This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: 6V01PCKtCGXzKH7dVa99/qHuo03XzgdNafXQeZj2qBE=
Subject key identifier: 82:88:A2:8E:6F:DA:CF:23:16:A3:C8:8E:22:48:64:A3:3E:E1:20:8E
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 019B34FBB90C7CF2D0DE05A0995FE46E6625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 0BBF
Signing time: Fri 19 Dec 2025 05:01:10 +0000
Manifest this update: Fri 19 Dec 2025 05:01:10 +0000
Manifest next update: Sat 20 Dec 2025 05:01:10 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: PRdPv1BMpLN45SwoLzZqGzXkptk9VYVSjc0TdJTWqwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:fb:b9:0c:7c:f2:d0:de:05:a0:99:5f:e4:6e:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Dec 19 05:01:10 2025 GMT
Not After : Dec 20 05:01:10 2025 GMT
Subject: CN=8288a28e6fdacf2316a3c88e224864a33ee1208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d9:05:83:db:82:f9:05:26:b4:81:cd:df:68:
7c:04:5c:64:d1:a0:8a:79:b0:0c:cf:ee:a2:2e:f1:
ed:8c:38:f9:d0:36:3c:b8:17:68:50:27:a5:36:ef:
73:b2:63:a0:2e:67:59:59:18:39:43:fb:bb:58:ae:
40:43:bf:cb:01:19:5f:e9:9d:e6:64:81:bb:17:7c:
45:be:a4:53:b8:dd:d7:a8:d7:1d:db:b3:82:cd:d3:
82:22:da:94:f2:35:81:5d:f8:63:f2:60:b7:df:b1:
65:78:e9:86:7d:39:c2:e2:7d:ad:e3:f7:88:37:fe:
86:9c:09:9a:a3:1e:19:23:e5:8c:a9:10:2f:c1:66:
90:56:e9:5b:2d:d3:a4:a4:e6:34:c2:b0:63:5f:43:
40:39:5b:59:e3:17:0a:86:bc:fe:4f:78:60:95:4c:
15:6a:fb:e9:10:fc:a5:45:71:3e:23:e9:99:df:ff:
29:a5:9f:5a:76:97:e1:e3:fa:07:ff:ac:97:31:56:
b4:5c:a3:46:de:43:0a:5e:cf:4d:2c:40:e2:c2:65:
b0:16:66:04:b6:2b:d5:1b:52:50:5d:5a:90:a6:20:
b3:83:26:b2:ce:a6:2b:31:9a:63:38:1c:b4:fb:57:
dd:ca:7a:ba:57:5e:06:56:b0:c4:ac:07:b6:e5:76:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:88:A2:8E:6F:DA:CF:23:16:A3:C8:8E:22:48:64:A3:3E:E1:20:8E
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:c3:ed:6e:78:f3:f3:44:4a:46:3a:d7:7b:d3:c8:f6:00:
01:9f:53:1b:9c:9e:55:1d:4f:bc:be:fc:d7:40:35:79:f0:af:
2e:54:f6:32:4c:1f:e1:f5:1b:b7:57:5c:e0:bc:a3:5c:e2:42:
44:76:17:2b:2b:d3:82:02:5d:0d:bc:e1:10:55:2a:78:0d:04:
de:fa:ff:a5:e2:cb:7d:f3:b3:99:2d:e3:bd:0e:9b:17:48:cf:
09:3f:6e:bd:84:a8:88:d1:1e:da:26:1d:4c:61:75:29:d8:82:
01:b8:98:99:83:32:da:b7:fd:ed:1e:1b:ec:52:eb:d9:46:5e:
66:bd:d1:cb:b1:6a:05:bd:83:6b:84:5a:20:99:53:52:f0:c1:
b3:b2:4c:13:6c:96:87:d2:a6:92:59:66:fa:9c:9b:4f:c9:3e:
7e:c6:1d:c0:58:d2:f2:c3:92:bb:4e:43:69:59:d1:c2:7c:04:
24:eb:65:cf:0e:78:1b:bc:b9:1f:88:f6:91:fc:ab:db:89:46:
18:b5:5a:76:65:ab:16:b6:5b:c9:e9:7d:21:6f:9a:14:4f:6c:
64:43:54:1b:24:d6:0d:a5:91:b6:73:f2:db:c2:84:c8:fd:09:
79:68:bf:a2:a3:9e:14:4a:fc:f8:20:15:b5:8c:16:5d:7f:91:
2d:3e:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:40:23 2025 by rpki-client