This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: 63Ui/rrooOBfg/giLpnPB6kzhVn/a7/UxxOAMyyi1/k=
Subject key identifier: 7D:CA:0F:B4:4C:2B:FD:CD:27:17:89:C9:7A:53:CD:12:AD:0E:55:EE
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 019B0C6D727CA843CC2BDAFF5ECA3237687E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 1772
Signing time: Thu 11 Dec 2025 08:00:57 +0000
Manifest this update: Thu 11 Dec 2025 08:00:57 +0000
Manifest next update: Fri 12 Dec 2025 08:00:57 +0000
Files and hashes: 1: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: 3+bKMkh5GB6WJN8nu+wJdF4YijjDIHtuMi/6dMAM2jE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0c:6d:72:7c:a8:43:cc:2b:da:ff:5e:ca:32:37:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Dec 11 08:00:57 2025 GMT
Not After : Dec 12 08:00:57 2025 GMT
Subject: CN=7dca0fb44c2bfdcd271789c97a53cd12ad0e55ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:a4:c8:a4:d8:db:b1:fd:01:c9:f1:d7:e1:
17:d5:f8:06:52:90:7b:fe:38:df:5b:0e:34:1b:e0:
eb:07:24:d8:bf:c9:20:94:64:94:a6:d3:4d:27:a6:
c9:55:bd:ed:c4:1c:a5:46:ff:12:c7:35:af:ca:91:
a4:55:84:d4:f8:f1:7d:4a:a1:9b:86:56:b8:eb:51:
5e:bb:10:e6:77:93:d0:50:6f:f6:73:38:6e:62:15:
d9:8a:a5:db:92:7f:e3:13:47:34:fb:f7:bd:da:51:
45:be:a1:89:41:c5:b5:70:e4:5b:da:f4:45:63:57:
73:c5:80:86:0c:85:cf:e6:0c:22:a7:e4:d0:4a:2f:
74:1d:45:61:8f:82:a3:1a:35:23:e6:b6:c7:f9:a0:
4d:06:e3:26:f2:26:a7:90:db:9f:2a:80:a1:46:e3:
91:dc:ba:56:c4:54:90:ba:c0:40:a8:25:34:fb:f4:
31:eb:4e:ce:ea:f4:5c:a9:7c:7e:bf:a6:8e:32:3f:
f9:c5:be:72:33:c4:c9:73:f1:8f:6c:f0:b6:37:79:
fc:32:ed:a3:97:21:54:88:6b:db:ee:e5:16:48:eb:
15:3e:ee:17:32:52:db:c0:e4:a9:fd:99:4e:9f:62:
c9:e9:a7:4d:82:5c:13:05:10:3e:67:b9:46:e6:f1:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:0F:B4:4C:2B:FD:CD:27:17:89:C9:7A:53:CD:12:AD:0E:55:EE
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d5:d1:9c:85:14:32:84:d6:d6:27:0c:7b:d9:62:cd:24:7b:
48:15:8b:27:79:23:73:2f:3e:f0:af:8a:d8:ea:91:8b:5b:21:
0a:cf:b5:e4:50:79:bf:18:3c:19:d7:9a:12:d5:c7:08:71:ff:
56:41:82:ef:bc:54:e2:2c:f6:f7:8d:17:03:b8:64:9c:63:b8:
24:d1:b4:58:1d:20:d1:cc:51:9b:e3:b6:0e:7a:0e:a2:c5:d6:
3e:d9:5b:6b:c7:cd:af:72:bf:b2:6e:94:11:47:ce:22:ec:4a:
87:28:1f:a1:d0:79:81:61:cf:54:e1:42:12:19:d6:02:bd:8a:
34:67:24:37:cc:29:9e:c7:8c:a4:03:94:ef:4f:61:f9:e7:7f:
ee:bf:5f:27:ac:ef:46:62:c0:25:e2:9e:de:7f:dd:93:9e:f8:
3d:4f:8b:f4:dd:ea:04:17:5a:68:47:ac:21:46:c7:b6:d9:da:
04:fe:34:cc:1b:58:ea:b2:0c:f8:1d:04:16:da:41:e4:82:a6:
a1:07:b1:7f:cf:f3:ca:85:3b:31:69:23:63:62:8c:72:a4:d4:
e6:f1:ca:23:7f:e9:5d:46:50:2e:9e:32:a8:a3:91:8f:2e:c6:
11:de:f6:cf:4d:11:3d:ec:f5:6d:00:a1:46:2b:c2:93:52:da:
04:c1:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:00:22 2025 by rpki-client