This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
File: tfOkHre0qwKEW1sMCD9fQGwoOho.mft (raw, json)
Hash identifier: HvD0ZBYNkuwKQgmxRzWtz4lycyleiPBdxd4AuGZDzXI=
Subject key identifier: 7E:3D:69:EF:7D:C0:A5:80:CC:E6:FF:F0:7C:E6:17:55:92:67:28:D4
Authority key identifier: B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
Certificate issuer: /CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Certificate serial: 0191C6902D8B3ADB84FE7D2E4A573B37339B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
Manifest number: BD
Signing time: Fri 06 Sep 2024 09:00:23 +0000
Manifest this update: Fri 06 Sep 2024 09:00:23 +0000
Manifest next update: Sat 07 Sep 2024 09:00:23 +0000
Files and hashes: 1: M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa (hash: B9HQRgcInIThy0NS5CcO27Q+N1HKuEB6UZqSgRqnaOU=)
2: p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa (hash: PydqBoHR5MWdeFG26uqpNdN1pxfipu34LI+HJkEtsSk=)
3: tfOkHre0qwKEW1sMCD9fQGwoOho.crl (hash: LkmNEPjeiqFl29HaJvg3QQLWzukN6V0/k5qZlJWkncg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:90:2d:8b:3a:db:84:fe:7d:2e:4a:57:3b:37:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Validity
Not Before: Sep 6 09:00:23 2024 GMT
Not After : Sep 7 09:00:23 2024 GMT
Subject: CN=7e3d69ef7dc0a580cce6fff07ce61755926728d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:b2:ea:76:c4:cf:e3:38:ac:13:24:cb:93:
bf:fe:b6:41:0f:80:9e:f0:0e:8e:f4:83:4b:ac:65:
5d:dd:bd:54:86:f9:fd:03:7f:67:66:48:c5:cf:a7:
42:39:05:ca:f3:ee:02:45:16:e3:d6:a7:b3:ab:0b:
14:cc:e9:7d:09:58:e0:b8:15:65:47:cc:a3:f4:60:
bf:8d:31:59:42:a8:e9:93:4a:39:fe:da:30:4c:d9:
2e:98:b2:20:4b:ea:03:e9:7d:b8:68:45:57:0d:ea:
9b:1d:59:37:a3:c2:da:a4:c3:5f:62:87:b4:1d:b2:
f0:cb:fa:92:fc:d8:d9:ae:90:5b:17:ee:c7:e3:7a:
43:6e:a8:1e:33:65:3f:1f:2a:6c:10:01:fd:c7:1d:
e4:a1:db:2c:35:03:52:95:6f:11:b2:a4:d8:73:c0:
c3:f7:ca:45:cf:92:8f:4f:67:9f:4c:60:66:4a:73:
ca:eb:51:c0:4e:a0:8d:00:87:a8:55:d8:eb:ad:4b:
42:35:b9:e7:a8:ee:c9:52:1d:4b:fb:11:d7:3a:3f:
f2:14:b2:fd:a9:fb:93:24:23:94:82:f2:c9:4f:0a:
ad:18:04:c4:f6:ec:0d:63:78:03:5d:61:f7:e2:c8:
fe:ce:72:a0:c9:e4:6d:7d:43:dd:a0:c0:f9:e9:52:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:69:EF:7D:C0:A5:80:CC:E6:FF:F0:7C:E6:17:55:92:67:28:D4
X509v3 Authority Key Identifier:
keyid:B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6b:1b:6f:f6:fc:6f:60:34:b0:c3:fe:3c:af:6f:c8:30:9e:
23:43:20:3b:c7:1a:d8:a6:5d:05:41:a6:3e:bc:94:c4:9d:1c:
c2:94:09:9a:3c:b2:54:61:1e:39:aa:cd:7e:da:0f:65:10:dc:
15:0a:85:f3:b4:f0:0c:11:e4:69:de:69:09:24:db:6e:1d:b3:
32:72:e1:32:38:5c:91:24:1b:a8:ff:e3:56:11:0b:b4:7f:75:
7f:41:b6:92:e2:79:76:47:92:b1:0b:a1:c2:0e:33:0e:b3:6a:
04:17:b9:8f:85:cd:71:f3:7e:c0:12:77:34:c8:a1:b7:5a:82:
46:99:46:05:52:03:d9:fb:07:61:b6:af:da:02:80:ca:d3:0c:
95:f0:d1:62:84:72:e9:dc:09:10:c4:94:91:14:af:39:95:f1:
fc:70:de:d5:1c:9f:bb:a6:da:d4:ec:50:fd:ac:be:c3:f9:ae:
2c:f2:4b:55:57:c5:03:22:ee:2a:67:2d:5f:ca:7a:0f:71:47:
e8:a8:0d:fc:20:4f:01:08:a6:da:19:0e:2c:87:eb:d4:4f:c8:
63:b4:c6:4a:07:bf:d0:47:b8:30:57:c9:16:70:31:65:c9:03:
bf:40:b4:23:de:82:5f:e6:2b:ae:90:f7:9b:04:87:48:2c:26:
e0:40:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:05:18 2025 by rpki-client