This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: +oSiZ9HFgTpMtmfkdXhdADbL44/fif32j1buMUTbZ6E=
Subject key identifier: 00:9C:C4:40:F8:73:12:E5:4F:36:2D:C8:03:79:6C:F6:D2:37:63:54
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 0199C833A25449DA231ECA72A9959690FA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 13F0
Signing time: Thu 09 Oct 2025 09:00:51 +0000
Manifest this update: Thu 09 Oct 2025 09:00:51 +0000
Manifest next update: Fri 10 Oct 2025 09:00:51 +0000
Files and hashes: 1: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: bd3+GCkhsok72pPiZVf3ZBzqDqMEvypvrsxtK8QsXuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:33:a2:54:49:da:23:1e:ca:72:a9:95:96:90:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Oct 9 09:00:51 2025 GMT
Not After : Oct 10 09:00:51 2025 GMT
Subject: CN=009cc440f87312e54f362dc803796cf6d2376354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:e0:cf:03:3b:d9:40:fe:5d:3e:88:71:6a:
ce:4d:7f:a7:aa:73:1a:53:32:ff:05:ec:d8:76:6a:
fc:6c:b7:7d:8c:b6:45:17:87:88:de:f5:00:8e:f8:
02:1d:20:31:db:93:94:3f:18:7b:48:4c:28:a8:d9:
1a:f9:9e:45:71:21:e5:a6:e4:82:38:8c:b2:fd:30:
a9:d7:f4:b8:b5:8e:44:97:74:f0:f9:ef:98:d3:57:
e1:4f:3a:95:9f:9e:7c:4a:8d:b7:2f:b9:fb:e7:b0:
b7:e7:05:7a:55:a2:97:e1:ec:85:d6:c2:0e:09:28:
11:de:83:a5:33:f7:05:a0:1b:11:99:de:85:76:2f:
2d:60:63:b9:38:62:71:99:b1:6b:9a:b1:ca:2e:d0:
a2:3a:52:fc:83:4d:4d:1c:b4:62:04:9f:ab:ea:8e:
d4:75:80:0e:8c:f8:f2:fc:ba:ad:50:0a:25:a4:61:
b1:87:1a:67:af:79:fa:e5:a6:5b:e1:98:78:23:4d:
bf:63:49:35:e6:e0:7b:2b:cd:ad:2b:47:5d:37:43:
64:b5:e4:47:85:9c:24:bf:3a:39:85:21:d5:99:f4:
e2:d2:43:b3:16:47:cb:8e:33:b1:1e:81:50:fe:08:
c2:80:bb:a0:f9:d7:db:64:c4:be:05:de:cf:99:0b:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9C:C4:40:F8:73:12:E5:4F:36:2D:C8:03:79:6C:F6:D2:37:63:54
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fa:2d:4a:45:12:62:34:a4:33:d2:d0:ee:30:a8:4b:e6:8e:
12:87:95:05:dd:24:0e:16:65:bd:be:87:13:07:2f:16:79:e4:
e8:0f:ac:ed:9f:dd:18:62:9f:16:4e:1b:d0:58:10:bd:b5:cb:
01:16:9e:62:06:76:1f:02:da:67:c0:6b:71:93:a8:dd:aa:5d:
71:9a:fa:3e:98:27:12:7e:8b:9d:59:00:40:d4:39:bb:fa:d5:
34:83:d7:22:68:d8:60:00:b1:3b:40:4b:ca:f1:ee:e0:a3:ab:
75:b1:31:69:7c:2d:e6:e9:6d:e7:8d:00:34:f5:a6:59:a2:30:
2d:f0:44:81:f6:a8:0c:5e:02:5c:8c:fd:05:4f:f8:ae:01:20:
d7:9e:76:65:f3:23:59:1a:1b:0b:78:9e:89:f5:2d:e7:e2:24:
85:62:70:7d:54:e0:66:12:00:66:53:33:39:68:6b:02:41:30:
c0:22:1a:cd:e4:77:5d:0e:01:e2:9c:52:3c:ee:d5:99:61:78:
21:87:6f:bd:b6:35:9a:1f:0c:0a:5e:2b:16:af:51:e2:b9:38:
b0:75:f7:09:46:2d:6d:b8:e6:9e:4c:15:00:a8:02:46:0d:c8:
73:3f:af:42:7e:10:be:be:93:f9:87:7b:ac:f9:03:b6:b6:f9:
fc:cf:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 12:45:56 2025 by rpki-client