This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json) Hash identifier: CGLGh65TKx18a4ESwnTQOOOBLjLs0fv5W8PJsV3NGN0= Subject key identifier: 79:F9:71:B6:91:E5:CE:F6:09:4E:C5:9F:81:89:68:03:2F:0F:67:D6 Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1 Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1 Certificate serial: 019A5CE7C0479725ADD0AB74B0FD98DE4C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft Manifest number: 059C Signing time: Fri 07 Nov 2025 06:01:23 +0000 Manifest this update: Fri 07 Nov 2025 06:01:23 +0000 Manifest next update: Sat 08 Nov 2025 06:01:23 +0000 Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: q402kYLne+K0sIsky+q8DQ3rJ54JUDBkfXWXB6xiS7g=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5c:e7:c0:47:97:25:ad:d0:ab:74:b0:fd:98:de:4c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1 Validity Not Before: Nov 7 06:01:23 2025 GMT Not After : Nov 8 06:01:23 2025 GMT Subject: CN=79f971b691e5cef6094ec59f818968032f0f67d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:01:c0:9e:16:6c:73:4b:c7:97:e1:60:54: 12:d4:50:79:a8:e7:56:f7:a3:9d:13:e2:00:fb:37: d0:70:ea:79:17:89:ef:3b:58:6a:86:cb:f2:b9:4c: ab:23:32:2a:29:dd:41:b6:3d:fe:a0:7a:f6:6e:f9: 15:8a:05:33:ee:49:c0:ee:df:fa:f0:7f:c0:08:ec: 7b:3b:26:db:a5:18:09:ef:4f:69:38:5e:56:85:7b: f7:40:74:c9:9a:f0:63:27:cd:38:20:7d:d6:cd:c6: 56:4d:b2:a5:a3:90:4d:46:c1:2e:40:c2:50:fc:d7: 46:ab:6e:ae:0e:74:d8:0c:26:44:30:21:8b:a9:11: 16:e7:6e:cd:e4:08:59:4e:92:ce:1a:40:c6:eb:4a: 74:6a:c5:09:2c:91:92:47:cd:15:67:20:59:e2:da: f7:1f:85:25:8b:75:be:b9:a9:c9:04:f2:02:d0:cb: c7:21:ee:83:41:1b:49:c6:63:e6:3a:d5:e5:a8:e2: 98:fe:94:33:18:31:87:01:2c:b0:53:07:46:30:f1: f4:fb:50:b9:45:a3:b8:04:4a:2f:27:f3:09:7b:d3: 2d:09:90:84:3e:68:7f:f9:49:c0:1c:c0:ce:e2:9b: 33:d7:a7:a2:22:d3:3d:89:5a:07:5c:32:09:ee:75: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F9:71:B6:91:E5:CE:F6:09:4E:C5:9F:81:89:68:03:2F:0F:67:D6 X509v3 Authority Key Identifier: keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d9:6d:ee:51:d0:e8:1d:30:4d:35:15:55:89:58:02:14:ec: 17:cb:af:67:ab:27:d4:e9:c7:a1:8f:a8:04:6f:99:1c:fd:26: 4f:7a:d7:52:4d:35:dc:7a:c4:2d:cd:d4:2a:ef:60:ef:67:28: e1:24:ec:15:77:48:e9:a5:7e:48:eb:ec:9b:09:ee:f8:fb:87: 72:04:6d:0a:44:9f:6f:47:77:23:91:d0:9f:e6:fb:b3:87:46: 0d:e7:ad:a4:91:2e:ce:1a:ff:46:3e:bc:fe:81:eb:16:4e:83: af:2e:c7:f9:91:ba:35:ed:5c:19:db:00:c5:72:02:ad:31:68: 45:25:a6:1b:02:13:d9:bb:84:8d:6c:5c:21:07:c0:89:25:9a: 0d:d3:27:23:b2:cb:36:14:e7:62:3a:2b:62:82:fb:d6:47:e3: 39:8f:96:1c:10:be:43:50:ad:02:e3:4c:b5:a5:26:2b:f3:32: ad:a5:08:6f:73:2a:d6:4e:17:f2:14:b0:54:32:31:92:b9:9c: 49:20:f2:7a:7b:29:d5:1c:7e:25:92:52:c0:f3:8e:98:ca:9d: 7d:85:cd:ae:52:65:a4:f7:bb:7d:06:59:00:f4:47:7e:05:d3: a4:34:23:13:6e:e7:1a:3e:fe:46:cd:74:4d:79:90:e5:65:83: 51:68:0d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpc58BHlyWt0Kt0sP2Y3kwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzJiYmQ3OTEwYWYxNWFkNzA2NGRiNGE2ZDNiZDY0YTdl ODI3YzEwHhcNMjUxMTA3MDYwMTIzWhcNMjUxMTA4MDYwMTIzWjAzMTEwLwYDVQQD Eyg3OWY5NzFiNjkxZTVjZWY2MDk0ZWM1OWY4MTg5NjgwMzJmMGY2N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqikBwJ4WbHNLx5fhYFQS1FB5qOdW 96OdE+IA+zfQcOp5F4nvO1hqhsvyuUyrIzIqKd1Btj3+oHr2bvkVigUz7knA7t/6 8H/ACOx7OybbpRgJ709pOF5WhXv3QHTJmvBjJ804IH3WzcZWTbKlo5BNRsEuQMJQ /NdGq26uDnTYDCZEMCGLqREW527N5AhZTpLOGkDG60p0asUJLJGSR80VZyBZ4tr3 H4Uli3W+uanJBPIC0MvHIe6DQRtJxmPmOtXlqOKY/pQzGDGHASywUwdGMPH0+1C5 RaO4BEovJ/MJe9MtCZCEPmh/+UnAHMDO4psz16eiItM9iVoHXDIJ7nWEIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn5cbaR5c72CU7Fn4GJaAMvD2fWMB8GA1UdIwQY MBaAFPUyu9eRCvFa1wZNtKbTvWSn6CfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRLNzE1RUs4VnJYQmsyMHB0TzlaS2ZvSjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjliNWMtMWJjZC00ZmYzLWFkZTEt MzI0Y2FhYWM5NjJiLzEvOVRLNzE1RUs4VnJYQmsyMHB0TzlaS2ZvSjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NjliNWMtMWJjZC00ZmYzLWFkZTEtMzI0Y2FhYWM5NjJi LzEvOVRLNzE1RUs4VnJYQmsyMHB0TzlaS2ZvSjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9lt7lHQ 6B0wTTUVVYlYAhTsF8uvZ6sn1OnHoY+oBG+ZHP0mT3rXUk013HrELc3UKu9g72co 4STsFXdI6aV+SOvsmwnu+PuHcgRtCkSfb0d3I5HQn+b7s4dGDeetpJEuzhr/Rj68 /oHrFk6Dry7H+ZG6Ne1cGdsAxXICrTFoRSWmGwIT2buEjWxcIQfAiSWaDdMnI7LL NhTnYjorYoL71kfjOY+WHBC+Q1CtAuNMtaUmK/MyraUIb3Mq1k4X8hSwVDIxkrmc SSDyensp1Rx+JZJSwPOOmMqdfYXNrlJlpPe7fQZZAPRHfgXTpDQjE27nGj7+Rs10 TXmQ5WWDUWgNGw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:07:52 2025 by rpki-client