This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.mft File: fZbkzCmFWohmf6mONSkt_v_6nX8.mft (raw, json) Hash identifier: ejKebqaJyGZvv4zRfx8T6IWk29RXaT5Ilx0R2osg3m0= Subject key identifier: 87:F1:CF:73:77:CF:09:F7:28:6A:A5:4D:21:E5:B0:D0:9A:62:A3:AC Authority key identifier: 7D:96:E4:CC:29:85:5A:88:66:7F:A9:8E:35:29:2D:FE:FF:FA:9D:7F Certificate issuer: /CN=7d96e4cc29855a88667fa98e35292dfefffa9d7f Certificate serial: 01955E06B1BEF06E25FFB57FFCAB91F23370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.mft Manifest number: 010C Signing time: Mon 03 Mar 2025 22:00:51 +0000 Manifest this update: Mon 03 Mar 2025 22:00:51 +0000 Manifest next update: Tue 04 Mar 2025 22:00:51 +0000 Files and hashes: 1: fZbkzCmFWohmf6mONSkt_v_6nX8.crl (hash: yE57zjh6WrIH/SKhC8KTJRErViPAXGQ14pMGk9Z3iOU=) 2: xM4tp_capVPp8moRSLUs7IAmgmY.roa (hash: sWAHqYhFJqnzUomZ6+aU6+jYrWdf6jmoamDvobrM7lc=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:5e:06:b1:be:f0:6e:25:ff:b5:7f:fc:ab:91:f2:33:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d96e4cc29855a88667fa98e35292dfefffa9d7f Validity Not Before: Mar 3 22:00:51 2025 GMT Not After : Mar 4 22:00:51 2025 GMT Subject: CN=87f1cf7377cf09f7286aa54d21e5b0d09a62a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:18:df:57:7a:ed:a0:aa:8a:f0:11:d8:40: 87:e0:b5:b1:d4:a8:bd:a4:ac:10:17:fe:21:fa:1b: f2:24:4b:e2:f6:c5:11:27:f4:6f:98:aa:40:e0:bd: 3c:6d:d1:7c:9b:9e:69:aa:82:4b:a9:2c:6d:0d:4b: 93:76:4b:99:13:67:c1:f4:14:6e:44:e4:08:93:6b: 0e:f5:72:bc:2a:12:b1:ae:f9:52:61:75:48:be:4e: 21:0b:e2:85:f1:76:0e:6f:23:4c:fd:d3:e3:25:18: 6c:c7:6b:d5:63:9d:fa:47:9f:ce:bd:53:45:03:41: ef:6e:4e:a6:60:c8:56:2e:b7:82:20:47:fa:30:31: 68:8b:b1:be:cd:df:e7:7a:25:4b:80:59:29:d3:31: 5a:b2:f6:3d:fc:09:d7:6e:20:23:d4:de:99:6a:d1: 67:ab:7d:b8:56:8b:02:be:60:f3:09:19:c8:a8:8f: e2:f9:fb:af:5c:ec:db:87:78:1b:30:60:a2:e4:10: f4:2b:d7:e0:3e:cb:8b:0a:21:4a:f9:b4:76:ae:59: 53:a9:bc:d3:15:84:4d:58:84:cc:04:4a:87:67:c9: 94:50:89:42:64:5e:a8:41:67:4b:64:11:a1:fa:5d: a9:9c:83:19:53:0f:43:61:a3:73:38:3b:d1:dd:dc: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F1:CF:73:77:CF:09:F7:28:6A:A5:4D:21:E5:B0:D0:9A:62:A3:AC X509v3 Authority Key Identifier: keyid:7D:96:E4:CC:29:85:5A:88:66:7F:A9:8E:35:29:2D:FE:FF:FA:9D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:f3:aa:55:3e:83:d7:af:22:70:0f:64:65:9b:be:79:18: 0e:08:d6:ba:8b:2a:39:c0:83:92:cb:99:ef:72:3c:b6:29:71: cc:85:b5:29:51:30:7f:91:3f:6d:b2:de:7b:10:a9:b1:e7:90: a8:74:7f:e7:93:4f:16:ee:53:82:5d:02:5f:4d:ec:93:a2:ff: 59:e5:9d:f4:c9:55:6f:d8:10:b5:fa:59:c3:62:1c:ad:87:17: b9:96:0b:3a:8b:a1:44:13:ba:30:7f:02:23:09:08:2d:80:55: 89:1f:87:62:c2:b0:49:ce:10:ce:99:03:d8:b8:39:1b:32:45: 37:27:3e:fb:da:cd:37:87:71:23:2a:36:82:18:8c:a0:25:18: 04:99:df:0a:60:cc:af:af:7c:34:df:46:38:b2:06:a2:4d:5b: 4b:c7:b4:27:ef:6d:34:67:78:bf:1a:e0:c0:0e:2d:f7:8a:86: e6:54:7c:03:b7:ee:4b:fd:8e:27:57:1a:69:c1:31:e6:b4:27: 23:5b:f4:63:bc:5d:56:cf:65:4e:69:cc:1e:be:d9:72:09:b0: cd:95:0d:4e:f8:af:83:dd:1b:02:01:26:f3:08:c9:b4:11:d0: d9:47:be:a2:3f:30:5d:ef:68:74:8b:da:5d:8c:42:88:3e:12: 06:75:40:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZVeBrG+8G4l/7V//KuR8jNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOTZlNGNjMjk4NTVhODg2NjdmYTk4ZTM1MjkyZGZlZmZm YTlkN2YwHhcNMjUwMzAzMjIwMDUxWhcNMjUwMzA0MjIwMDUxWjAzMTEwLwYDVQQD Eyg4N2YxY2Y3Mzc3Y2YwOWY3Mjg2YWE1NGQyMWU1YjBkMDlhNjJhM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoAY31d67aCqivAR2ECH4LWx1Ki9 pKwQF/4h+hvyJEvi9sURJ/RvmKpA4L08bdF8m55pqoJLqSxtDUuTdkuZE2fB9BRu ROQIk2sO9XK8KhKxrvlSYXVIvk4hC+KF8XYObyNM/dPjJRhsx2vVY536R5/OvVNF A0Hvbk6mYMhWLreCIEf6MDFoi7G+zd/neiVLgFkp0zFasvY9/AnXbiAj1N6ZatFn q324VosCvmDzCRnIqI/i+fuvXOzbh3gbMGCi5BD0K9fgPsuLCiFK+bR2rllTqbzT FYRNWITMBEqHZ8mUUIlCZF6oQWdLZBGh+l2pnIMZUw9DYaNzODvR3dzNdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfxz3N3zwn3KGqlTSHlsNCaYqOsMB8GA1UdIwQY MBaAFH2W5MwphVqIZn+pjjUpLf7/+p1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlpia3pDbUZXb2htZjZtT05Ta3Rfdl82blg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MzE0M2EtNDRiMC00ZTEzLTg5NDct ZTIwYTMxOTdlNzlmLzEvZlpia3pDbUZXb2htZjZtT05Ta3Rfdl82blg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MzE0M2EtNDRiMC00ZTEzLTg5NDctZTIwYTMxOTdlNzlm LzEvZlpia3pDbUZXb2htZjZtT05Ta3Rfdl82blg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/fzqlU+ g9evInAPZGWbvnkYDgjWuosqOcCDksuZ73I8tilxzIW1KVEwf5E/bbLeexCpseeQ qHR/55NPFu5Tgl0CX03sk6L/WeWd9MlVb9gQtfpZw2IcrYcXuZYLOouhRBO6MH8C IwkILYBViR+HYsKwSc4QzpkD2Lg5GzJFNyc++9rNN4dxIyo2ghiMoCUYBJnfCmDM r698NN9GOLIGok1bS8e0J+9tNGd4vxrgwA4t94qG5lR8A7fuS/2OJ1caacEx5rQn I1v0Y7xdVs9lTmnMHr7ZcgmwzZUNTvivg90bAgEm8wjJtBHQ2Ue+oj8wXe9odIva XYxCiD4SBnVATg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:09:37 2025 by rpki-client