This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft File: sBblecxJQEjsEqI_8lOacAS7duU.mft (raw, json) Hash identifier: x+i+i4t36BDh3durxQQ7X6d3AK+oc9LjhSpgpxbHqqI= Subject key identifier: A1:27:39:42:34:A2:91:06:BC:63:DC:D4:6A:80:99:FA:3E:A2:50:44 Authority key identifier: B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5 Certificate issuer: /CN=b016e579cc494048ec12a23ff2539a7004bb76e5 Certificate serial: 0195222871E5DCBC80554F82EF66D893B767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft Manifest number: 0CA3 Signing time: Thu 20 Feb 2025 07:00:30 +0000 Manifest this update: Thu 20 Feb 2025 07:00:30 +0000 Manifest next update: Fri 21 Feb 2025 07:00:30 +0000 Files and hashes: 1: sBblecxJQEjsEqI_8lOacAS7duU.crl (hash: 09d/yj5COh0jNo1bvoqzMeC8Mj0R+v9u8Hq+uYDIrmk=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:22:28:71:e5:dc:bc:80:55:4f:82:ef:66:d8:93:b7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b016e579cc494048ec12a23ff2539a7004bb76e5 Validity Not Before: Feb 20 07:00:30 2025 GMT Not After : Feb 21 07:00:30 2025 GMT Subject: CN=a127394234a29106bc63dcd46a8099fa3ea25044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:a4:9a:ca:8d:bc:fb:e0:d9:30:50:76:cd: 69:9f:46:6e:78:fb:19:e5:e3:aa:82:12:3b:e3:08: ac:ac:b0:4f:f3:e3:fa:a0:12:32:bf:d4:73:46:35: 52:68:28:b2:28:75:20:7b:df:d0:a2:03:87:ff:4d: ae:4d:f9:fd:d7:e1:a7:a4:5c:22:5b:c2:7a:d9:5c: 76:38:51:c6:e6:2b:db:18:7e:3b:b0:eb:2b:15:29: 43:17:96:af:f0:6b:48:ee:ac:80:b1:68:24:11:3b: fa:40:7a:48:03:ad:9f:1c:52:80:96:e4:ec:e1:5f: 47:82:ea:c6:d8:a6:4e:a8:9b:28:68:70:c8:3f:94: 98:8e:e2:97:c4:cf:e5:69:d0:d2:da:de:b5:23:06: af:57:59:0b:92:fa:83:5d:21:7e:7f:4a:c3:51:5e: a7:ef:84:77:71:23:40:cb:e7:14:e2:c6:7d:29:e0: 27:78:13:0a:9e:df:94:96:17:e1:42:52:38:4c:ad: 35:e5:52:75:d0:b9:e7:b2:59:d4:71:66:49:f0:2c: 6f:10:c2:c8:81:72:20:0c:f3:85:db:ae:61:30:f9: ac:62:29:bc:86:9f:8b:98:37:34:7f:ea:7c:37:53: 67:fb:aa:8c:69:f4:ea:15:09:d4:de:4e:11:c3:7c: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:27:39:42:34:A2:91:06:BC:63:DC:D4:6A:80:99:FA:3E:A2:50:44 X509v3 Authority Key Identifier: keyid:B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:31:ba:7a:09:f7:4b:51:cd:ad:31:9f:4d:8e:0d:63:ca: f9:bf:45:10:a2:95:35:8d:4b:66:00:7a:18:be:76:5b:7d:26: 14:84:b8:1d:de:ee:3b:94:35:81:8d:55:19:c7:a4:7e:06:67: 27:c2:06:6f:48:fc:73:d3:01:53:43:93:6f:5a:b6:57:32:6c: 61:6c:b3:9b:1a:c4:09:de:4c:68:16:e4:12:d4:b5:a8:2d:dd: 62:61:63:da:6b:4b:e7:3d:61:9c:64:ef:8a:f4:51:b1:ad:10: 18:cf:38:e9:28:b6:87:f7:15:4f:c5:89:37:0e:6a:57:4d:b3: 9e:d6:cb:e9:b3:eb:54:8d:49:1f:4b:97:a6:ea:66:a5:5b:11: 5e:6e:66:c9:4c:38:ab:28:15:7e:3c:4e:60:fe:ae:4a:af:7c: a1:b8:a7:db:0f:36:c4:35:aa:f7:5d:47:3b:0d:9a:8c:88:66: ad:ae:e0:8d:94:32:43:48:da:9d:ed:c6:9a:a8:e5:8a:0e:83: 22:df:31:7c:59:5f:3d:ba:2e:db:77:b9:31:8c:00:6d:fe:53: 4a:b2:b6:50:11:65:4e:df:17:ef:da:0f:31:be:61:6b:76:39: ec:fd:60:af:9b:24:99:bb:ad:f9:03:49:e6:cf:2b:58:5a:c4: b8:41:e0:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUiKHHl3LyAVU+C72bYk7dnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTZlNTc5Y2M0OTQwNDhlYzEyYTIzZmYyNTM5YTcwMDRi Yjc2ZTUwHhcNMjUwMjIwMDcwMDMwWhcNMjUwMjIxMDcwMDMwWjAzMTEwLwYDVQQD EyhhMTI3Mzk0MjM0YTI5MTA2YmM2M2RjZDQ2YTgwOTlmYTNlYTI1MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcOkmsqNvPvg2TBQds1pn0ZuePsZ 5eOqghI74wisrLBP8+P6oBIyv9RzRjVSaCiyKHUge9/QogOH/02uTfn91+GnpFwi W8J62Vx2OFHG5ivbGH47sOsrFSlDF5av8GtI7qyAsWgkETv6QHpIA62fHFKAluTs 4V9HgurG2KZOqJsoaHDIP5SYjuKXxM/ladDS2t61IwavV1kLkvqDXSF+f0rDUV6n 74R3cSNAy+cU4sZ9KeAneBMKnt+UlhfhQlI4TK015VJ10LnnslnUcWZJ8CxvEMLI gXIgDPOF265hMPmsYim8hp+LmDc0f+p8N1Nn+6qMafTqFQnU3k4Rw3wiwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEnOUI0opEGvGPc1GqAmfo+olBEMB8GA1UdIwQY MBaAFLAW5XnMSUBI7BKiP/JTmnAEu3blMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JibGVjeEpRRWpzRXFJXzhsT2FjQVM3ZHVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNzNkMTYtNGJmYi00Mjc3LTk1N2Ut ZDVjMTNlNDQ4YmNjLzEvc0JibGVjeEpRRWpzRXFJXzhsT2FjQVM3ZHVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jNzNkMTYtNGJmYi00Mjc3LTk1N2UtZDVjMTNlNDQ4YmNj LzEvc0JibGVjeEpRRWpzRXFJXzhsT2FjQVM3ZHVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjasxunoJ 90tRza0xn02ODWPK+b9FEKKVNY1LZgB6GL52W30mFIS4Hd7uO5Q1gY1VGcekfgZn J8IGb0j8c9MBU0OTb1q2VzJsYWyzmxrECd5MaBbkEtS1qC3dYmFj2mtL5z1hnGTv ivRRsa0QGM846Si2h/cVT8WJNw5qV02zntbL6bPrVI1JH0uXpupmpVsRXm5myUw4 qygVfjxOYP6uSq98obin2w82xDWq911HOw2ajIhmra7gjZQyQ0jane3Gmqjlig6D It8xfFlfPbou23e5MYwAbf5TSrK2UBFlTt8X79oPMb5ha3Y57P1gr5skmbut+QNJ 5s8rWFrEuEHguw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:11 2025 by rpki-client