This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
File: 5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft (raw, json)
Hash identifier: CY+Wdi8NsnTkQ+W6bLcGNOyVUdzcMAvQhU9DE0dSmu4=
Subject key identifier: 8D:64:B6:2D:7E:1D:C3:2B:F6:84:A4:49:CA:F7:63:38:DF:46:2B:AF
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 019AFDD6890ED8F4F2457C044C39AD234D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
Manifest number: 0B11
Signing time: Mon 08 Dec 2025 12:01:26 +0000
Manifest this update: Mon 08 Dec 2025 12:01:26 +0000
Manifest next update: Tue 09 Dec 2025 12:01:26 +0000
Files and hashes: 1: 5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl (hash: +bhYLIafYKLUcvDhzDn2kKBWigMHTtWtiSpK7nEFE4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fd:d6:89:0e:d8:f4:f2:45:7c:04:4c:39:ad:23:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Dec 8 12:01:26 2025 GMT
Not After : Dec 9 12:01:26 2025 GMT
Subject: CN=8d64b62d7e1dc32bf684a449caf76338df462baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:2f:e2:bc:e2:98:4b:a4:24:bf:43:a4:6d:
3e:94:e1:e4:a7:14:20:62:5d:2b:8e:61:08:55:0f:
67:12:0f:eb:d2:56:b8:24:cc:bc:82:84:3e:23:a8:
e6:45:5e:32:a4:e4:ae:7a:f0:0c:eb:32:40:ca:18:
8f:20:e3:33:dc:71:cd:c8:35:db:59:b5:aa:00:b8:
e8:59:82:15:f4:48:5e:f5:7d:41:84:9b:31:49:c9:
17:e6:d4:24:4b:ff:7c:9c:f7:14:1d:d9:1e:a9:29:
be:ce:e0:d5:96:60:e0:86:0b:d2:13:31:2b:82:fa:
aa:c0:8e:12:ad:8a:0c:c9:1a:25:45:fd:01:a0:b0:
a2:50:32:e9:cd:1b:4a:f1:74:55:3d:2b:1b:ef:87:
63:e2:e2:d0:02:66:13:fc:df:a8:5d:2b:33:a6:3d:
22:d0:6a:58:37:b6:76:c5:e5:d5:f4:4d:b1:26:3a:
d6:a8:58:03:88:e7:33:f0:89:58:f5:b2:2d:3b:22:
6b:77:89:da:47:1b:9f:e3:03:d3:9b:92:0b:77:a9:
9d:09:b6:95:33:8c:d7:70:d8:76:6d:58:04:9f:46:
50:58:53:57:cf:48:1e:80:8b:40:9a:c1:24:c6:7b:
58:33:7d:c3:8b:e1:2e:cc:ef:31:6c:dc:62:d3:f0:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:64:B6:2D:7E:1D:C3:2B:F6:84:A4:49:CA:F7:63:38:DF:46:2B:AF
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:a6:14:4e:e4:b7:42:ff:46:c2:d1:90:7a:58:4d:00:6f:
13:6f:ee:18:f4:95:83:05:c4:f7:ba:96:48:46:d9:43:d3:4d:
c8:96:f5:bc:2d:c5:e4:8a:18:9a:22:bc:96:69:fd:be:8e:32:
0e:2a:45:38:00:5c:92:40:ad:75:87:ca:ad:1f:b6:3b:2d:8d:
5e:4f:fe:25:f0:3e:97:26:b1:d3:02:b4:85:d5:6a:82:32:59:
1f:58:86:76:c5:57:af:ce:ee:ee:a4:f8:97:76:60:14:7b:0f:
44:fc:49:03:b6:97:c2:d8:da:b4:a2:1d:65:ae:6b:be:67:44:
e2:8c:a9:f0:20:79:12:30:35:f3:89:08:f2:53:03:21:63:27:
7e:27:3e:b0:66:53:d6:00:01:37:25:99:9c:0e:96:b0:b0:fe:
b2:e2:f2:87:77:5f:ae:ce:5d:78:90:12:da:94:7b:0e:a0:e5:
32:d6:c2:ad:ad:ef:4a:5a:95:7f:aa:24:70:d5:d3:42:61:65:
d8:06:fb:29:10:75:0d:9e:60:bf:75:eb:9d:f6:8e:74:31:f0:
49:4e:70:b9:b0:07:24:36:63:98:85:f4:1e:1a:9a:a0:8d:f5:
97:32:3d:9b:45:16:d3:95:1c:c0:79:03:78:f1:8a:3a:73:40:
7a:48:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:13:26 2025 by rpki-client