This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json) Hash identifier: jnAMxcNCyAMndUGViQpckiPgYSd3cMlMaCS/GwQEaMk= Subject key identifier: 5C:94:8A:BC:44:84:21:B9:02:42:A0:67:C0:F7:9C:E2:D7:ED:31:58 Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79 Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279 Certificate serial: 019ABEF7A6624C8FC81AA658133C2EE5E84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft Manifest number: 0D49 Signing time: Wed 26 Nov 2025 07:01:32 +0000 Manifest this update: Wed 26 Nov 2025 07:01:32 +0000 Manifest next update: Thu 27 Nov 2025 07:01:32 +0000 Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: rIBhaFK1YUk5E/A4sh6k8jb0muw3cPunMZzsv/Fl4nQ=) 2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:f7:a6:62:4c:8f:c8:1a:a6:58:13:3c:2e:e5:e8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279 Validity Not Before: Nov 26 07:01:32 2025 GMT Not After : Nov 27 07:01:32 2025 GMT Subject: CN=5c948abc448421b90242a067c0f79ce2d7ed3158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c4:d1:cf:a9:5b:67:c5:06:6e:35:f1:79:1b: db:56:ae:98:69:a8:d6:e8:07:e2:35:58:ae:f5:32: d3:15:2c:f8:93:f7:2a:d4:b7:f2:28:ad:8b:77:55: 8c:9e:60:0e:67:cd:54:63:0e:21:9d:a3:fe:c9:67: c6:3b:ef:52:dd:22:69:e2:18:f3:b1:0c:05:11:3f: eb:2e:43:98:5b:f6:c5:2e:e1:67:34:c5:47:4c:17: 07:96:e2:9c:3f:4f:0b:b0:1d:95:9d:8a:9b:7b:07: b2:58:5a:a8:41:44:05:49:c6:4f:e2:99:6c:f8:55: 13:73:de:73:c0:c5:d3:3a:35:33:64:bc:67:57:3b: a1:1a:fd:0f:13:f8:1b:71:38:fb:e8:11:3c:91:f9: 38:bb:77:13:06:e1:82:77:bb:82:b2:14:ff:81:2a: f7:9c:18:39:fd:0f:aa:68:ab:48:e9:7f:7d:7f:f3: 7d:6b:06:3d:45:c1:9c:1d:df:49:b5:60:a8:33:76: 14:53:0f:34:3c:ee:96:ab:5a:dd:89:84:17:66:ac: 3b:9b:22:73:50:f0:6e:b8:af:81:86:5b:50:a5:5f: 28:dc:53:11:0b:67:37:1a:3a:92:2a:70:72:47:f9: c2:26:62:a0:98:f3:d2:61:6b:93:6c:fd:78:2c:42: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:94:8A:BC:44:84:21:B9:02:42:A0:67:C0:F7:9C:E2:D7:ED:31:58 X509v3 Authority Key Identifier: keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:76:58:80:f1:e3:b1:2e:24:2e:6f:1a:e8:74:cc:ac:c0:4e: 8e:8b:59:4c:a8:1d:3d:2b:f6:54:62:25:87:42:2b:2c:13:06: af:8b:d6:ca:6b:69:47:5c:7f:d2:b4:e7:2a:72:7b:9f:ed:8d: ce:71:e1:d7:7b:fe:14:d0:65:69:6a:57:64:03:78:43:15:7d: 01:bb:66:da:9b:78:cc:c1:db:67:fd:5d:3a:35:b3:74:a9:f5: 41:04:66:9a:b3:25:d3:10:17:79:d7:8e:ab:fc:b9:f9:ce:78: 79:60:d2:af:24:1c:35:42:88:d7:d0:c6:87:05:74:3a:23:c8: bf:b1:b2:60:43:29:0f:37:26:e5:0f:52:1f:00:f8:fc:ee:9d: 06:78:57:43:d5:a8:9b:b0:30:96:7f:6e:b7:b6:f7:ee:5d:85: 6b:dd:2a:0f:f6:b5:32:4b:15:16:25:96:60:f5:df:c2:86:5b: 48:17:ad:3b:f6:b5:44:42:72:5f:81:76:00:bd:3e:0e:f0:77: 29:c7:75:74:a8:1f:8e:18:c9:45:cd:fc:4c:80:fb:62:22:05: a4:21:8a:fd:1a:07:ac:d8:d6:c9:0f:f9:7a:13:7a:82:62:40: 00:bd:4b:92:dd:ad:15:ed:00:63:62:1e:0e:41:a2:86:08:17: 68:b3:59:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq+96ZiTI/IGqZYEzwu5ehLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjMxZGY4N2JkZmUyMjdhN2U1ZTQxOTM0MDM3MGJhYjMw MWUyNzkwHhcNMjUxMTI2MDcwMTMyWhcNMjUxMTI3MDcwMTMyWjAzMTEwLwYDVQQD Eyg1Yzk0OGFiYzQ0ODQyMWI5MDI0MmEwNjdjMGY3OWNlMmQ3ZWQzMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MTRz6lbZ8UGbjXxeRvbVq6YaajW 6AfiNViu9TLTFSz4k/cq1LfyKK2Ld1WMnmAOZ81UYw4hnaP+yWfGO+9S3SJp4hjz sQwFET/rLkOYW/bFLuFnNMVHTBcHluKcP08LsB2VnYqbeweyWFqoQUQFScZP4pls +FUTc95zwMXTOjUzZLxnVzuhGv0PE/gbcTj76BE8kfk4u3cTBuGCd7uCshT/gSr3 nBg5/Q+qaKtI6X99f/N9awY9RcGcHd9JtWCoM3YUUw80PO6Wq1rdiYQXZqw7myJz UPBuuK+BhltQpV8o3FMRC2c3GjqSKnByR/nCJmKgmPPSYWuTbP14LELZcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyUirxEhCG5AkKgZ8D3nOLX7TFYMB8GA1UdIwQY MBaAFF4jHfh73+Inp+XkGTQDcLqzAeJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mNThlOGEtNjIyNy00ZDA3LWFjNTkt NzZlZDVjYjBlMDIyLzEvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mNThlOGEtNjIyNy00ZDA3LWFjNTktNzZlZDVjYjBlMDIy LzEvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3ZYgPHj sS4kLm8a6HTMrMBOjotZTKgdPSv2VGIlh0IrLBMGr4vWymtpR1x/0rTnKnJ7n+2N znHh13v+FNBlaWpXZAN4QxV9Abtm2pt4zMHbZ/1dOjWzdKn1QQRmmrMl0xAXedeO q/y5+c54eWDSryQcNUKI19DGhwV0OiPIv7GyYEMpDzcm5Q9SHwD4/O6dBnhXQ9Wo m7Awln9ut7b37l2Fa90qD/a1MksVFiWWYPXfwoZbSBetO/a1REJyX4F2AL0+DvB3 Kcd1dKgfjhjJRc38TID7YiIFpCGK/RoHrNjWyQ/5ehN6gmJAAL1Lkt2tFe0AY2Ie DkGihggXaLNZYw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:49:28 2025 by rpki-client