This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft File: EB_ffImYkkKRmDV1nJti-Mxp1JI.mft (raw, json) Hash identifier: we/6X+zfzt91EFAxIt37y63hv1jp7VF+Y71IDx2C4aQ= Subject key identifier: 5F:29:29:85:84:D9:57:18:11:BE:CE:D1:2F:C6:0B:1C:A7:6D:68:43 Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92 Certificate issuer: /CN=101fdf7c89989242919835759c9b62f8cc69d492 Certificate serial: 01991387AA48EAA846A6C64FF8CFE6F3A62F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft Manifest number: 166C Signing time: Thu 04 Sep 2025 07:01:21 +0000 Manifest this update: Thu 04 Sep 2025 07:01:21 +0000 Manifest next update: Fri 05 Sep 2025 07:01:21 +0000 Files and hashes: 1: EB_ffImYkkKRmDV1nJti-Mxp1JI.crl (hash: yAnVCcJZnh7vB5FwboELJsYNKwJpH3/7WfEdk/MMF04=) 2: IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa (hash: 9J+kDdJE2+cu7NB25/bKTQ6/hAIRTzrqadiukiS4eVg=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:13:87:aa:48:ea:a8:46:a6:c6:4f:f8:cf:e6:f3:a6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492 Validity Not Before: Sep 4 07:01:21 2025 GMT Not After : Sep 5 07:01:21 2025 GMT Subject: CN=5f29298584d9571811beced12fc60b1ca76d6843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:68:83:80:a4:14:e3:7e:d2:e2:af:f0:e6: 6f:71:83:1e:50:05:2c:56:c9:83:1d:16:af:23:c3: 12:7e:d3:a7:9b:f1:af:4a:a2:c5:71:c1:33:c3:24: ab:aa:84:18:66:57:52:12:e3:fb:59:b7:55:f9:99: 5a:1d:54:0b:01:a2:c3:5c:35:4f:83:07:8d:37:f9: 23:ef:9c:c9:96:fd:13:62:18:3b:bd:a3:69:1a:5a: b2:d5:3d:f8:55:b8:f0:2e:27:ef:49:36:a6:64:8a: 35:50:72:d1:69:fe:02:92:fd:f4:f4:56:58:de:11: 0a:57:d1:aa:96:00:0e:be:af:1d:f4:6b:6e:de:08: 7f:9c:bb:9e:f5:7d:ac:48:c5:00:3b:e1:95:7b:43: 88:06:9a:30:30:26:fd:83:d6:dd:74:0c:0c:13:98: f7:62:a4:b7:77:54:d3:51:52:2c:19:4b:6e:56:ff: 01:87:a5:2c:dd:15:22:b7:cf:a8:95:bf:1b:a0:a5: 1c:58:dd:d9:4f:da:73:ee:d5:18:e7:47:e4:77:c1: ac:50:f8:48:59:50:f0:4c:8f:9f:ab:8a:83:1b:03: 41:b2:cb:26:72:f5:0b:71:af:8c:b9:ec:9f:b0:88: 05:6c:1a:97:fd:d9:00:85:b3:2d:5b:54:cd:ae:16: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:29:29:85:84:D9:57:18:11:BE:CE:D1:2F:C6:0B:1C:A7:6D:68:43 X509v3 Authority Key Identifier: keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b4:90:f2:87:c6:7d:a8:28:80:43:80:89:13:a7:fa:0f:50: 1d:30:d4:60:44:71:e6:36:85:08:56:43:98:25:27:31:15:06: 3b:90:f8:ae:35:2f:d9:e5:6b:6f:be:ae:37:bb:12:3c:cc:28: 07:f0:39:1b:70:c1:92:54:09:22:62:9c:79:41:7f:53:30:8b: c8:5e:f4:59:c3:4d:6d:1f:d7:69:db:11:93:d9:78:a9:1d:7a: 96:f7:c9:fb:06:d4:a7:0c:b7:c5:96:38:eb:25:6c:83:f4:aa: 48:01:8f:52:8c:cc:81:2d:e3:ce:81:d8:2f:d9:4b:cd:46:f6: 3a:d6:78:66:69:10:85:f0:19:01:fc:a9:bf:7a:a3:71:64:8d: 2d:5f:96:a9:c2:75:74:24:aa:cf:25:a3:43:6d:20:8c:2c:d4: f1:6d:e1:24:a9:c5:b0:1e:7b:07:6f:80:39:72:70:42:88:ff: 3b:13:6b:64:56:86:7c:97:6e:c2:fe:98:ec:c9:56:03:c5:cb: 39:f6:c3:43:af:4d:4c:cb:ef:de:39:ca:87:6b:41:a2:9b:53: 9b:64:24:a7:97:10:d6:ee:33:2f:fe:1a:0f:78:75:ea:b4:6a: 95:74:a9:72:9c:25:e3:7a:99:db:c6:7f:ca:29:43:2a:af:65: da:c1:94:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkTh6pI6qhGpsZP+M/m86YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMWZkZjdjODk5ODkyNDI5MTk4MzU3NTljOWI2MmY4Y2M2 OWQ0OTIwHhcNMjUwOTA0MDcwMTIxWhcNMjUwOTA1MDcwMTIxWjAzMTEwLwYDVQQD Eyg1ZjI5Mjk4NTg0ZDk1NzE4MTFiZWNlZDEyZmM2MGIxY2E3NmQ2ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdog4CkFON+0uKv8OZvcYMeUAUs VsmDHRavI8MSftOnm/GvSqLFccEzwySrqoQYZldSEuP7WbdV+ZlaHVQLAaLDXDVP gweNN/kj75zJlv0TYhg7vaNpGlqy1T34VbjwLifvSTamZIo1UHLRaf4Ckv309FZY 3hEKV9GqlgAOvq8d9Gtu3gh/nLue9X2sSMUAO+GVe0OIBpowMCb9g9bddAwME5j3 YqS3d1TTUVIsGUtuVv8Bh6Us3RUit8+olb8boKUcWN3ZT9pz7tUY50fkd8GsUPhI WVDwTI+fq4qDGwNBsssmcvULca+MueyfsIgFbBqX/dkAhbMtW1TNrha6PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8pKYWE2VcYEb7O0S/GCxynbWhDMB8GA1UdIwQY MBaAFBAf33yJmJJCkZg1dZybYvjMadSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJfZmZJbVlra0tSbURWMW5KdGktTXhwMUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZjIyMGYtMTU4Zi00N2Y5LWIyOTYt Njg4ZjYwZmU2YWRkLzEvRUJfZmZJbVlra0tSbURWMW5KdGktTXhwMUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZjIyMGYtMTU4Zi00N2Y5LWIyOTYtNjg4ZjYwZmU2YWRk LzEvRUJfZmZJbVlra0tSbURWMW5KdGktTXhwMUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7SQ8ofG fagogEOAiROn+g9QHTDUYERx5jaFCFZDmCUnMRUGO5D4rjUv2eVrb76uN7sSPMwo B/A5G3DBklQJImKceUF/UzCLyF70WcNNbR/XadsRk9l4qR16lvfJ+wbUpwy3xZY4 6yVsg/SqSAGPUozMgS3jzoHYL9lLzUb2OtZ4ZmkQhfAZAfypv3qjcWSNLV+WqcJ1 dCSqzyWjQ20gjCzU8W3hJKnFsB57B2+AOXJwQoj/OxNrZFaGfJduwv6Y7MlWA8XL OfbDQ69NTMvv3jnKh2tBoptTm2Qkp5cQ1u4zL/4aD3h16rRqlXSpcpwl43qZ28Z/ yilDKq9l2sGU8g== -----END CERTIFICATE-----Generated at Thu Dec 18 18:54:21 2025 by rpki-client