This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json) Hash identifier: 5Q/g+8cfaqVdm7JW4DK0ounxWOz/ORx+Wa3z8HZZWI4= Subject key identifier: FD:09:6D:D5:5C:B3:CA:4F:DD:32:02:CD:12:1D:F5:5A:12:E3:33:28 Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19 Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19 Certificate serial: 019AB8BE3127EA55741FC53EED1AF372E82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft Manifest number: 171A Signing time: Tue 25 Nov 2025 02:01:03 +0000 Manifest this update: Tue 25 Nov 2025 02:01:03 +0000 Manifest next update: Wed 26 Nov 2025 02:01:03 +0000 Files and hashes: 1: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: SfEh12yJCGUYJvm+dU6/p5fYW6FFWQJzAb+x9iolk+A=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:be:31:27:ea:55:74:1f:c5:3e:ed:1a:f3:72:e8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19 Validity Not Before: Nov 25 02:01:03 2025 GMT Not After : Nov 26 02:01:03 2025 GMT Subject: CN=fd096dd55cb3ca4fdd3202cd121df55a12e33328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:38:71:73:25:e8:33:f2:62:07:24:c1:06: e9:4c:5a:a2:c4:59:27:97:ee:ef:7d:7d:9a:e4:ff: a8:6a:a6:da:da:1d:ea:0c:7c:5a:24:5b:48:ae:22: 1e:c0:a4:6b:ef:dc:d8:25:21:4b:22:05:d6:a1:d2: 50:ec:95:f3:3e:d1:66:58:21:95:6d:bf:3d:06:3b: 3b:1c:c9:b3:91:4c:8a:4e:45:9b:0c:7c:62:47:01: 3b:f6:51:60:48:c0:ac:78:c0:78:e3:0f:4d:9d:f7: 17:58:e3:e5:2c:7f:22:c7:19:4f:58:39:ed:02:d2: 97:8e:44:cc:06:f0:76:c6:f2:86:5c:8b:e5:55:e6: 3b:4e:eb:66:85:5b:92:64:8a:b7:fd:1e:19:0f:25: 15:d7:06:18:d1:4a:76:6b:f3:a4:7d:ba:67:12:62: 0a:05:49:9b:f0:16:4f:92:9c:b9:97:ce:50:bc:7c: 68:f0:87:10:e6:7d:88:aa:d9:76:2e:f6:dc:87:a5: 75:2c:8d:1e:dd:e8:63:1b:7d:e4:02:e3:8d:7e:a2: 1b:28:46:19:16:ff:0c:e1:a0:0c:f9:5d:3e:8b:de: 2b:01:0b:97:09:c1:91:86:58:b3:b6:62:d3:66:81: 7e:e0:bd:14:96:82:aa:88:8f:99:21:fe:07:f8:b1: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:09:6D:D5:5C:B3:CA:4F:DD:32:02:CD:12:1D:F5:5A:12:E3:33:28 X509v3 Authority Key Identifier: keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c2:3a:dc:d3:3c:ea:f6:16:e2:54:99:cb:7f:fc:3b:ee:bd: 15:32:1c:d6:a9:d2:a2:98:50:69:56:42:b4:18:14:71:63:af: 08:ef:51:ae:b0:da:aa:4d:f5:63:33:28:a3:1b:1c:1b:9d:93: c6:f9:b6:84:2f:7b:9f:ed:0b:dd:5a:f5:38:e5:ed:b8:ef:da: e5:df:98:12:40:5f:d0:83:b8:8f:b9:9e:16:19:28:0a:93:d5: 26:cb:b5:27:01:aa:53:44:44:23:a5:48:5c:3f:ff:c3:e9:70: 61:aa:3d:e2:f5:f6:30:5a:b3:e7:4d:e4:bf:ed:50:f7:8a:c2: ef:4b:09:11:65:66:fa:6a:be:d3:ae:16:f2:41:a6:4c:ed:7f: 43:ab:2f:4e:6f:dc:6a:d3:8b:b7:01:7f:d1:c7:c7:5b:ed:35: 28:2f:dd:45:da:cc:ff:13:07:82:62:70:cd:3b:e4:62:ff:7d: d1:33:7f:54:2d:b3:9d:07:b1:ac:d9:0a:5c:78:33:fc:3a:d3: 75:b5:6b:f0:66:45:03:70:97:ae:8b:5c:e9:a7:d2:8e:4a:bd: 17:b2:f0:8b:ba:0a:25:cc:ca:45:50:ae:bb:00:c8:db:09:53: 45:db:55:b7:56:99:5e:fd:7d:0e:f1:b4:d7:bf:a2:dd:f7:55: 10:56:7f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq4vjEn6lV0H8U+7RrzcugqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl NjZjMTkwHhcNMjUxMTI1MDIwMTAzWhcNMjUxMTI2MDIwMTAzWjAzMTEwLwYDVQQD EyhmZDA5NmRkNTVjYjNjYTRmZGQzMjAyY2QxMjFkZjU1YTEyZTMzMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9A4cXMl6DPyYgckwQbpTFqixFkn l+7vfX2a5P+oaqba2h3qDHxaJFtIriIewKRr79zYJSFLIgXWodJQ7JXzPtFmWCGV bb89Bjs7HMmzkUyKTkWbDHxiRwE79lFgSMCseMB44w9NnfcXWOPlLH8ixxlPWDnt AtKXjkTMBvB2xvKGXIvlVeY7TutmhVuSZIq3/R4ZDyUV1wYY0Up2a/OkfbpnEmIK BUmb8BZPkpy5l85QvHxo8IcQ5n2Iqtl2Lvbch6V1LI0e3ehjG33kAuONfqIbKEYZ Fv8M4aAM+V0+i94rAQuXCcGRhliztmLTZoF+4L0UloKqiI+ZIf4H+LHqbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0JbdVcs8pP3TICzRId9VoS4zMoMB8GA1UdIwQY MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt MzExNzk4OTYwMWFkLzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcI63NM8 6vYW4lSZy3/8O+69FTIc1qnSophQaVZCtBgUcWOvCO9RrrDaqk31YzMooxscG52T xvm2hC97n+0L3Vr1OOXtuO/a5d+YEkBf0IO4j7meFhkoCpPVJsu1JwGqU0REI6VI XD//w+lwYao94vX2MFqz503kv+1Q94rC70sJEWVm+mq+064W8kGmTO1/Q6svTm/c atOLtwF/0cfHW+01KC/dRdrM/xMHgmJwzTvkYv990TN/VC2znQexrNkKXHgz/DrT dbVr8GZFA3CXrotc6afSjkq9F7Lwi7oKJczKRVCuuwDI2wlTRdtVt1aZXv19DvG0 17+i3fdVEFZ/NA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:10:48 2025 by rpki-client