This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1b3fd8-b4da-4da4-8d3c-b1c6055d1d36/1/LJJWaAHtGCc3cl-z6Hl6y78GmVA.mft
File: LJJWaAHtGCc3cl-z6Hl6y78GmVA.mft (raw, json)
Hash identifier: U2c4KfRLHLGxwkmJ+wITxniyZk5qX0Tu7uycEl9gg38=
Subject key identifier: 03:04:F6:27:09:3F:A7:FB:50:2D:29:FC:3F:5A:96:3F:32:F9:86:E1
Authority key identifier: 2C:92:56:68:01:ED:18:27:37:72:5F:B3:E8:79:7A:CB:BF:06:99:50
Certificate issuer: /CN=2c92566801ed182737725fb3e8797acbbf069950
Certificate serial: 01932A8BEDC977F8C3AF083F970AD8AF454F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJJWaAHtGCc3cl-z6Hl6y78GmVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1b3fd8-b4da-4da4-8d3c-b1c6055d1d36/1/LJJWaAHtGCc3cl-z6Hl6y78GmVA.mft
Manifest number: 055E
Signing time: Thu 14 Nov 2024 12:00:33 +0000
Manifest this update: Thu 14 Nov 2024 12:00:33 +0000
Manifest next update: Fri 15 Nov 2024 12:00:33 +0000
Files and hashes: 1: LJJWaAHtGCc3cl-z6Hl6y78GmVA.crl (hash: kndpoq2eUJyk/wBAsYUM/RCyiGdtcAPvNWoGncoKlM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:8b:ed:c9:77:f8:c3:af:08:3f:97:0a:d8:af:45:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c92566801ed182737725fb3e8797acbbf069950
Validity
Not Before: Nov 14 12:00:33 2024 GMT
Not After : Nov 15 12:00:33 2024 GMT
Subject: CN=0304f627093fa7fb502d29fc3f5a963f32f986e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:b0:c1:b6:56:a9:fa:7c:7b:30:3f:d2:b6:
cd:9b:28:56:a4:91:b0:d7:d9:03:25:6e:3c:58:27:
f5:cf:29:cb:6c:24:ec:be:0e:d1:b4:ea:5a:23:35:
b1:2d:84:67:7a:1c:bf:45:ef:6a:12:a5:17:dc:d8:
97:fa:9b:fc:ce:fc:d7:28:c8:57:66:d3:6b:2c:08:
b2:23:02:0a:e2:e9:a7:54:ad:44:72:48:b6:fc:7d:
ae:b7:76:74:c9:69:a4:ec:16:57:8b:6b:9b:30:81:
2e:48:1f:f5:a2:6b:1f:72:39:2f:50:70:2c:9a:22:
bf:a3:f6:f9:a4:ba:7e:c5:af:bd:ab:28:a8:45:ae:
9d:eb:b8:50:13:65:7e:82:ba:f8:35:65:08:bc:23:
b2:6e:09:9a:00:d9:46:e2:0f:a8:6c:b4:ac:e3:ce:
b3:54:05:d4:78:62:d4:fa:40:df:a9:3c:33:05:c7:
57:35:0f:6a:4f:5f:2a:e1:a9:fc:23:14:09:f4:57:
90:e6:41:19:66:3e:d1:47:f8:a1:3e:cd:6b:e7:b2:
1e:8f:a5:bb:e1:85:33:2e:a8:38:4e:bb:b5:58:6e:
48:07:42:b2:19:b5:89:9d:42:6b:4f:61:94:0e:b2:
16:12:ed:03:ec:a7:bd:91:cd:88:69:c8:c3:67:72:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:F6:27:09:3F:A7:FB:50:2D:29:FC:3F:5A:96:3F:32:F9:86:E1
X509v3 Authority Key Identifier:
keyid:2C:92:56:68:01:ED:18:27:37:72:5F:B3:E8:79:7A:CB:BF:06:99:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJJWaAHtGCc3cl-z6Hl6y78GmVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1b3fd8-b4da-4da4-8d3c-b1c6055d1d36/1/LJJWaAHtGCc3cl-z6Hl6y78GmVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1b3fd8-b4da-4da4-8d3c-b1c6055d1d36/1/LJJWaAHtGCc3cl-z6Hl6y78GmVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:11:23:54:02:27:18:ac:32:61:d6:eb:e1:40:e7:a6:c0:
2b:f3:1c:0e:52:8d:f5:90:a7:c2:6f:44:80:8a:b5:ce:bf:15:
05:8c:ba:ab:ab:77:f3:c8:27:c8:d5:04:ba:2d:ad:dc:5b:dd:
84:50:9e:7e:0e:6f:5d:2f:38:be:0e:02:03:37:8b:f3:b5:6b:
28:80:3f:d7:87:6d:6c:fa:b0:c5:66:96:1f:4c:44:a3:3a:ec:
f9:c8:ba:a4:71:5d:d5:3b:7c:6b:50:c3:0e:3d:71:7a:67:5b:
7f:0e:fe:0c:91:91:6e:35:ac:7b:39:10:c0:7a:69:d2:78:22:
7a:b8:10:15:3a:9f:02:1e:1e:f0:68:82:34:23:cc:a1:62:24:
12:34:14:59:4b:44:d4:67:4f:92:36:54:c4:0f:1b:d8:b4:e9:
37:dc:c7:c2:0d:d9:a5:c3:89:40:a1:19:ec:bd:27:85:4a:6e:
be:2c:f8:6a:67:5a:81:a4:b9:ad:cf:3a:77:4c:81:fb:67:64:
66:a1:ca:89:ff:a5:55:75:82:fd:ee:c2:32:ad:d3:d0:6a:90:
7b:ee:26:3b:ad:11:c5:bb:b1:9f:d9:cb:9d:a5:82:43:66:c4:
fb:db:c4:ba:d9:16:8f:d7:df:09:31:75:ad:f8:66:2a:de:0c:
dd:e2:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:05:49 2025 by rpki-client