This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json) Hash identifier: LUZMePn5hcIBaimeQ4/014YEMyC4VdOzoyF4h1zBBGM= Subject key identifier: D2:9C:B9:A8:A3:D2:1B:CD:15:0F:9E:CC:6B:60:06:10:BB:F4:86:08 Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99 Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99 Certificate serial: 019AC4C30228014FCB05072B2F6804E16690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft Manifest number: 09AF Signing time: Thu 27 Nov 2025 10:01:45 +0000 Manifest this update: Thu 27 Nov 2025 10:01:45 +0000 Manifest next update: Fri 28 Nov 2025 10:01:45 +0000 Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: TndnkyuHarrX3PmLFKjZDb0GssDVOh3R7lA1ge+GLpc=) 2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:c3:02:28:01:4f:cb:05:07:2b:2f:68:04:e1:66:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99 Validity Not Before: Nov 27 10:01:45 2025 GMT Not After : Nov 28 10:01:45 2025 GMT Subject: CN=d29cb9a8a3d21bcd150f9ecc6b600610bbf48608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:5a:a4:fe:2a:51:85:03:7c:c3:c0:ef:f6: c2:7b:96:de:92:79:86:d3:62:31:1d:e3:b0:01:72: a4:e9:ad:f5:c0:d6:fc:0a:57:1e:90:fd:87:39:17: c4:dc:95:ec:91:91:84:46:e3:b5:d1:e7:19:55:a2: cf:b5:a2:c5:d2:6c:2c:94:a8:db:63:49:0e:60:5b: 00:7f:b9:2f:b5:fa:dc:ab:17:e7:75:82:56:36:6c: 83:df:e0:fc:b3:2c:b2:cc:5f:0f:e1:14:16:5c:3f: b9:4e:84:bb:bb:cc:7e:80:fc:99:ad:6b:28:6a:c6: d4:9e:8f:07:f8:19:19:eb:e6:ca:d2:7f:1d:93:be: 48:18:a2:84:37:8b:8e:21:75:97:1a:31:4b:47:0b: 5d:eb:99:c3:82:3a:3e:a7:3a:5a:3a:85:2b:5c:fd: 3b:a1:39:26:16:45:8d:6a:9b:de:e2:6c:8d:de:19: 00:00:97:6f:a5:52:0e:cb:02:d3:60:06:2c:99:b3: 80:d6:44:75:f8:a6:b2:1c:65:8b:f6:6a:29:3c:22: f5:0b:24:5e:5a:2b:05:51:99:e4:46:94:c5:09:8d: 02:41:be:09:07:2e:a9:1d:9b:e0:02:24:59:29:62: 65:28:8f:55:dc:f5:b7:ec:76:32:21:b8:ac:67:72: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:B9:A8:A3:D2:1B:CD:15:0F:9E:CC:6B:60:06:10:BB:F4:86:08 X509v3 Authority Key Identifier: keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:65:a5:0c:0b:aa:1c:47:be:8a:d6:36:64:89:7c:75:58:05: f7:a8:18:20:22:7e:11:b1:14:be:e9:47:74:40:8d:14:ce:b9: b1:0a:50:2a:87:c3:fc:ce:78:ee:df:18:3d:db:19:b8:22:e3: 32:92:4a:47:a3:00:ca:49:75:d1:83:9d:98:11:a8:ce:3c:1c: 22:4a:fa:e5:e6:13:9c:35:6c:c7:84:0e:f7:b0:74:0e:c3:1f: 49:4c:22:38:00:9c:89:cd:4c:35:0e:cb:32:5f:ac:0c:a6:c7: 00:31:dc:c2:8d:54:08:70:9c:eb:a8:1f:c7:96:0d:32:72:39: 38:9b:82:72:be:5c:1e:14:19:23:16:c2:cf:0a:42:00:77:26: 83:63:7b:35:b0:4b:60:ca:53:13:e6:5a:d6:6e:d3:03:32:6b: 2e:ac:42:84:0b:78:10:38:f5:9f:24:2b:b0:1e:e8:f1:11:22: ed:92:c1:f1:04:74:81:99:de:bb:c5:65:f7:0d:39:b7:85:55: ba:36:47:90:e7:64:ec:5a:9d:32:0c:4f:b0:be:9d:6a:65:6a: 66:16:37:4b:0a:ee:f4:ec:17:45:76:b0:f3:ee:77:fc:2d:6c: ad:7f:ba:74:b4:a4:35:ef:a9:db:26:84:d9:07:de:c9:34:49: 56:e5:16:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrEwwIoAU/LBQcrL2gE4WaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmVmMThlNGY3MGQwOGRmM2ZiMzBmZWU1MDdlNWI1YTkx OTZmOTkwHhcNMjUxMTI3MTAwMTQ1WhcNMjUxMTI4MTAwMTQ1WjAzMTEwLwYDVQQD EyhkMjljYjlhOGEzZDIxYmNkMTUwZjllY2M2YjYwMDYxMGJiZjQ4NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF5apP4qUYUDfMPA7/bCe5beknmG 02IxHeOwAXKk6a31wNb8ClcekP2HORfE3JXskZGERuO10ecZVaLPtaLF0mwslKjb Y0kOYFsAf7kvtfrcqxfndYJWNmyD3+D8syyyzF8P4RQWXD+5ToS7u8x+gPyZrWso asbUno8H+BkZ6+bK0n8dk75IGKKEN4uOIXWXGjFLRwtd65nDgjo+pzpaOoUrXP07 oTkmFkWNapve4myN3hkAAJdvpVIOywLTYAYsmbOA1kR1+KayHGWL9mopPCL1CyRe WisFUZnkRpTFCY0CQb4JBy6pHZvgAiRZKWJlKI9V3PW37HYyIbisZ3KqQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKcuaij0hvNFQ+ezGtgBhC79IYIMB8GA1UdIwQY MBaAFOK+8Y5PcNCN8/sw/uUH5bWpGW+ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWIt Nzk5MGUzZDFkZGFhLzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWItNzk5MGUzZDFkZGFh LzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWWlDAuq HEe+itY2ZIl8dVgF96gYICJ+EbEUvulHdECNFM65sQpQKofD/M547t8YPdsZuCLj MpJKR6MAykl10YOdmBGozjwcIkr65eYTnDVsx4QO97B0DsMfSUwiOACcic1MNQ7L Ml+sDKbHADHcwo1UCHCc66gfx5YNMnI5OJuCcr5cHhQZIxbCzwpCAHcmg2N7NbBL YMpTE+Za1m7TAzJrLqxChAt4EDj1nyQrsB7o8REi7ZLB8QR0gZneu8Vl9w05t4VV ujZHkOdk7FqdMgxPsL6damVqZhY3Swru9OwXRXaw8+53/C1srX+6dLSkNe+p2yaE 2QfeyTRJVuUWSw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:26 2025 by rpki-client