This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier: QGRwOuXbFV9k+5I/DrPAdWaEO5O8UBP+c4oPVEbRwUU=
Subject key identifier: 36:9B:35:7E:54:CE:43:53:D1:62:6E:8F:7C:A9:5A:80:2F:B1:53:13
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer: /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial: 019A4D7447933ACBAF364B5B66436E80E827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number: 09EB
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: wXJ0R4VoKpOCJI/IMG/ijk/Hd1Ki3/SPp3z8rk2dO6M=)
2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:47:93:3a:cb:af:36:4b:5b:66:43:6e:80:e8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=369b357e54ce4353d1626e8f7ca95a802fb15313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:6e:4e:10:56:00:b9:8c:2d:1f:36:66:03:
d9:52:4d:42:cd:3f:2c:28:cc:b8:ba:5f:cf:e0:72:
37:dc:6e:cd:77:aa:7e:d1:ee:a3:48:14:61:01:a2:
ee:7c:4c:07:2a:0d:ef:9f:19:a3:25:45:c4:a2:98:
45:3d:4a:07:24:5e:d4:f4:84:bf:60:dc:55:4e:ca:
b6:1c:3b:b9:5c:9a:08:90:d3:c3:ca:d2:2f:ce:8a:
c3:69:ca:8a:31:76:1a:58:23:55:ae:a2:91:2a:9c:
b2:13:e7:a1:e8:34:f9:2c:8d:9e:82:a2:66:08:80:
2d:fb:2b:34:ed:dd:cc:e2:e1:a5:9b:99:be:da:6a:
f9:85:6a:d4:cb:8f:ec:42:34:84:84:f8:43:9c:fc:
52:2f:34:7e:53:13:96:19:7b:78:df:58:0d:1d:05:
6c:d6:0a:cf:70:37:57:29:9f:cb:42:55:58:88:67:
90:e2:48:1e:4b:df:12:2a:ca:61:76:c1:f0:87:6a:
28:71:84:60:65:30:6f:ef:67:0b:d3:3e:fe:04:c5:
1e:92:2c:5e:85:a0:3f:60:a9:32:65:92:e6:49:35:
25:1b:3f:78:56:9d:ae:3e:55:a1:45:88:de:d6:9c:
b4:cd:26:27:39:19:d4:90:a3:35:07:50:59:cb:e9:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:35:7E:54:CE:43:53:D1:62:6E:8F:7C:A9:5A:80:2F:B1:53:13
X509v3 Authority Key Identifier:
keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:20:3a:9e:c4:fe:b2:87:96:2f:b9:26:d7:12:82:07:27:17:
77:f7:c1:87:55:21:7c:e8:d2:f0:a6:12:ad:b6:e2:e3:a3:67:
1b:83:49:54:99:47:45:8a:a4:92:83:e7:f1:2b:56:ca:d5:15:
29:90:d8:41:ff:70:8e:3f:61:2c:e3:da:26:70:4d:64:ab:93:
93:11:38:9c:55:5f:c4:71:2b:19:13:b0:b8:b9:25:c5:a9:6d:
51:ac:17:f1:0d:e4:d9:ed:86:43:a2:bf:a7:ee:83:dd:9e:bf:
9c:64:e3:56:68:2a:1c:ab:c7:89:b3:90:7e:6f:ec:93:48:7d:
8e:94:0b:e2:45:96:10:30:35:61:9a:90:7b:bb:42:b7:53:5d:
66:a8:21:7d:84:e6:24:7d:5b:2d:75:77:86:5e:d7:95:a3:91:
a0:f5:58:98:40:81:76:cd:ee:46:77:51:72:b7:c9:49:9c:67:
ba:e1:3d:e6:c3:e6:ec:bf:f5:48:2c:50:5f:17:ed:75:06:19:
73:05:54:8e:61:43:6f:9b:b0:0f:c9:b1:d5:2d:32:e1:f4:aa:
c4:03:09:ba:a7:f1:65:c8:06:60:35:27:06:10:03:09:38:9b:
30:83:1b:87:56:9d:3a:ad:1c:97:0d:bb:3e:55:3f:a8:5d:14:
1f:65:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:26:58 2025 by rpki-client