This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft File: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft (raw, json) Hash identifier: aerFH2xGjn/GlI2BOvYChEgjXKEflBFBmxIh06ysnWU= Subject key identifier: C7:16:80:89:78:29:75:DA:DF:DF:70:8E:83:DF:91:0F:87:EC:95:3C Authority key identifier: DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46 Certificate issuer: /CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246 Certificate serial: 019269DB8C10E35AF9180BD2FFA5092BB5FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft Manifest number: 0673 Signing time: Tue 08 Oct 2024 02:00:48 +0000 Manifest this update: Tue 08 Oct 2024 02:00:48 +0000 Manifest next update: Wed 09 Oct 2024 02:00:48 +0000 Files and hashes: 1: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl (hash: GULd6vZLAbq95ucx/Q8FFDZUizz76av2g1eeFt9aOl8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:69:db:8c:10:e3:5a:f9:18:0b:d2:ff:a5:09:2b:b5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246 Validity Not Before: Oct 8 02:00:48 2024 GMT Not After : Oct 9 02:00:48 2024 GMT Subject: CN=c7168089782975dadfdf708e83df910f87ec953c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:a2:93:02:9e:4b:87:89:fa:81:8c:f6:ee: 1f:55:f5:a5:8d:79:40:26:ee:f2:d4:e8:d1:4c:12: df:e7:a4:a5:79:1b:76:a8:b3:2d:1f:72:a6:a5:b0: 46:88:af:1e:29:14:de:c0:a6:11:d8:f7:f7:19:20: 51:51:df:af:85:57:e3:50:5e:0b:11:81:3a:03:10: a1:48:7d:6c:a1:5b:f7:12:85:c0:ce:8d:6c:10:a9: 78:fb:fd:e3:cf:58:65:e8:43:92:f7:0b:47:44:c9: 3c:cb:ad:9c:fc:3b:b7:a2:99:50:16:16:46:69:4d: 87:3c:c0:6d:d0:47:6d:52:e0:a4:36:15:49:a2:76: 54:eb:a3:07:2a:ff:65:78:0f:5f:68:2f:b2:fb:08: 27:5c:5e:0e:95:fc:2d:fc:79:88:2a:9d:3d:c6:4f: 45:a0:69:2d:c6:61:38:96:d7:f6:e4:c8:92:47:26: b7:a8:0f:19:e1:6a:83:8e:eb:df:4f:f3:aa:e3:85: 8a:bb:da:d7:df:bd:8b:40:be:6e:95:ec:9a:c2:ac: 4a:8b:73:6c:a4:0b:74:07:d9:0b:31:64:30:ba:42: fc:8d:09:a4:91:e7:65:81:a5:19:ec:96:f6:c5:cc: 0a:12:32:02:88:7f:f7:65:93:9d:b4:8d:ef:ae:76: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:16:80:89:78:29:75:DA:DF:DF:70:8E:83:DF:91:0F:87:EC:95:3C X509v3 Authority Key Identifier: keyid:DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8a:e2:f2:19:c7:a7:79:d9:43:d8:3e:cd:38:41:62:3d:7b: 33:fe:6a:f2:e2:79:50:5c:92:55:12:fa:42:7e:50:cd:b3:a9: 22:38:64:80:68:d6:53:aa:82:0a:87:f7:94:15:3e:32:14:0a: 34:99:67:bd:09:0d:f5:7d:da:c2:d8:e7:2d:7d:3a:21:ab:d8: 17:d0:b7:87:df:c4:63:df:6d:20:e3:54:3a:33:24:32:d8:30: be:dc:f6:cc:97:5b:34:1a:56:97:9a:1d:0d:9b:06:3f:c4:96: 1d:a3:54:6f:e0:6e:2a:43:fe:03:06:1d:43:11:64:96:bf:e6: 54:2f:a7:06:0b:cb:d0:8e:bd:26:5f:cd:73:ff:cb:f3:0b:1c: b3:e8:18:76:a7:56:9a:86:80:77:bf:e2:f7:ae:4a:01:8f:24: e5:2e:f2:31:22:4c:21:27:63:a6:82:8e:1e:0d:f1:e3:6c:4c: d6:e8:62:0c:96:87:de:16:49:c4:5d:e8:f4:18:5b:9d:fd:06: 26:f3:8c:65:f5:32:22:2c:66:7f:0a:64:a7:a8:b7:3f:6a:21: 22:71:b1:1b:3f:86:9e:81:15:ce:b5:b1:34:75:6f:5d:84:50: 48:0a:4b:f8:7d:ad:ab:e3:7f:0f:c7:ec:25:58:cd:55:56:fe: 29:66:3d:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZJp24wQ41r5GAvS/6UJK7X/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDliMjBjZjAyM2M3MzAyZmVmZWE0OWM4MTQ5YTFjYjBh YjIyNDYwHhcNMjQxMDA4MDIwMDQ4WhcNMjQxMDA5MDIwMDQ4WjAzMTEwLwYDVQQD EyhjNzE2ODA4OTc4Mjk3NWRhZGZkZjcwOGU4M2RmOTEwZjg3ZWM5NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5eikwKeS4eJ+oGM9u4fVfWljXlA Ju7y1OjRTBLf56SleRt2qLMtH3KmpbBGiK8eKRTewKYR2Pf3GSBRUd+vhVfjUF4L EYE6AxChSH1soVv3EoXAzo1sEKl4+/3jz1hl6EOS9wtHRMk8y62c/Du3oplQFhZG aU2HPMBt0EdtUuCkNhVJonZU66MHKv9leA9faC+y+wgnXF4Olfwt/HmIKp09xk9F oGktxmE4ltf25MiSRya3qA8Z4WqDjuvfT/Oq44WKu9rX372LQL5uleyawqxKi3Ns pAt0B9kLMWQwukL8jQmkkedlgaUZ7Jb2xcwKEjICiH/3ZZOdtI3vrnZF9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcWgIl4KXXa399wjoPfkQ+H7JU8MB8GA1UdIwQY MBaAFNwJsgzwI8cwL+/qScgUmhywqyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FteURQQWp4ekF2Ny1wSnlCU2FITENySWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYzk5NzMtZTE3NC00OTI4LWE1NzIt NWVjYmEzM2ZjM2I4LzEvM0FteURQQWp4ekF2Ny1wSnlCU2FITENySWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yYzk5NzMtZTE3NC00OTI4LWE1NzItNWVjYmEzM2ZjM2I4 LzEvM0FteURQQWp4ekF2Ny1wSnlCU2FITENySWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIri8hnH p3nZQ9g+zThBYj17M/5q8uJ5UFySVRL6Qn5QzbOpIjhkgGjWU6qCCof3lBU+MhQK NJlnvQkN9X3awtjnLX06IavYF9C3h9/EY99tIONUOjMkMtgwvtz2zJdbNBpWl5od DZsGP8SWHaNUb+BuKkP+AwYdQxFklr/mVC+nBgvL0I69Jl/Nc//L8wscs+gYdqdW moaAd7/i965KAY8k5S7yMSJMISdjpoKOHg3x42xM1uhiDJaH3hZJxF3o9Bhbnf0G JvOMZfUyIixmfwpkp6i3P2ohInGxGz+GnoEVzrWxNHVvXYRQSApL+H2tq+N/D8fs JVjNVVb+KWY9Vg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:07 2025 by rpki-client