This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
File: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft (raw, json)
Hash identifier: u4917p0CGnmPtsWEG8X2OHgrvyHrtX1y4oZKLTnvkyQ=
Subject key identifier: 2F:C3:06:8E:D8:6A:5E:90:D6:AD:B3:97:A4:A4:6A:FE:1B:0C:DF:62
Authority key identifier: 49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
Certificate issuer: /CN=4911e41f8bbee80c655c153f28a819d016c8271b
Certificate serial: 0195E00F4DAD8F2D42E393D256281135206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
Manifest number: 094B
Signing time: Sat 29 Mar 2025 04:00:53 +0000
Manifest this update: Sat 29 Mar 2025 04:00:53 +0000
Manifest next update: Sun 30 Mar 2025 04:00:53 +0000
Files and hashes: 1: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl (hash: Uj0CVAbWDAz9wO6t7K9ww9IuRn5hIBW4TxnBn6K+qjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:4d:ad:8f:2d:42:e3:93:d2:56:28:11:35:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911e41f8bbee80c655c153f28a819d016c8271b
Validity
Not Before: Mar 29 04:00:53 2025 GMT
Not After : Mar 30 04:00:53 2025 GMT
Subject: CN=2fc3068ed86a5e90d6adb397a4a46afe1b0cdf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:38:82:4f:e1:03:97:3f:eb:87:13:7e:17:
7a:5f:56:9f:81:da:11:76:0a:8d:9d:c0:a9:99:9b:
2b:79:b6:11:d6:6c:2a:f2:f3:57:a0:e7:f9:c5:c8:
ad:f2:df:a3:a8:7b:6b:74:c8:83:12:3f:b8:4b:84:
d5:bc:0e:b5:a9:4c:01:80:bf:c0:4a:eb:3d:e2:1a:
a4:cb:02:97:50:b7:00:19:30:ea:66:c7:0d:93:27:
f8:f1:b3:09:20:95:c8:71:65:ce:2c:bc:b4:24:91:
63:df:17:f6:5c:d8:f5:ad:9a:0e:f4:34:2d:b9:49:
98:7b:94:f0:f1:b0:4a:25:03:6a:17:2d:fa:c1:64:
e5:a1:66:16:b5:3c:20:e8:44:49:d9:4f:b9:2a:6a:
69:14:de:52:e5:57:24:34:c0:8e:99:9d:3e:4e:59:
b7:0d:f9:55:ed:a8:5c:e6:01:62:69:a6:b1:2f:9a:
7e:13:a6:f4:13:8c:9c:40:f4:a9:65:cc:85:21:30:
d2:db:32:d1:a5:31:b1:a8:51:e7:4f:d0:c0:f5:85:
e8:63:1c:f0:7c:25:04:a3:53:a8:14:e8:87:41:c1:
ab:4a:81:40:2e:f9:60:10:cf:61:6d:50:c2:b4:75:
b0:74:4d:7c:f0:d7:2e:1a:86:9d:83:1a:66:20:3e:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C3:06:8E:D8:6A:5E:90:D6:AD:B3:97:A4:A4:6A:FE:1B:0C:DF:62
X509v3 Authority Key Identifier:
keyid:49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:f9:9c:ec:90:0e:a3:a8:ca:0b:92:c4:0f:fa:d7:d6:e6:
23:1e:6f:35:a5:fb:fa:52:89:ac:84:8e:92:43:a7:e9:cc:cf:
38:71:79:db:10:2d:5a:15:ce:a3:bd:8d:0c:76:9f:10:e6:cd:
18:dd:ed:4c:27:7f:73:e2:7f:ba:8b:fd:45:df:d8:2c:a9:ec:
9e:10:41:9b:d9:5c:3e:48:ce:ca:f0:da:89:51:c1:bd:f7:8d:
8f:4f:06:58:63:eb:20:2b:50:03:d4:c3:d8:59:39:e9:32:1a:
7f:d0:36:d5:5a:77:3d:47:47:29:d1:2f:e9:f3:58:ed:bc:bc:
e8:96:c7:34:0c:1e:35:83:9a:bd:5a:1f:b4:25:0f:b9:d6:1a:
82:85:ea:9c:f5:5a:4f:00:f8:37:cc:c3:32:b7:09:6d:af:f1:
ab:af:bf:41:ac:45:3c:dc:cf:04:82:c6:6d:be:d1:ed:c8:6e:
5d:f6:a4:89:5d:01:57:50:63:43:1a:2b:3c:e0:e0:96:38:7d:
62:e3:7a:ac:05:6d:80:4c:1a:ee:7b:d8:45:fc:cf:42:39:78:
ce:fc:32:fc:25:77:74:05:63:c7:5e:13:de:ba:91:fd:89:49:
b8:5b:1a:9c:c8:2b:5b:61:dc:ce:35:bb:68:9e:84:27:2d:1c:
0e:19:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 22:45:54 2025 by rpki-client