This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft File: Way0AidliYvk8GBQzTovkpHYM2c.mft (raw, json) Hash identifier: rWO6fWNeB5tV9eP5pA4uuALY/tc/1/6SCEBqxxMIJzI= Subject key identifier: BD:99:0A:08:C9:97:CA:BC:10:77:EC:7A:E0:7F:0C:AA:F8:68:A0:B0 Authority key identifier: 59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67 Certificate issuer: /CN=59acb4022765898be4f06050cd3a2f9291d83367 Certificate serial: 019AB9D0AFC981072ED17FA757222B155EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft Manifest number: 1747 Signing time: Tue 25 Nov 2025 07:00:52 +0000 Manifest this update: Tue 25 Nov 2025 07:00:52 +0000 Manifest next update: Wed 26 Nov 2025 07:00:52 +0000 Files and hashes: 1: Way0AidliYvk8GBQzTovkpHYM2c.crl (hash: qMpqWS54jjR7IecazdjA/Ce8rbFOvfKQzKqDAYQvQas=) 2: ulpVz6oz9XYNKND7r8cyUHxYbf8.roa (hash: gFOodfsqdoFiAv0lVY3HgqujFbAqe9mhjL0SdVU2xyc=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:d0:af:c9:81:07:2e:d1:7f:a7:57:22:2b:15:5e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59acb4022765898be4f06050cd3a2f9291d83367 Validity Not Before: Nov 25 07:00:52 2025 GMT Not After : Nov 26 07:00:52 2025 GMT Subject: CN=bd990a08c997cabc1077ec7ae07f0caaf868a0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:86:98:d3:c2:b0:7e:0c:21:13:25:6e:91: 82:ff:3c:20:c9:fe:05:19:fd:19:cf:2d:ed:5d:ca: 23:cb:31:b8:e0:c6:77:4f:46:7b:8a:69:93:f5:39: 80:1b:24:93:f9:4e:62:32:84:0f:38:92:9b:7d:51: 29:6c:3f:30:02:37:88:17:d2:15:0c:ef:25:43:9b: b0:3d:43:de:f1:3a:ff:be:6a:13:c1:bc:42:d6:4b: 3d:9e:05:d9:14:03:90:df:1d:a1:2f:28:cd:e6:7a: 55:a1:95:63:ce:a5:f2:88:d6:96:7b:75:53:4b:10: 0a:eb:3f:6a:c1:e2:f5:dd:22:71:09:25:fd:04:51: 7c:dc:03:0a:54:78:a5:19:39:df:cd:0b:32:5b:1f: 21:a2:41:62:1d:72:6f:d5:38:9f:6d:54:90:1b:2a: 7d:1f:86:cf:b2:37:6c:f7:00:8f:89:c5:a6:19:95: 6a:c2:e3:80:10:02:5a:c3:1c:17:fc:ff:65:94:97: db:0e:58:38:14:21:b6:6f:cd:69:60:e9:e7:90:17: e1:d4:27:c1:20:77:61:23:93:0e:59:03:81:cc:b9: 63:0e:4f:bd:07:3e:0a:2d:81:59:3f:a5:5f:91:52: 43:12:75:e0:a4:03:b9:ff:88:a5:26:29:eb:fb:96: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:99:0A:08:C9:97:CA:BC:10:77:EC:7A:E0:7F:0C:AA:F8:68:A0:B0 X509v3 Authority Key Identifier: keyid:59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:77:17:da:dd:93:9f:41:bb:c3:4d:d9:fe:ab:98:16:a7:45: 1d:5c:f2:84:4d:cc:47:ee:7c:d9:bf:92:21:e1:de:5b:d5:1a: 2d:f0:71:62:d3:a9:35:7c:9a:d9:89:ae:f8:a7:01:76:ff:a2: 63:fd:2b:82:bc:f5:11:e4:92:2e:d6:7e:d1:2e:26:e1:a5:f7: 7f:52:ed:a9:63:22:5b:de:7e:59:eb:41:4a:dd:17:87:38:83: 66:c7:e6:ce:fa:44:63:45:fd:99:03:85:28:04:8b:f7:a1:75: 64:af:19:06:86:da:60:89:0e:bd:82:a3:0b:d3:b3:d8:8c:01: a3:ce:1c:be:2a:87:45:56:5c:13:73:be:85:9e:80:01:12:43: 51:18:b4:2a:d0:a1:83:16:7b:fa:de:2f:0b:b9:4f:5b:90:13: e5:10:5c:c1:17:dc:0d:14:3c:73:03:04:9d:9c:fe:b4:67:1a: 7d:7b:b2:94:f9:dd:60:4c:6b:e5:3e:7e:8e:ab:1f:75:3e:b5: 99:83:7f:55:44:6d:d3:fc:fe:5c:b0:7e:60:c4:70:81:e7:e2: 2b:fc:8d:10:c9:f9:9c:0d:9f:d7:ef:0d:45:5b:d8:ca:21:e6: cd:61:ff:b2:a6:ba:f2:b7:cf:e9:98:a9:5f:a6:1a:c7:37:f6: 9d:02:4c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq50K/JgQcu0X+nVyIrFV6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YWNiNDAyMjc2NTg5OGJlNGYwNjA1MGNkM2EyZjkyOTFk ODMzNjcwHhcNMjUxMTI1MDcwMDUyWhcNMjUxMTI2MDcwMDUyWjAzMTEwLwYDVQQD EyhiZDk5MGEwOGM5OTdjYWJjMTA3N2VjN2FlMDdmMGNhYWY4NjhhMGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwaGmNPCsH4MIRMlbpGC/zwgyf4F Gf0Zzy3tXcojyzG44MZ3T0Z7immT9TmAGyST+U5iMoQPOJKbfVEpbD8wAjeIF9IV DO8lQ5uwPUPe8Tr/vmoTwbxC1ks9ngXZFAOQ3x2hLyjN5npVoZVjzqXyiNaWe3VT SxAK6z9qweL13SJxCSX9BFF83AMKVHilGTnfzQsyWx8hokFiHXJv1TifbVSQGyp9 H4bPsjds9wCPicWmGZVqwuOAEAJawxwX/P9llJfbDlg4FCG2b81pYOnnkBfh1CfB IHdhI5MOWQOBzLljDk+9Bz4KLYFZP6VfkVJDEnXgpAO5/4ilJinr+5ZMowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2ZCgjJl8q8EHfseuB/DKr4aKCwMB8GA1UdIwQY MBaAFFmstAInZYmL5PBgUM06L5KR2DNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2F5MEFpZGxpWXZrOEdCUXpUb3ZrcEhZTTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MjVlZDUtN2U3NC00NDI3LTliZGYt ZGQxZDI0OTAxN2FhLzEvV2F5MEFpZGxpWXZrOEdCUXpUb3ZrcEhZTTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82MjVlZDUtN2U3NC00NDI3LTliZGYtZGQxZDI0OTAxN2Fh LzEvV2F5MEFpZGxpWXZrOEdCUXpUb3ZrcEhZTTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXcX2t2T n0G7w03Z/quYFqdFHVzyhE3MR+582b+SIeHeW9UaLfBxYtOpNXya2Ymu+KcBdv+i Y/0rgrz1EeSSLtZ+0S4m4aX3f1LtqWMiW95+WetBSt0XhziDZsfmzvpEY0X9mQOF KASL96F1ZK8ZBobaYIkOvYKjC9Oz2IwBo84cviqHRVZcE3O+hZ6AARJDURi0KtCh gxZ7+t4vC7lPW5AT5RBcwRfcDRQ8cwMEnZz+tGcafXuylPndYExr5T5+jqsfdT61 mYN/VURt0/z+XLB+YMRwgefiK/yNEMn5nA2f1+8NRVvYyiHmzWH/sqa68rfP6Zip X6Yaxzf2nQJMTg== -----END CERTIFICATE-----Generated at Tue Dec 16 03:59:28 2025 by rpki-client