This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
File: xQkxs_iAn_sx6V_THf8pd6xAgHk.mft (raw, json)
Hash identifier: ABctxItT2aJIBl0Jxq/eN1rc34sgZzU5sDzIkAL0ylc=
Subject key identifier: CE:99:F9:7E:85:A9:B6:42:C7:73:4D:2C:73:A7:41:48:A3:19:33:CB
Authority key identifier: C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
Certificate issuer: /CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Certificate serial: 01979B28F6208E912873174BC8CA8A03A2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
Manifest number: 047D
Signing time: Mon 23 Jun 2025 05:00:42 +0000
Manifest this update: Mon 23 Jun 2025 05:00:42 +0000
Manifest next update: Tue 24 Jun 2025 05:00:42 +0000
Files and hashes: 1: xQkxs_iAn_sx6V_THf8pd6xAgHk.crl (hash: wsaDA8siF5QZ7TDWZqXHtlM7NRYltXDdUx4vhToeglY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:28:f6:20:8e:91:28:73:17:4b:c8:ca:8a:03:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Validity
Not Before: Jun 23 05:00:42 2025 GMT
Not After : Jun 24 05:00:42 2025 GMT
Subject: CN=ce99f97e85a9b642c7734d2c73a74148a31933cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:94:1d:5c:98:de:b8:a2:8e:cd:6c:d7:dd:
3a:61:f4:a2:6a:11:28:df:03:0a:92:65:f8:81:5e:
7c:26:1b:60:bc:f1:97:3c:c5:63:25:dc:f6:50:5f:
70:10:62:ec:cf:28:44:3a:eb:28:b0:57:09:69:b2:
7d:7e:16:f8:bd:d6:5d:42:54:9a:9d:5f:b5:1a:06:
d9:cc:3f:3a:6a:24:4c:7e:46:2f:fe:0d:b3:08:0e:
d6:d5:9b:70:0e:7b:8e:cf:83:45:a7:16:f8:2d:0d:
d8:9a:d9:ad:a2:1f:ae:1b:07:82:7c:53:83:df:bc:
c8:f1:45:ae:33:16:fc:99:4c:62:00:00:21:82:51:
42:8d:78:ab:76:dd:8c:07:74:cc:40:0d:5f:e2:e6:
2a:81:27:d9:57:70:01:e6:36:31:b0:bf:2d:56:a7:
9b:85:6e:3a:2c:74:a8:88:90:69:14:e7:f2:2d:69:
00:77:8c:9f:f3:98:82:97:bd:9d:6e:2c:1c:7b:97:
e1:0b:e9:84:8f:79:00:92:51:84:98:b4:86:b8:cf:
d6:b7:0f:4e:59:6d:1a:7e:c7:9b:eb:2d:3b:0e:ba:
c6:01:9a:66:5b:19:9f:0b:2d:1f:60:7a:30:bb:39:
08:5b:47:b0:4c:ff:26:9a:b0:f1:a5:63:a5:18:7f:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:F9:7E:85:A9:B6:42:C7:73:4D:2C:73:A7:41:48:A3:19:33:CB
X509v3 Authority Key Identifier:
keyid:C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:8e:f1:46:4e:b8:fd:9b:2c:66:fa:a1:06:8c:1c:4b:e5:
4c:09:92:db:58:cc:b1:e9:b2:f2:8c:82:bb:19:51:94:69:0f:
8b:04:0b:96:1c:ba:cc:fe:a5:6e:4f:31:fe:44:76:60:04:01:
9f:8c:2e:d7:cc:45:db:36:a5:07:56:8e:c7:eb:c4:94:89:22:
6f:84:96:10:57:24:4c:fe:b4:ad:cd:2b:57:c2:4a:9f:91:0f:
63:93:78:00:e9:3f:2d:98:f5:38:d1:72:14:2d:ed:a8:c3:f1:
1f:78:3d:53:23:89:be:2c:40:d3:30:b1:7c:53:5c:a5:89:1b:
73:e8:1e:f8:7b:85:5e:f8:ce:73:4b:e0:be:9d:ff:60:6e:a5:
be:5f:ea:3b:5d:2d:de:46:20:9f:bf:89:1e:01:02:4b:d0:86:
af:ce:91:06:20:79:db:2a:44:ad:6c:31:cf:ab:e1:76:12:7e:
39:9d:a9:cf:79:3c:d7:db:8a:08:02:71:b5:6c:a6:94:3c:c0:
39:59:53:e8:bd:ca:a9:e4:c8:08:fb:2b:62:ba:7c:a1:3d:1a:
f8:23:27:9a:81:59:dc:cc:2d:fe:05:b5:68:ab:e5:00:09:85:
e6:a8:01:88:44:14:37:5e:0a:44:41:63:d5:5b:1d:6c:42:7c:
f7:87:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:01:19 2025 by rpki-client