This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: FLVRR1IDXaGSKQKw5FJ3vOyx3PfAx7dqlAuqJ5LcH0E=
Subject key identifier: F3:03:F0:AE:E5:B4:D9:A4:A6:A7:21:4F:D7:6A:2E:9A:76:77:72:F5
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 019B02C555A7ADF974227CB099373DD53F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 07B4
Signing time: Tue 09 Dec 2025 11:00:45 +0000
Manifest this update: Tue 09 Dec 2025 11:00:45 +0000
Manifest next update: Wed 10 Dec 2025 11:00:45 +0000
Files and hashes: 1: 8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa (hash: OYnqa1GBuQcygL8L90eWwKPCUkwvpNVbLAFvlJTFkpE=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: Vb0ZIMo2wmU94t7G0VNXLSxNVY9PcCR7pHDSNN9fI0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:02:c5:55:a7:ad:f9:74:22:7c:b0:99:37:3d:d5:3f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Dec 9 11:00:45 2025 GMT
Not After : Dec 10 11:00:45 2025 GMT
Subject: CN=f303f0aee5b4d9a4a6a7214fd76a2e9a767772f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:b0:3d:ed:e0:da:ca:ea:2d:3b:bd:34:13:
87:0e:81:53:6e:5d:d0:b4:91:88:4d:1e:4e:e6:95:
ee:9c:d4:07:b8:ee:ef:19:7e:69:cf:92:a7:83:2b:
c5:02:25:1d:dc:90:19:1b:af:d2:e1:9c:74:86:64:
bd:4e:7f:9d:fb:d0:74:6c:a4:17:9f:fb:2b:2b:86:
61:b1:15:57:24:57:91:75:16:27:ad:61:de:6d:cb:
ff:ca:b0:5f:19:15:f4:0b:bd:a4:19:7d:82:0b:6f:
b0:39:10:a5:9d:3f:6c:4a:ed:b3:32:00:a4:0c:3a:
d6:b0:7a:bc:c7:a0:a9:71:72:9d:39:c3:02:7f:d1:
03:06:68:d1:57:c1:55:3d:ba:69:ad:aa:1d:11:41:
2e:d3:df:b0:06:ef:ab:0f:6a:86:ea:ff:2a:db:f3:
34:d5:ed:c1:73:65:ce:c0:d1:06:83:60:c8:14:3c:
52:f6:38:5e:78:56:19:ad:16:1e:75:45:15:53:67:
4a:5e:7f:dd:18:20:66:34:4b:6e:8a:e7:ff:cd:91:
5e:82:8e:b9:bb:65:53:30:6b:f4:bf:06:33:18:5f:
6f:13:a1:89:ab:a6:f9:7b:07:22:23:67:5d:a2:63:
e0:7d:b8:48:13:45:ba:8b:96:ce:5d:de:51:c1:f5:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:03:F0:AE:E5:B4:D9:A4:A6:A7:21:4F:D7:6A:2E:9A:76:77:72:F5
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:44:d2:5e:87:10:6a:7d:96:b0:41:16:ce:b0:2c:ec:6d:16:
dd:70:03:43:74:94:75:21:ff:32:b9:c7:62:ae:36:44:8a:54:
15:9a:0b:7b:5c:a0:9a:a4:55:3f:05:27:a5:eb:e9:91:45:ec:
d1:7c:d3:42:28:8a:cf:35:5d:4d:29:2c:8b:e5:c0:31:a0:94:
25:19:22:cd:1a:6e:62:56:73:4d:3e:79:6a:85:fe:51:e2:07:
85:41:42:58:22:c3:86:58:0f:c1:ca:2a:79:18:92:51:cc:c1:
92:28:ba:d9:28:70:c9:fb:5d:ea:28:ff:a3:b7:b4:50:fa:db:
d4:9c:ca:91:71:2c:44:d9:bc:79:6d:cb:8c:15:ec:1d:41:84:
6a:f4:f4:01:d1:09:68:f9:0f:77:d5:ce:b6:a7:1f:49:ac:c0:
41:e0:f7:5a:c3:d2:34:b8:6f:7e:b6:7b:2a:e5:96:cd:16:ff:
12:85:4a:02:bc:ca:12:b8:af:a0:85:fc:e5:eb:e6:25:dd:e6:
bf:f5:e4:50:44:88:d8:fd:8c:d4:c5:42:2f:ed:69:cb:c6:51:
01:7a:15:1d:7a:71:f2:b9:31:20:07:08:b9:45:55:29:a9:21:
74:da:ae:13:44:34:e5:fc:22:30:bc:b4:b3:51:1f:6e:85:31:
4a:ba:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:46:31 2025 by rpki-client