This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft File: 0E45j3kEn2u7gzOBCoFhyXiWKiY.mft (raw, json) Hash identifier: z8Uj9igXvEENZaCopWPn+2EFuJiCkInCsNRv9Wtc62U= Subject key identifier: EC:72:8F:EE:72:DD:7E:53:BF:FF:69:78:B8:10:C2:0A:65:E2:9D:D2 Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26 Certificate issuer: /CN=d04e398f79049f6bbb8333810a8161c978962a26 Certificate serial: 019B0CA46D80A6DD1ECDCE4884C8E2FED37C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft Manifest number: 106B Signing time: Thu 11 Dec 2025 09:01:01 +0000 Manifest this update: Thu 11 Dec 2025 09:01:01 +0000 Manifest next update: Fri 12 Dec 2025 09:01:01 +0000 Files and hashes: 1: 0E45j3kEn2u7gzOBCoFhyXiWKiY.crl (hash: QsauvqJbEQXWHNjt0dCD2XcfAv5ko4mVVsFGYuX4kFY=) 2: fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa (hash: R/N1KJCx1ZG7TAbnbY1p8xT86HawFSAUgAukKuDa69o=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:a4:6d:80:a6:dd:1e:cd:ce:48:84:c8:e2:fe:d3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26 Validity Not Before: Dec 11 09:01:01 2025 GMT Not After : Dec 12 09:01:01 2025 GMT Subject: CN=ec728fee72dd7e53bfff6978b810c20a65e29dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:5b:47:82:c8:c7:d0:1a:6d:94:39:2a:56: f2:a6:a2:11:67:12:30:2a:8e:95:be:93:12:fa:21: 99:e5:9e:47:ab:92:16:ad:47:d8:4a:d7:66:6a:f9: fb:d9:da:1b:2d:be:f3:81:42:00:b7:ac:42:2c:f6: 04:25:41:d5:c7:7e:bf:12:0d:29:30:40:be:57:3c: 96:73:08:3e:9e:2e:a8:d5:a1:6a:55:a4:43:f7:a2: 56:bc:8e:c1:f2:a3:a5:9a:9c:23:a2:df:0d:2b:29: 08:8b:cb:84:5d:21:92:df:ac:0e:7d:e3:28:7f:2e: 58:8e:6e:3d:0a:c1:e4:a8:83:4e:cf:62:a2:85:89: d2:df:f4:62:df:72:b6:ed:c8:57:28:82:87:86:9f: 42:47:94:82:f7:7b:95:ec:7d:d6:4b:54:04:f1:99: 65:6a:06:b5:7c:52:83:9a:2c:f5:6f:a1:90:1d:2b: a1:db:ac:f3:18:a4:78:3a:3d:bc:09:c2:c9:14:14: dc:60:6f:00:88:8e:40:a0:7d:d6:a5:cf:26:cf:62: 8b:96:fe:3e:74:67:73:1e:74:9f:2f:22:a6:24:66: 06:51:d6:8c:04:96:a1:29:b8:83:e0:99:51:56:f1: e9:a4:a7:f0:57:50:41:bd:1b:0a:1f:d6:9d:02:03: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:72:8F:EE:72:DD:7E:53:BF:FF:69:78:B8:10:C2:0A:65:E2:9D:D2 X509v3 Authority Key Identifier: keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:39:a1:6c:d3:d5:3f:2f:79:06:75:6c:42:ec:f3:12:07:4e: 13:b3:e7:f5:71:9d:60:3b:a2:83:06:97:3d:62:96:e8:cd:74: 89:e9:67:e0:8f:34:61:77:44:7f:cf:6a:53:43:bc:86:ed:42: 3e:d2:4d:d1:b4:9d:5d:1f:95:9a:71:44:83:a4:70:0f:49:4f: bd:cd:5e:7e:ad:66:94:02:2d:15:d4:c3:2a:0b:43:ba:11:d7: 37:11:28:51:31:0e:71:29:ad:60:0f:94:5a:da:5a:fb:66:bb: 7c:f7:c8:fc:34:b0:02:8c:5c:63:9a:32:fd:a7:b0:15:cd:d3: 34:79:14:4d:39:f2:29:1a:45:f1:4c:eb:ad:40:b3:64:9b:dd: 5e:60:69:d6:d3:cf:cb:ad:df:23:7d:f8:e1:00:49:e6:bd:c9: f1:d4:58:84:2e:b2:07:ea:7a:a8:95:f5:90:d0:53:7d:ef:89: 32:de:88:c0:cf:8d:03:a8:5f:b9:42:35:5a:b8:91:7e:f1:78: 91:2f:10:61:b0:f5:62:4b:fa:98:5e:69:30:64:1a:fb:5d:2c: 25:9f:1e:f1:2d:d1:f8:8f:57:da:73:5e:ab:5f:7a:67:2d:97: fb:31:ad:18:56:98:ca:9b:18:b4:16:42:81:87:c3:83:89:c9: df:55:23:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMpG2Apt0ezc5IhMji/tN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNGUzOThmNzkwNDlmNmJiYjgzMzM4MTBhODE2MWM5Nzg5 NjJhMjYwHhcNMjUxMjExMDkwMTAxWhcNMjUxMjEyMDkwMTAxWjAzMTEwLwYDVQQD EyhlYzcyOGZlZTcyZGQ3ZTUzYmZmZjY5NzhiODEwYzIwYTY1ZTI5ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx41bR4LIx9AabZQ5KlbypqIRZxIw Ko6VvpMS+iGZ5Z5Hq5IWrUfYStdmavn72dobLb7zgUIAt6xCLPYEJUHVx36/Eg0p MEC+VzyWcwg+ni6o1aFqVaRD96JWvI7B8qOlmpwjot8NKykIi8uEXSGS36wOfeMo fy5Yjm49CsHkqINOz2KihYnS3/Ri33K27chXKIKHhp9CR5SC93uV7H3WS1QE8Zll aga1fFKDmiz1b6GQHSuh26zzGKR4Oj28CcLJFBTcYG8AiI5AoH3Wpc8mz2KLlv4+ dGdzHnSfLyKmJGYGUdaMBJahKbiD4JlRVvHppKfwV1BBvRsKH9adAgNMmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxyj+5y3X5Tv/9peLgQwgpl4p3SMB8GA1UdIwQY MBaAFNBOOY95BJ9ru4MzgQqBYcl4liomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xOTkwYjEtZGQwOC00NjkxLWFjNmIt NmFjNGRkNDZkNGY3LzEvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xOTkwYjEtZGQwOC00NjkxLWFjNmItNmFjNGRkNDZkNGY3 LzEvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjmhbNPV Py95BnVsQuzzEgdOE7Pn9XGdYDuigwaXPWKW6M10ieln4I80YXdEf89qU0O8hu1C PtJN0bSdXR+VmnFEg6RwD0lPvc1efq1mlAItFdTDKgtDuhHXNxEoUTEOcSmtYA+U Wtpa+2a7fPfI/DSwAoxcY5oy/aewFc3TNHkUTTnyKRpF8UzrrUCzZJvdXmBp1tPP y63fI3344QBJ5r3J8dRYhC6yB+p6qJX1kNBTfe+JMt6IwM+NA6hfuUI1WriRfvF4 kS8QYbD1Ykv6mF5pMGQa+10sJZ8e8S3R+I9X2nNeq196Zy2X+zGtGFaYypsYtBZC gYfDg4nJ31UjDg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:53 2025 by rpki-client