8a:89:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpXG6toWwodoKXjqnvRFqIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2Y4ODc0ZDk3MzFmNjc2ODJhMjEzZTZmZTVlMGIwZGYz NGU2Y2IwHhcNMjUxMTA2MDMwMDIyWhcNMjUxMTA3MDMwMDIyWjAzMTEwLwYDVQQD Eyg2MTg2YWM5MDJhNWM0OWYyYzRkNzM1MzkxNWM0ZjhjZTMxODQyNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHTvqHVGTKWkL4SFbFbNNTEfmII5 p20U2lNdK8A9uTOf14Zw27fcG5Op4tS4nhujxvU2oBU2+ObnRuwHIMswRwgiLkyN L0le0I01s+Ef/mScViVks0imkv27wZpuJ4HKQl7cwaEQivXMAT/YFCDCimNhYjjJ AzQhuf6P7p5BhhnHDyJsuZA40NUpRcwBmNe+WXzTtFGSvWisZbBKHSHSbKdQaFmc C++QlgwbCvikp0TnTysbU+d+04Pc0w5PzMHF/UhAl07VQHNDywxfrId9rfy547nN +ZSDAC6f4gh0ZuEV9KsTyE4hYclA9ylx/Hm5C+LcYkEfHfk+M79fNmsDyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGGrJAqXEnyxNc1ORXE+M4xhCS9MB8GA1UdIwQY MBaAFGc/iHTZcx9naCohPm/l4LDfNObLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYt OTg1MjMxNjM1NDIxLzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYtOTg1MjMxNjM1NDIx LzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmPLy0wL VOM7Woz+PHt/LoGyzxUiL7prKgwoaVO8HihnWQUbq2QBYq1l/MlCZOxhQDZ8pqTZ 4RroXA84kfCu8aEjUF9Xu7MB8hvkGbuchIh+c6nW2sP3Vtw40L3bmB6dPi3fFsZI XgTCXXPPsgQHICNr4IyNjIQjnd5RZz3NrHM9pvJq077YGBEfXbQvVB09x5ZCgyHT Ww5CurW+Qir4WZIE0O+IADt7OI7TJ9hAy0CHLRU3VdUrvFKl0zLTRbTipz0uwAXI ue28rTQd9Wh4c7ltedNLpFxND8MVI59xBss0hiMhn/f0R+Za/tup9sTnayrea2Qy z+q3AaPe94qJew== -----END CERTIFICATE-----Generated at Tue Dec 16 14:23:54 2025 by rpki-client