This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json) Hash identifier: R14j5NDbXhvcwERLkxV1NdYiHENuFFNGLBB32JLSDBU= Subject key identifier: FA:BD:97:96:16:C4:F0:2B:EA:8A:6D:98:53:60:24:39:97:7E:C0:90 Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1 Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1 Certificate serial: 019AE63BA4B88A1F0CA8AE5432F734A18ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft Manifest number: 1759 Signing time: Wed 03 Dec 2025 22:00:59 +0000 Manifest this update: Wed 03 Dec 2025 22:00:59 +0000 Manifest next update: Thu 04 Dec 2025 22:00:59 +0000 Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: oDuFGVjRx7OQauXMb/i9xGSIlzgfDKQDpRqKG7lmbnU=) 2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:3b:a4:b8:8a:1f:0c:a8:ae:54:32:f7:34:a1:8a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1 Validity Not Before: Dec 3 22:00:59 2025 GMT Not After : Dec 4 22:00:59 2025 GMT Subject: CN=fabd979616c4f02bea8a6d9853602439977ec090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:3f:29:f9:0b:1b:91:af:b4:dc:53:a3:4e: a1:56:2c:0d:bf:18:85:a1:5c:11:7e:12:b2:1c:4a: 63:ab:9a:ba:bc:36:1d:73:97:34:b6:ce:e3:bb:f3: d9:0e:94:48:65:3f:87:a5:ca:1c:14:ba:e5:80:90: 1a:58:98:ed:9d:83:e1:00:05:c7:f2:84:d4:ee:df: 28:64:c8:0c:a9:ea:a0:99:e0:75:6b:0f:93:0e:4c: 0c:1b:fa:93:1f:61:b9:57:cf:64:48:3b:b6:ac:ee: fe:fb:a8:95:83:65:5c:b2:a9:4f:35:15:96:57:af: 50:9c:38:37:98:45:59:65:fe:f3:cb:d6:d7:1e:f2: 8a:82:29:96:d2:0d:6c:e8:66:e1:e5:d4:8a:2e:95: 81:1d:00:dd:5a:2a:69:9c:06:f3:50:f2:63:51:20: 49:ce:8a:78:a0:70:a9:92:2f:c6:21:44:55:e8:ba: fa:dc:ac:d7:66:31:c4:1e:36:fd:01:f6:6a:10:b5: f0:69:ec:e4:73:ae:3c:ed:bd:b4:a2:3f:92:88:b6: f4:a3:2b:d6:84:69:69:28:c0:58:87:a6:68:1d:0d: dd:2a:6e:89:14:d0:bd:99:3c:d7:18:37:ac:3b:ad: 2d:40:f5:dc:15:cc:bc:32:b6:6f:a1:24:84:08:2f: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:97:96:16:C4:F0:2B:EA:8A:6D:98:53:60:24:39:97:7E:C0:90 X509v3 Authority Key Identifier: keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:78:95:0a:ce:0f:43:d2:eb:25:72:a0:ed:e8:94:0c:15:72: 0d:56:fe:e3:eb:c9:4a:e3:00:1d:60:f9:7b:bd:48:0c:18:f0: 81:e8:d8:d5:d9:ca:55:ee:78:0a:49:a0:24:51:23:6f:a4:51: 5a:f0:82:4b:15:c1:aa:44:fc:e9:b4:1d:13:e6:94:72:94:19: 41:0f:73:be:40:ae:c5:77:39:f0:e1:b2:b8:a3:c9:77:aa:32: 75:d2:69:6c:22:c1:ef:98:4e:65:56:fa:82:48:f2:9f:88:d6: 2e:13:d1:97:bd:8c:ca:96:a3:23:03:12:8e:36:85:71:04:83: 96:5a:8e:63:ba:9c:01:02:82:bf:67:8a:47:33:e8:48:2b:95: 7a:fb:3a:e5:7e:07:9a:3d:9b:e0:8f:df:98:4b:78:ed:83:53: 6c:e8:88:e0:92:f8:cc:bf:5d:0d:53:cc:bc:15:30:2a:30:a3: 60:44:23:59:9e:8b:b6:0e:ec:c2:ef:29:86:b9:c5:a0:c0:e8: a9:b2:ef:65:4a:9a:60:70:96:07:f3:b2:13:6c:c6:58:22:29: 65:cf:b9:93:0d:24:3f:ec:a5:31:21:fa:b6:c0:c2:40:0a:03: 72:0a:aa:73:17:20:be:25:b5:a4:05:6d:ef:6d:7a:86:cb:f7: 0f:f3:a6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrmO6S4ih8MqK5UMvc0oYrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3N2MyNjRkMzg4MzMzZDM0MjM3MjkzMWFhMGQxOTJiMGZi YTYyYzEwHhcNMjUxMjAzMjIwMDU5WhcNMjUxMjA0MjIwMDU5WjAzMTEwLwYDVQQD EyhmYWJkOTc5NjE2YzRmMDJiZWE4YTZkOTg1MzYwMjQzOTk3N2VjMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd8/KfkLG5GvtNxTo06hViwNvxiF oVwRfhKyHEpjq5q6vDYdc5c0ts7ju/PZDpRIZT+HpcocFLrlgJAaWJjtnYPhAAXH 8oTU7t8oZMgMqeqgmeB1aw+TDkwMG/qTH2G5V89kSDu2rO7++6iVg2VcsqlPNRWW V69QnDg3mEVZZf7zy9bXHvKKgimW0g1s6Gbh5dSKLpWBHQDdWippnAbzUPJjUSBJ zop4oHCpki/GIURV6Lr63KzXZjHEHjb9AfZqELXwaezkc6487b20oj+SiLb0oyvW hGlpKMBYh6ZoHQ3dKm6JFNC9mTzXGDesO60tQPXcFcy8MrZvoSSECC992wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq9l5YWxPAr6optmFNgJDmXfsCQMB8GA1UdIwQY MBaAFDd8Jk04gzPTQjcpMaoNGSsPumLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjUyYTktMmU0Mi00MjI4LWI1NDAt ZTYwNjRlZmNlMmFjLzEvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMjUyYTktMmU0Mi00MjI4LWI1NDAtZTYwNjRlZmNlMmFj LzEvTjN3bVRUaURNOU5DTnlreHFnMFpLdy02WXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXiVCs4P Q9LrJXKg7eiUDBVyDVb+4+vJSuMAHWD5e71IDBjwgejY1dnKVe54CkmgJFEjb6RR WvCCSxXBqkT86bQdE+aUcpQZQQ9zvkCuxXc58OGyuKPJd6oyddJpbCLB75hOZVb6 gkjyn4jWLhPRl72MypajIwMSjjaFcQSDllqOY7qcAQKCv2eKRzPoSCuVevs65X4H mj2b4I/fmEt47YNTbOiI4JL4zL9dDVPMvBUwKjCjYEQjWZ6Ltg7swu8phrnFoMDo qbLvZUqaYHCWB/OyE2zGWCIpZc+5kw0kP+ylMSH6tsDCQAoDcgqqcxcgviW1pAVt 7216hsv3D/OmGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:43 2025 by rpki-client