This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft File: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json) Hash identifier: 5mHjVHCZ8dn7nly40xrlDE2AUXww2BEXnvgcxeH7ngY= Subject key identifier: DE:ED:D5:C3:D8:32:2B:84:71:CC:C2:59:EB:66:12:18:76:99:37:33 Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44 Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944 Certificate serial: 019A57899B6EFF94FF12EF9C6A5C8E3D55ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft Manifest number: 125A Signing time: Thu 06 Nov 2025 05:00:27 +0000 Manifest this update: Thu 06 Nov 2025 05:00:27 +0000 Manifest next update: Fri 07 Nov 2025 05:00:27 +0000 Files and hashes: 1: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: jooAdvzaCPtLXfzO7SGbguH8zxYL84wxO34ZBVCq1R0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:57:89:9b:6e:ff:94:ff:12:ef:9c:6a:5c:8e:3d:55:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944 Validity Not Before: Nov 6 05:00:27 2025 GMT Not After : Nov 7 05:00:27 2025 GMT Subject: CN=deedd5c3d8322b8471ccc259eb66121876993733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:23:0e:56:83:68:78:59:ef:7b:75:1b:38: 26:c3:aa:77:bd:cf:11:24:b4:83:b3:b7:89:d0:f7: e0:97:e0:63:f4:66:14:8a:3f:49:fa:f3:64:f0:31: a1:54:41:72:ad:c4:b4:82:5f:df:ad:1f:35:a6:f0: 8e:5c:32:9e:df:77:3b:14:36:1a:ca:be:46:8e:d6: 56:f9:82:e3:d1:b4:47:fd:e0:41:77:a7:ec:f9:00: 92:19:a4:18:02:8a:d0:34:6c:89:06:c4:a2:d5:a1: 9b:51:c9:4d:53:d6:5b:9f:fe:3c:70:02:87:ab:5d: c4:23:81:2f:7f:2a:9c:07:a6:12:e8:89:44:5f:a1: 9d:4d:9b:48:c7:51:ce:23:e0:15:5a:bc:37:c1:d6: 5b:41:45:42:7b:9d:a1:65:a9:1c:ff:2c:1c:42:21: 87:9e:4d:f2:04:8c:cb:cf:28:54:2c:51:8e:b4:39: 5c:ed:cb:b2:55:a3:53:72:75:23:fb:c4:7b:44:c5: 7f:28:ee:14:e4:cf:ff:6d:0e:54:55:02:4b:e1:b5: 36:16:44:e5:86:1b:f7:7a:e8:09:0e:c3:7e:69:16: 82:1c:de:9e:1b:02:cc:79:ca:04:16:3b:76:46:2c: 57:36:ee:06:8d:83:6a:83:69:4d:7b:93:71:7d:81: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:D5:C3:D8:32:2B:84:71:CC:C2:59:EB:66:12:18:76:99:37:33 X509v3 Authority Key Identifier: keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ce:52:d3:ee:a0:3c:4d:84:de:85:f9:1a:d4:11:c5:24:1b: 48:3c:e8:1d:45:a4:73:3d:f2:7e:56:61:3f:92:38:1c:e1:9c: 13:80:30:56:48:93:c7:33:8b:3b:14:23:4c:5c:ab:e7:3b:a7: 11:5e:f7:17:38:e7:17:0e:d0:8e:ee:a4:79:34:5a:61:30:ba: 6f:e4:6f:7f:af:c8:69:4c:4e:5d:54:ae:f0:99:ba:d3:14:82: f5:bf:53:f7:3d:d0:51:89:28:a2:27:71:3d:28:d1:df:de:da: 98:b1:86:70:4a:22:69:13:f6:7b:36:da:9a:9f:17:7d:d5:fa: 9b:60:0e:74:b8:2d:88:e0:d3:7a:74:e9:ef:de:de:13:bc:9f: 6d:05:fe:05:bd:b6:ab:b4:a5:68:69:b8:85:77:fa:87:de:e5: f3:80:23:59:57:bb:d5:35:7e:81:74:77:80:aa:4f:05:c0:05: 18:09:ad:00:25:10:ea:75:60:c2:b9:86:d2:58:ce:7b:52:86: 16:45:71:7e:66:dd:bb:10:03:a5:ae:64:73:e8:3d:0f:37:a7: 5c:9c:39:ac:42:36:65:2b:73:96:8d:3d:a8:91:2a:8f:09:25: 1d:36:a3:94:82:21:f7:fe:83:d4:df:93:bf:5e:38:06:b6:5e: 94:2c:4a:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpXiZtu/5T/Eu+calyOPVXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNTY2NGUwMjkzNmNiNWI1NDU0ZDU5NWM1MzgyYjdlN2Ew Yzc5NDQwHhcNMjUxMTA2MDUwMDI3WhcNMjUxMTA3MDUwMDI3WjAzMTEwLwYDVQQD EyhkZWVkZDVjM2Q4MzIyYjg0NzFjY2MyNTllYjY2MTIxODc2OTkzNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j8jDlaDaHhZ73t1Gzgmw6p3vc8R JLSDs7eJ0Pfgl+Bj9GYUij9J+vNk8DGhVEFyrcS0gl/frR81pvCOXDKe33c7FDYa yr5GjtZW+YLj0bRH/eBBd6fs+QCSGaQYAorQNGyJBsSi1aGbUclNU9Zbn/48cAKH q13EI4EvfyqcB6YS6IlEX6GdTZtIx1HOI+AVWrw3wdZbQUVCe52hZakc/ywcQiGH nk3yBIzLzyhULFGOtDlc7cuyVaNTcnUj+8R7RMV/KO4U5M//bQ5UVQJL4bU2FkTl hhv3eugJDsN+aRaCHN6eGwLMecoEFjt2RixXNu4GjYNqg2lNe5NxfYFGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7t1cPYMiuEcczCWetmEhh2mTczMB8GA1UdIwQY MBaAFC5WZOApNstbVFTVlcU4K356DHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMt ZWY4MWZjYTYzMDI5LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMtZWY4MWZjYTYzMDI5 LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsM5S0+6g PE2E3oX5GtQRxSQbSDzoHUWkcz3yflZhP5I4HOGcE4AwVkiTxzOLOxQjTFyr5zun EV73FzjnFw7Qju6keTRaYTC6b+Rvf6/IaUxOXVSu8Jm60xSC9b9T9z3QUYkooidx PSjR397amLGGcEoiaRP2ezbamp8XfdX6m2AOdLgtiODTenTp797eE7yfbQX+Bb22 q7SlaGm4hXf6h97l84AjWVe71TV+gXR3gKpPBcAFGAmtACUQ6nVgwrmG0ljOe1KG FkVxfmbduxADpa5kc+g9DzenXJw5rEI2ZStzlo09qJEqjwklHTajlIIh9/6D1N+T v144BrZelCxK1g== -----END CERTIFICATE-----Generated at Fri Dec 19 14:02:26 2025 by rpki-client