This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: a0Qb77hftU5ufdYcSyZGlCyzuOtOJtZfePXDixLGnDw=
Subject key identifier: 3B:32:FE:95:19:46:4A:C0:9D:2F:58:62:44:1A:48:CC:53:84:A1:20
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 0197F397BEE2DF4708E64B96B39237D777C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 15D6
Signing time: Thu 10 Jul 2025 09:08:17 +0000
Manifest this update: Thu 10 Jul 2025 09:08:17 +0000
Manifest next update: Fri 11 Jul 2025 09:08:17 +0000
Files and hashes: 1: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: cLR6OqL4TPC+TbmljNmc8UxwEgE9y07bxdao+Us45zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:97:be:e2:df:47:08:e6:4b:96:b3:92:37:d7:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Jul 10 09:08:17 2025 GMT
Not After : Jul 11 09:08:17 2025 GMT
Subject: CN=3b32fe9519464ac09d2f5862441a48cc5384a120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:d6:24:1a:4a:c4:4c:50:62:86:b4:7d:eb:
ea:9f:d3:89:5f:c5:52:85:f5:34:12:13:21:66:ef:
b8:78:2a:a8:c7:42:d6:03:87:89:ba:8c:3e:9e:34:
e1:2e:b4:26:26:95:02:7a:67:c6:99:5b:23:e7:d0:
c1:a8:9e:f7:99:f7:27:d3:bd:49:c3:b3:38:10:12:
2c:97:88:30:6f:9d:2b:a9:d9:65:62:45:27:52:a8:
7b:c2:ae:d8:b0:4c:a4:49:09:1e:7d:ed:24:76:86:
14:c2:1d:c2:43:ec:08:d3:16:ef:f0:9a:5b:f5:79:
0b:98:bc:ae:b0:c5:ef:85:b7:95:9c:7e:f9:b8:a3:
43:6a:b2:27:dd:2d:3a:b4:9b:f1:ba:b2:61:9e:01:
38:29:d2:48:d8:a4:a5:bb:f2:30:32:62:f7:75:75:
ee:db:4b:dd:f8:64:c3:55:97:91:00:95:02:5f:28:
37:b8:c9:77:db:0b:34:e8:2a:bf:c2:e7:15:d9:b7:
ee:97:28:6c:47:bb:71:51:8a:f7:b3:de:f7:c7:ce:
3f:57:89:c8:d0:38:64:bc:6b:9a:b4:65:9c:a2:9d:
d0:4d:32:47:05:22:0f:0b:e7:89:63:b0:e8:a4:00:
d4:e4:43:87:e5:7d:98:41:85:03:ed:ab:78:9d:1b:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:FE:95:19:46:4A:C0:9D:2F:58:62:44:1A:48:CC:53:84:A1:20
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:01:76:70:e9:f7:c7:e8:64:83:6f:47:0f:24:c9:5d:00:
44:af:1d:24:7b:0e:52:15:43:ff:72:47:89:04:0e:d0:d4:d3:
bf:5f:bb:d7:5e:19:13:c9:52:bc:35:ef:72:52:66:62:c7:a2:
15:fe:fb:8a:04:f2:cd:32:6a:62:0e:ab:c3:0a:5d:91:c6:96:
c6:27:bf:21:6a:06:6d:55:b3:23:14:e5:6f:ea:40:63:8d:66:
57:aa:04:23:1c:b9:12:69:a9:4b:46:1a:d3:6d:ee:ed:e5:5c:
7f:7a:fe:89:0c:8d:6a:d6:9f:a0:ab:1f:85:c7:b0:cd:ac:c3:
b4:1e:00:32:a3:00:e2:48:ad:55:14:27:d9:e4:ec:a1:eb:a2:
4f:8e:e0:c3:bf:7f:47:cd:09:4f:7a:11:60:79:b9:d6:73:6d:
3e:ec:c6:da:3e:ba:61:5f:2c:0f:ee:77:36:77:59:9b:88:5b:
23:4a:4d:00:10:a6:3c:f9:1f:30:0e:ea:62:79:9d:00:60:51:
ce:bb:c5:31:be:54:17:07:19:6b:f3:fd:12:51:56:91:ac:53:
87:c2:a5:8e:00:29:fa:34:b5:7e:8d:7e:0e:ee:64:3e:30:f6:
ef:6c:20:f2:46:d9:12:54:81:e3:cc:8e:8a:ac:fa:4b:47:9d:
c7:97:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:35:53 2025 by rpki-client