This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/85eb38-cced-48f9-a114-7bc31e92dfac/1/ABbGMnml8eCzmCTC8NQrZw0Ycws.mft
File: ABbGMnml8eCzmCTC8NQrZw0Ycws.mft (raw, json)
Hash identifier: RJfwX+YlAxQ0z8MXhjTvVF0HNICKOa1LABOxqyXSy6w=
Subject key identifier: 1A:A5:AE:C5:89:09:59:51:98:69:83:4E:96:F0:D6:19:DF:BF:32:D1
Authority key identifier: 00:16:C6:32:79:A5:F1:E0:B3:98:24:C2:F0:D4:2B:67:0D:18:73:0B
Certificate issuer: /CN=0016c63279a5f1e0b39824c2f0d42b670d18730b
Certificate serial: 0190A02ADA4EC981B24ACD41BA7EB89FA0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABbGMnml8eCzmCTC8NQrZw0Ycws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/85eb38-cced-48f9-a114-7bc31e92dfac/1/ABbGMnml8eCzmCTC8NQrZw0Ycws.mft
Manifest number: 1205
Signing time: Thu 11 Jul 2024 05:01:21 +0000
Manifest this update: Thu 11 Jul 2024 05:01:21 +0000
Manifest next update: Fri 12 Jul 2024 05:01:21 +0000
Files and hashes: 1: ABbGMnml8eCzmCTC8NQrZw0Ycws.crl (hash: +kmS/Oyfi1qKaYR4lov0Dkz6TeF1YDbYExBEJLqPVpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:2a:da:4e:c9:81:b2:4a:cd:41:ba:7e:b8:9f:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0016c63279a5f1e0b39824c2f0d42b670d18730b
Validity
Not Before: Jul 11 05:01:21 2024 GMT
Not After : Jul 12 05:01:21 2024 GMT
Subject: CN=1aa5aec5890959519869834e96f0d619dfbf32d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:ea:79:e4:bc:79:b5:84:f2:e6:eb:6f:71:
da:72:9b:48:79:dc:c9:96:28:e0:16:ce:27:f2:e9:
19:33:04:56:ef:e1:b9:c0:9b:10:00:83:ad:77:e9:
3a:88:42:3b:2d:6a:46:09:75:35:b7:62:02:99:19:
88:4e:60:38:39:43:fc:21:6e:6f:43:7e:a9:f8:a9:
0c:fc:15:7d:6d:c3:b1:33:19:5a:03:51:36:47:06:
04:51:56:2a:65:93:72:e7:1d:d7:89:ce:e4:7d:93:
7e:89:14:73:0b:34:49:89:ea:a7:74:b0:81:7b:d9:
f5:53:c1:fe:db:ca:c6:79:01:dc:b2:f7:1c:a4:98:
5f:1e:55:0c:ce:2f:68:48:93:cc:94:c9:09:02:95:
1c:c8:9b:61:64:86:79:9e:d5:f2:15:d6:6f:79:73:
21:3c:6d:5e:1e:46:72:20:ff:72:38:f6:2e:43:1a:
95:e9:a6:03:2e:02:64:60:00:a8:49:17:a3:de:0d:
03:e9:9e:83:01:91:7f:ce:d6:1a:80:36:5d:2f:27:
70:a3:29:67:64:80:f1:f3:82:1f:b6:89:02:27:32:
22:6e:4b:e9:b8:3b:1f:1f:cf:a9:2e:ea:c3:e9:f3:
ad:c0:ff:9a:68:54:52:8d:4b:2e:ad:e1:43:19:0b:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:AE:C5:89:09:59:51:98:69:83:4E:96:F0:D6:19:DF:BF:32:D1
X509v3 Authority Key Identifier:
keyid:00:16:C6:32:79:A5:F1:E0:B3:98:24:C2:F0:D4:2B:67:0D:18:73:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABbGMnml8eCzmCTC8NQrZw0Ycws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/85eb38-cced-48f9-a114-7bc31e92dfac/1/ABbGMnml8eCzmCTC8NQrZw0Ycws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/85eb38-cced-48f9-a114-7bc31e92dfac/1/ABbGMnml8eCzmCTC8NQrZw0Ycws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:53:c6:8f:14:74:c9:ec:15:92:85:a3:87:54:bc:87:71:bc:
fe:10:d8:e3:b3:0a:1b:92:4a:a1:89:6b:c6:de:81:04:e6:ce:
f5:db:64:10:c5:06:31:77:3c:67:81:89:e6:f3:03:10:3d:f4:
dd:3b:0c:85:f1:81:9b:ef:84:3e:1c:cc:3d:85:38:a0:ba:77:
c8:8c:03:d0:38:a5:57:7c:09:31:b1:bd:20:a8:9b:2e:48:70:
d2:dc:3b:b8:ce:82:f8:e6:c7:29:4e:e2:2e:b3:39:da:45:fd:
a8:3d:79:16:66:c5:05:54:c4:4a:26:cd:c3:71:80:ad:8b:77:
07:6f:99:5b:44:1d:8c:bf:49:89:72:8c:9c:e8:09:75:db:88:
6b:3f:52:83:5e:d9:11:df:09:97:96:8e:70:27:c6:7e:20:44:
96:90:10:c3:fb:ec:e6:1b:59:7f:56:0f:f4:b7:93:07:28:93:
49:32:03:27:06:67:81:10:5c:5d:03:c1:11:27:63:0a:be:40:
a3:98:fd:4a:a2:84:fe:4a:48:88:78:57:40:9f:6d:31:a4:58:
76:b7:08:e7:f2:4c:ee:af:c3:51:a7:35:03:89:2f:da:c3:da:
14:5a:30:94:fb:16:18:d1:97:c4:c5:9c:6c:4b:a5:20:ba:07:
c8:14:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:45:36 2025 by rpki-client