This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json) Hash identifier: bGuVQ8iGOjHRgdUxp4uzOLN9xSx/iNGkTk37C7HPGeM= Subject key identifier: 91:E5:AB:8F:42:47:FA:4C:80:EF:DD:7A:77:98:ED:DC:91:73:3A:17 Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5 Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5 Certificate serial: 019B4926BF44E251855CA84E08CE30ED49EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft Manifest number: 12C3 Signing time: Tue 23 Dec 2025 03:00:34 +0000 Manifest this update: Tue 23 Dec 2025 03:00:34 +0000 Manifest next update: Wed 24 Dec 2025 03:00:34 +0000 Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=) 2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: I6ZQdKO7B2DeeyDUX/Vv9gVFN1KWSI0i/kXZoK3PzCs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:bf:44:e2:51:85:5c:a8:4e:08:ce:30:ed:49:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5 Validity Not Before: Dec 23 03:00:34 2025 GMT Not After : Dec 24 03:00:34 2025 GMT Subject: CN=91e5ab8f4247fa4c80efdd7a7798eddc91733a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:b1:86:4a:08:05:5e:7d:61:23:f0:62:33: 55:50:ca:1b:61:a6:9c:b5:5f:88:80:e4:3b:54:74: fa:52:3d:f2:3a:94:c1:3b:0f:43:90:b0:fc:44:68: 29:d2:40:0e:08:42:73:a6:81:55:1b:89:7c:05:49: 99:ac:bc:12:41:da:97:bf:b5:c2:e1:4c:73:00:74: cf:8f:d7:dc:e8:bf:8e:1e:2d:54:cd:d6:39:f8:06: 83:81:26:2d:78:f6:94:f2:17:0b:dd:10:dd:ca:98: ab:98:cd:a7:f0:14:da:e8:0d:15:3e:43:58:2b:2b: 66:8b:bf:34:88:60:f7:ea:76:6f:50:ea:66:88:19: d8:3c:d8:51:09:24:11:02:00:6d:99:47:b8:74:1f: 58:06:41:f1:4e:ea:d5:4a:25:86:0e:ee:10:38:12: d9:dc:0f:55:70:89:ff:ef:bb:3e:42:07:65:65:d1: 4d:a3:f5:4c:a8:01:a4:2e:4b:c2:19:e5:66:8e:fa: ca:22:6a:8b:a5:0a:48:ca:f4:7e:12:75:86:e8:21: d3:71:50:be:73:0a:97:85:0d:09:48:da:e7:7a:b1: 31:f1:e0:be:07:2e:fd:bd:3c:77:90:60:61:24:cc: 2c:ad:42:fe:40:da:10:5b:5a:81:73:c9:7b:fb:ad: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E5:AB:8F:42:47:FA:4C:80:EF:DD:7A:77:98:ED:DC:91:73:3A:17 X509v3 Authority Key Identifier: keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0b:21:0b:33:9a:6f:21:8d:74:b8:ba:fd:19:c6:22:c4:79: 95:a5:f0:68:db:83:2a:3e:a0:9d:83:3b:56:b1:02:9d:91:83: d3:9e:ea:fe:58:96:15:3b:d1:f7:b6:4c:7f:c2:ac:30:11:cf: af:7c:66:f3:4e:49:e1:5a:51:b0:59:2f:de:9a:f4:88:4f:39: 34:cc:30:c9:6c:6a:d9:c7:95:b6:69:d1:68:d4:52:e2:ae:04: 9f:e2:97:29:3d:56:3e:11:8b:7f:80:72:fd:b7:c2:76:d2:9d: b0:72:be:09:de:3b:e5:b6:26:7d:04:45:f3:fb:a3:e6:34:b0: 18:6b:0e:01:d8:dd:1c:e4:7a:0c:1f:c9:31:50:a8:ff:4d:67: 85:e3:db:08:36:2e:87:7d:fb:c0:45:1e:f4:1b:71:8d:64:a3: b1:3d:76:e5:ea:c6:0e:ee:65:a5:d7:1f:01:d6:6f:22:68:87: 67:0e:10:d7:70:bb:af:88:42:99:c7:4a:49:af:fb:a8:f1:53: af:87:38:4e:34:fc:69:a1:9d:fc:0b:e5:eb:d6:39:a2:ed:b9: 56:5c:38:d9:6a:5b:eb:dd:2f:22:95:30:5f:39:11:cb:23:4e: 5f:2d:c9:34:49:ba:44:f5:e1:b4:04:3d:da:25:5c:5a:c3:df: 6e:bf:12:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJr9E4lGFXKhOCM4w7UnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljODMxMzNhN2UwNTkzYmIzOThlYWRiOTI3NThjYmM5MmM5 ZDY1YTUwHhcNMjUxMjIzMDMwMDM0WhcNMjUxMjI0MDMwMDM0WjAzMTEwLwYDVQQD Eyg5MWU1YWI4ZjQyNDdmYTRjODBlZmRkN2E3Nzk4ZWRkYzkxNzMzYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3exhkoIBV59YSPwYjNVUMobYaac tV+IgOQ7VHT6Uj3yOpTBOw9DkLD8RGgp0kAOCEJzpoFVG4l8BUmZrLwSQdqXv7XC 4UxzAHTPj9fc6L+OHi1UzdY5+AaDgSYtePaU8hcL3RDdypirmM2n8BTa6A0VPkNY Kytmi780iGD36nZvUOpmiBnYPNhRCSQRAgBtmUe4dB9YBkHxTurVSiWGDu4QOBLZ 3A9VcIn/77s+QgdlZdFNo/VMqAGkLkvCGeVmjvrKImqLpQpIyvR+EnWG6CHTcVC+ cwqXhQ0JSNrnerEx8eC+By79vTx3kGBhJMwsrUL+QNoQW1qBc8l7+6001wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHlq49CR/pMgO/deneY7dyRczoXMB8GA1UdIwQY MBaAFJyDEzp+BZO7OY6tuSdYy8ksnWWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEt NTIxNDdhYWUwZWI0LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEtNTIxNDdhYWUwZWI0 LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawshCzOa byGNdLi6/RnGIsR5laXwaNuDKj6gnYM7VrECnZGD057q/liWFTvR97ZMf8KsMBHP r3xm805J4VpRsFkv3pr0iE85NMwwyWxq2ceVtmnRaNRS4q4En+KXKT1WPhGLf4By /bfCdtKdsHK+Cd475bYmfQRF8/uj5jSwGGsOAdjdHOR6DB/JMVCo/01nhePbCDYu h337wEUe9BtxjWSjsT125erGDu5lpdcfAdZvImiHZw4Q13C7r4hCmcdKSa/7qPFT r4c4TjT8aaGd/Avl69Y5ou25Vlw42Wpb690vIpUwXzkRyyNOXy3JNEm6RPXhtAQ9 2iVcWsPfbr8ShA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:32 2025 by rpki-client