This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json) Hash identifier: Cl+nJw4INvjWZiAf4qr00IhtiCV8JThG5VGGCwYL8n0= Subject key identifier: CC:EF:80:CB:65:78:2A:BD:C5:7E:9F:14:FB:08:BD:8B:A1:F8:9D:06 Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84 Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84 Certificate serial: 019A6B1116F930554EDA1FB6B6FF33595D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft Manifest number: 16AE Signing time: Mon 10 Nov 2025 00:01:13 +0000 Manifest this update: Mon 10 Nov 2025 00:01:13 +0000 Manifest next update: Tue 11 Nov 2025 00:01:13 +0000 Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: LFdCezL0BZOIjbUOcY5cJ0PGAwuM5EdB7D+1lRc5dK4=) 2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6b:11:16:f9:30:55:4e:da:1f:b6:b6:ff:33:59:5d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84 Validity Not Before: Nov 10 00:01:13 2025 GMT Not After : Nov 11 00:01:13 2025 GMT Subject: CN=ccef80cb65782abdc57e9f14fb08bd8ba1f89d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:d2:fc:9c:27:b6:82:56:bf:20:2f:0e:0e: cf:7f:69:55:40:c8:4e:a6:43:44:59:01:f1:a3:5d: 47:4e:5f:76:47:d4:48:6f:fb:8a:7b:c3:89:f1:43: e4:96:a5:ba:da:21:65:bd:8e:9a:77:58:14:57:66: 47:c7:b0:20:97:db:09:06:ac:ae:6a:f1:b8:74:24: a0:a7:ff:95:f7:9d:a8:44:97:28:bc:8e:a0:d7:ff: 22:59:cf:57:f5:3a:c6:4d:e4:f8:a8:34:10:de:89: ca:80:0f:44:76:d2:69:6e:f9:23:95:c7:82:cc:08: d3:3c:98:fd:a2:0c:ff:00:65:97:fa:a6:21:04:3f: b6:60:ed:3a:4f:94:a3:bc:e3:11:6d:ce:97:1a:ad: a5:3b:ad:d3:ee:6f:f9:10:6c:df:77:cd:07:b1:40: d4:1a:7e:68:c1:a2:3f:10:0e:d8:c1:12:8e:47:1d: ed:6c:2b:ff:bd:c8:eb:22:8d:b4:ab:be:91:fe:95: 4b:24:ca:7d:89:ff:85:f0:82:98:80:df:18:85:ad: 62:eb:cc:2e:a8:70:9f:ea:74:ee:81:bd:49:49:34: 61:8d:4e:bd:6e:b2:d8:ee:22:7c:b9:93:a4:d4:b8: 79:3e:38:ab:a5:76:26:a0:2d:89:f9:26:d2:5b:45: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EF:80:CB:65:78:2A:BD:C5:7E:9F:14:FB:08:BD:8B:A1:F8:9D:06 X509v3 Authority Key Identifier: keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c4:66:06:9c:b3:d6:26:dd:ec:ff:26:f4:a3:b0:c5:52:2a: 2a:fa:c7:fd:37:17:bb:72:01:92:c2:9a:4f:f5:00:e2:2a:a9: 65:3c:05:9d:e9:ff:7a:65:38:f8:45:5f:ec:11:59:f0:8f:69: b6:a7:3c:d3:1d:4f:ab:d2:6d:04:08:53:1d:55:5b:22:4d:67: 6d:c4:1c:14:8f:0a:2a:40:d3:91:c2:09:c9:b5:c4:ae:99:e6: bf:dd:db:5f:91:41:58:22:49:09:05:7d:75:c2:14:92:75:17: 09:c3:ab:47:94:07:ae:b0:b8:26:a6:0b:13:8d:7a:bf:9e:1d: dd:7f:d9:7a:59:9d:76:16:ea:03:54:b3:41:a5:2d:7b:1b:92: d1:f1:d0:92:31:42:63:90:e1:cb:a3:6f:74:6c:dd:7b:5c:5d: 03:2a:3d:4c:50:0b:f4:22:f1:3d:9a:e7:c4:3a:b4:ad:03:ad: 81:fb:55:c1:49:fb:d1:de:21:79:ad:83:bb:53:92:4d:d7:1a: f6:94:a4:0b:75:fc:2d:48:40:6b:5a:47:1f:72:99:e5:26:fe: a2:98:86:71:52:0b:2f:7f:f0:f7:28:36:a4:4c:96:0f:9f:0b: 71:dc:3d:e7:67:3a:98:e8:10:a3:a3:89:4a:d6:02:da:7e:66: bd:40:b5:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZprERb5MFVO2h+2tv8zWV1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGM5MDRkNDMwZTRmOTk5ZDE0N2UyMTQ1MTVlOWNiYTdh YzdlODQwHhcNMjUxMTEwMDAwMTEzWhcNMjUxMTExMDAwMTEzWjAzMTEwLwYDVQQD EyhjY2VmODBjYjY1NzgyYWJkYzU3ZTlmMTRmYjA4YmQ4YmExZjg5ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0zS/JwntoJWvyAvDg7Pf2lVQMhO pkNEWQHxo11HTl92R9RIb/uKe8OJ8UPklqW62iFlvY6ad1gUV2ZHx7Agl9sJBqyu avG4dCSgp/+V952oRJcovI6g1/8iWc9X9TrGTeT4qDQQ3onKgA9EdtJpbvkjlceC zAjTPJj9ogz/AGWX+qYhBD+2YO06T5SjvOMRbc6XGq2lO63T7m/5EGzfd80HsUDU Gn5owaI/EA7YwRKORx3tbCv/vcjrIo20q76R/pVLJMp9if+F8IKYgN8Yha1i68wu qHCf6nTugb1JSTRhjU69brLY7iJ8uZOk1Lh5PjirpXYmoC2J+SbSW0W+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzvgMtleCq9xX6fFPsIvYuh+J0GMB8GA1UdIwQY MBaAFCIMkE1DDk+ZnRR+IUUV6cunrH6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWd5UVRVTU9UNW1kRkg0aFJSWHB5NmVzZm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80YjA2ZDMtYTU4Yi00YTI5LWI2OGQt NzY0ZGUzYjdiZjNkLzEvSWd5UVRVTU9UNW1kRkg0aFJSWHB5NmVzZm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80YjA2ZDMtYTU4Yi00YTI5LWI2OGQtNzY0ZGUzYjdiZjNk LzEvSWd5UVRVTU9UNW1kRkg0aFJSWHB5NmVzZm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMRmBpyz 1ibd7P8m9KOwxVIqKvrH/TcXu3IBksKaT/UA4iqpZTwFnen/emU4+EVf7BFZ8I9p tqc80x1Pq9JtBAhTHVVbIk1nbcQcFI8KKkDTkcIJybXErpnmv93bX5FBWCJJCQV9 dcIUknUXCcOrR5QHrrC4JqYLE416v54d3X/ZelmddhbqA1SzQaUtexuS0fHQkjFC Y5Dhy6NvdGzde1xdAyo9TFAL9CLxPZrnxDq0rQOtgftVwUn70d4hea2Du1OSTdca 9pSkC3X8LUhAa1pHH3KZ5Sb+opiGcVILL3/w9yg2pEyWD58Lcdw952c6mOgQo6OJ StYC2n5mvUC1bw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:24:44 2025 by rpki-client