This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: McyINKi9Yw3HElBvQjcsGraNrcU8YeH7rL5w7U6oDD0=
Subject key identifier: B8:FD:DA:B6:4A:38:14:2E:B9:D3:69:54:89:62:FB:53:01:4D:3A:7D
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 019A5262F93BB76AA610B0F099F0AE347A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 0786
Signing time: Wed 05 Nov 2025 05:00:09 +0000
Manifest this update: Wed 05 Nov 2025 05:00:09 +0000
Manifest next update: Thu 06 Nov 2025 05:00:09 +0000
Files and hashes: 1: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: S1gHqxtCjYG5sKkQ9uSYxE2Q5vT4CzuyEXbk00q4A48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f9:3b:b7:6a:a6:10:b0:f0:99:f0:ae:34:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Nov 5 05:00:09 2025 GMT
Not After : Nov 6 05:00:09 2025 GMT
Subject: CN=b8fddab64a38142eb9d369548962fb53014d3a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:dd:0d:52:32:16:0b:94:c4:98:28:98:c3:
11:2d:82:00:1f:d9:13:a0:e1:c3:e3:8b:6c:4d:1e:
d8:45:46:f5:54:f2:8a:fa:52:48:79:43:bb:21:e7:
cf:b7:7f:46:e0:a3:20:03:2a:b3:63:0c:38:79:1e:
98:86:d2:a4:6e:4d:53:de:95:b7:8f:d4:0e:c3:d5:
c7:1f:f5:a3:25:8d:ca:1c:b9:c4:00:0f:f3:fc:5a:
24:f0:9d:11:55:b3:ce:6b:c8:83:2a:15:5a:0f:e4:
f9:d3:3a:68:98:93:a6:38:96:b3:0e:6f:95:cf:f8:
27:32:57:d2:d3:28:74:cb:9c:24:58:41:b5:b3:bf:
20:af:b8:20:c6:42:1d:26:ed:08:7f:0f:18:b5:3b:
42:07:4f:23:f8:97:83:47:9c:f8:ac:17:88:22:3e:
8f:b1:98:a1:e0:86:77:8d:9c:d7:ea:21:e3:71:26:
68:cd:02:46:a0:eb:d1:87:b7:71:c3:c1:0d:a8:68:
3d:6d:25:4e:23:7e:f1:58:ce:dd:09:5f:a2:9d:90:
67:c7:db:d3:51:01:b4:47:12:8f:c5:77:62:82:2f:
02:9e:f7:87:27:0c:4e:32:d1:00:26:a5:13:fc:12:
b7:18:33:36:ba:87:e9:be:b9:f9:af:ee:fb:43:b6:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:DA:B6:4A:38:14:2E:B9:D3:69:54:89:62:FB:53:01:4D:3A:7D
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7d:04:76:89:e9:ac:ee:06:fa:28:32:dd:03:72:a3:1c:56:
56:55:f2:df:b9:de:0d:35:c8:a2:a9:76:ef:95:ba:79:00:9f:
08:d0:b5:f8:8f:d0:90:cf:c1:18:64:01:bf:a2:71:82:33:28:
d6:41:ce:ef:c7:37:71:a6:ab:f4:62:d6:e0:c6:b2:a4:c0:8a:
59:13:6a:c5:69:95:8f:d2:9f:bc:d0:79:2d:3b:32:a4:36:9a:
d8:6e:92:f8:23:6f:9c:a1:0b:5e:26:d6:0c:7a:48:15:b7:9c:
16:f3:8d:78:d2:89:7b:32:8b:05:77:5a:7d:9d:a7:e7:d7:7b:
0c:4d:41:81:34:23:4d:30:e5:b2:b1:0b:55:4d:cd:81:6b:11:
38:f1:1b:24:44:88:42:bc:48:cf:68:1f:5b:8f:c1:88:66:a8:
99:eb:eb:9e:88:7c:b8:4f:28:35:71:52:3b:a6:bd:0c:21:06:
c9:43:8f:01:54:b9:58:1d:1b:79:95:f2:f0:39:6a:ba:21:9e:
76:08:61:82:42:c6:91:83:cc:20:95:6f:ba:41:65:4c:07:32:
8d:f5:9a:5b:7d:67:98:a9:0c:08:7b:40:fb:e7:6e:98:5f:fe:
f0:4c:5f:1b:bb:26:07:1d:53:c5:dd:07:d1:9e:3d:8d:dd:96:
71:20:a9:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYvk7t2qmELDwmfCuNHopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDgzMDQ0ZmI2YzQzYmZmYWQ1ZmQ1NGIwN2QyY2M3YzAw
ZDFiZDMwHhcNMjUxMTA1MDUwMDA5WhcNMjUxMTA2MDUwMDA5WjAzMTEwLwYDVQQD
EyhiOGZkZGFiNjRhMzgxNDJlYjlkMzY5NTQ4OTYyZmI1MzAxNGQzYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30LdDVIyFguUxJgomMMRLYIAH9kT
oOHD44tsTR7YRUb1VPKK+lJIeUO7IefPt39G4KMgAyqzYww4eR6YhtKkbk1T3pW3
j9QOw9XHH/WjJY3KHLnEAA/z/Fok8J0RVbPOa8iDKhVaD+T50zpomJOmOJazDm+V
z/gnMlfS0yh0y5wkWEG1s78gr7ggxkIdJu0Ifw8YtTtCB08j+JeDR5z4rBeIIj6P
sZih4IZ3jZzX6iHjcSZozQJGoOvRh7dxw8ENqGg9bSVOI37xWM7dCV+inZBnx9vT
UQG0RxKPxXdigi8CnveHJwxOMtEAJqUT/BK3GDM2uofpvrn5r+77Q7Yw9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj92rZKOBQuudNpVIli+1MBTTp9MB8GA1UdIwQY
MBaAFDgIMET7bEO/+tX9VLB9LMfADRvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGE2YjgtMzlkMy00Zjc5LWFlMjUt
YTk1NTExYmE0ZDQ2LzEvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGE2YjgtMzlkMy00Zjc5LWFlMjUtYTk1NTExYmE0ZDQ2
LzEvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX0Edonp
rO4G+igy3QNyoxxWVlXy37neDTXIoql275W6eQCfCNC1+I/QkM/BGGQBv6JxgjMo
1kHO78c3caar9GLW4MaypMCKWRNqxWmVj9KfvNB5LTsypDaa2G6S+CNvnKELXibW
DHpIFbecFvONeNKJezKLBXdafZ2n59d7DE1BgTQjTTDlsrELVU3NgWsROPEbJESI
QrxIz2gfW4/BiGaomevrnoh8uE8oNXFSO6a9DCEGyUOPAVS5WB0beZXy8DlquiGe
dghhgkLGkYPMIJVvukFlTAcyjfWaW31nmKkMCHtA++dumF/+8ExfG7smBx1Txd0H
0Z49jd2WcSCpXw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:29:10 2025 by rpki-client