This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
File: j35CW5mA3j5tTVVraau_8SVIZ7E.mft (raw, json)
Hash identifier: HIO93YJzn09JLvdpURDPwPtZiGQTGP6C9H3mXed5Y7Q=
Subject key identifier: 01:B2:3F:A7:6E:FE:0D:FA:A2:E9:55:27:68:B5:DE:FB:67:B7:B1:48
Authority key identifier: 8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
Certificate issuer: /CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Certificate serial: 01978168E28DB38144F6A4225116EFE52559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
Manifest number: BC
Signing time: Wed 18 Jun 2025 05:00:23 +0000
Manifest this update: Wed 18 Jun 2025 05:00:23 +0000
Manifest next update: Thu 19 Jun 2025 05:00:23 +0000
Files and hashes: 1: FsU8rSGyQb0kGFvbxmQ4nDDUBg4.roa (hash: xmWHpgYL9RCJue+qrtt+Eau987wbwxVuh1gIf8HMA3I=)
2: j35CW5mA3j5tTVVraau_8SVIZ7E.crl (hash: jvGhNLQMEi15to1/piAynyHGUZYHVtHYKJL7fax8jrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:e2:8d:b3:81:44:f6:a4:22:51:16:ef:e5:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Validity
Not Before: Jun 18 05:00:23 2025 GMT
Not After : Jun 19 05:00:23 2025 GMT
Subject: CN=01b23fa76efe0dfaa2e9552768b5defb67b7b148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:00:2e:b2:eb:80:ca:3b:f7:4e:38:72:50:
75:05:2f:60:59:f0:88:7b:5a:f8:1b:3d:85:46:1b:
37:12:ee:57:e7:29:0b:f3:47:c5:e7:c9:03:40:a6:
b2:3d:19:15:85:13:e0:91:84:78:24:04:b1:3a:a4:
99:19:da:35:e5:e3:e2:b4:08:99:42:2f:b1:b5:d8:
70:fa:dc:2b:71:e5:fa:41:de:6b:b5:ca:c2:a4:cd:
6d:22:29:be:83:f4:4c:37:3e:a7:72:be:ed:14:72:
f9:06:98:6a:88:87:b1:2a:cc:48:8f:97:3d:93:56:
2a:ed:72:da:3e:4f:81:1a:d3:f4:51:d7:84:7d:99:
e9:bb:fe:33:a4:9e:a7:02:5d:f8:17:e6:8a:d8:16:
e9:e6:c4:f3:3b:90:7c:cc:45:53:38:1f:35:93:73:
c0:a7:3d:5c:f1:56:5e:32:72:00:c5:4b:37:81:a3:
61:85:da:85:a0:4e:16:0a:75:1e:a0:ac:06:ca:19:
1c:d2:8d:65:83:78:84:b8:8b:4f:09:ed:73:e0:ab:
b4:c5:28:d7:1b:17:fd:31:83:58:08:f7:67:7e:0c:
8f:b0:20:73:22:ff:5b:bc:16:be:4b:80:22:92:d1:
a6:95:51:23:f3:64:fd:ee:63:74:26:85:45:d5:ed:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:3F:A7:6E:FE:0D:FA:A2:E9:55:27:68:B5:DE:FB:67:B7:B1:48
X509v3 Authority Key Identifier:
keyid:8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8a:f0:53:4a:6a:c7:7a:8a:c2:61:ca:e4:d4:cf:28:e5:7b:
c6:9b:fc:a5:ef:29:2b:04:01:fc:16:bc:31:34:cf:ed:c8:92:
38:c4:e5:0a:8e:4d:1c:f5:fd:76:4b:0b:b2:51:cd:4f:15:8f:
4d:ae:c1:57:c6:3c:15:68:a7:8b:4b:80:f2:f1:8e:02:da:83:
ac:e1:5d:dd:e9:8a:c6:83:d9:a4:02:96:61:52:8c:3f:72:9b:
c1:f2:cb:c9:51:34:5e:57:e4:62:60:e2:60:4a:f5:0c:95:ab:
a7:41:29:78:74:be:da:52:95:cf:f5:35:fe:86:a1:78:e5:63:
d0:8e:62:7f:e3:2d:e5:3b:05:15:af:bd:79:12:d7:27:f9:0d:
62:9d:26:9f:79:f0:11:81:7d:8c:3f:25:2a:65:51:fd:62:2f:
8a:00:78:c8:6c:44:f9:e3:f5:55:e1:b6:9b:60:5e:a4:b9:47:
ec:aa:d0:27:41:7c:11:09:65:eb:72:de:61:11:d1:2c:7b:7f:
7b:c9:72:ca:f2:85:67:2c:2b:b1:b4:79:68:49:ab:79:88:62:
3b:a7:a3:47:d0:0c:0b:5d:a6:b2:b7:fc:c6:e4:37:7e:e6:e0:
0b:99:c3:7e:4d:17:1b:38:77:c7:7c:ff:34:eb:75:eb:06:ad:
78:16:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:34:44 2025 by rpki-client