This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
File: 9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft (raw, json)
Hash identifier: I+pvVnrAgbKv6e65Gai6kyHAizD0Dhd84fLIseqlIIU=
Subject key identifier: 2D:7E:67:8D:B8:90:AE:EE:54:C6:DC:FB:15:08:96:78:7F:EB:88:6F
Authority key identifier: 9B:4C:46:6B:CC:F6:BF:97:C3:EE:0F:C7:F0:32:21:24:24:27:87:8E
Certificate issuer: /CN=9b4c466bccf6bf97c3ee0fc7f03221242427878e
Certificate serial: 276302A1DAA93EC2406B979098DC384D3375B6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0xGa8z2v5fD7g_H8DIhJCQnh44.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
Manifest number: 04
Signing time: Sun 26 Nov 2023 01:51:24 +0000
Manifest this update: Sun 26 Nov 2023 01:46:24 +0000
Manifest next update: Mon 27 Nov 2023 02:02:24 +0000
Files and hashes: 1: 9B4C466BCCF6BF97C3EE0FC7F03221242427878E.crl (hash: FE+ni1/Ob5Ja/LJDVAY/RuDw2vE9eIQvOFq78zG1TvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:63:02:a1:da:a9:3e:c2:40:6b:97:90:98:dc:38:4d:33:75:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b4c466bccf6bf97c3ee0fc7f03221242427878e
Validity
Not Before: Nov 26 01:46:24 2023 GMT
Not After : Nov 27 02:02:24 2023 GMT
Subject: CN=2D7E678DB890AEEE54C6DCFB150896787FEB886F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:11:21:ab:1d:cc:f0:89:8a:f0:80:ce:61:
d3:6d:0e:c5:f3:a0:ab:a9:6c:78:26:89:a7:a1:df:
3e:05:d1:d3:31:18:37:e0:ed:0e:f8:a9:74:ee:c1:
78:54:34:db:93:6f:5f:9b:26:12:d6:a3:d1:47:51:
d3:b8:ed:ed:e7:86:59:da:dd:cd:af:39:3e:24:01:
fb:bf:f5:0f:bc:76:2c:95:8d:b7:62:fd:ea:67:0a:
8b:b7:33:4c:b9:fb:74:a5:ee:97:e6:b3:70:3a:6c:
d5:c8:7c:da:b3:41:05:b5:43:98:b7:4b:e0:fe:f8:
31:d3:0e:07:f4:e3:0f:f5:ff:8c:67:f4:95:2a:b8:
4f:f7:1c:b8:e8:cd:c2:72:db:3d:65:3e:2b:75:44:
a0:10:88:c3:94:7a:6c:82:83:98:70:20:ff:71:4e:
e3:ed:c8:8b:41:44:0f:d9:21:57:d2:45:1a:7f:d4:
0d:ae:e2:3b:0a:06:c8:fe:50:84:ee:50:07:f7:1d:
79:ae:66:a5:6e:c3:ae:59:cb:c2:ac:29:97:2f:46:
b6:b1:18:8f:1e:b1:0d:e3:5e:47:c6:15:97:43:60:
6e:49:54:c5:e9:d6:73:a2:0a:93:c9:48:85:48:a9:
fd:be:41:39:a4:5e:15:c0:e8:29:9b:df:c1:d9:06:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:67:8D:B8:90:AE:EE:54:C6:DC:FB:15:08:96:78:7F:EB:88:6F
X509v3 Authority Key Identifier:
keyid:9B:4C:46:6B:CC:F6:BF:97:C3:EE:0F:C7:F0:32:21:24:24:27:87:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0xGa8z2v5fD7g_H8DIhJCQnh44.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/3/9B4C466BCCF6BF97C3EE0FC7F03221242427878E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bc:42:6d:61:f3:e8:bf:86:c4:96:b7:b8:7e:a2:ab:95:ab:
0a:bd:3b:16:9e:23:d9:01:19:0d:31:61:94:0a:74:40:f0:7c:
27:d2:98:cf:13:3d:3c:b5:90:d0:7a:6d:6c:14:64:38:49:3d:
f6:07:e1:dd:1e:9f:23:d6:90:11:fa:5f:e0:42:56:9a:8c:6d:
d8:76:51:c8:c0:e7:0b:46:8b:33:47:4c:3f:c6:39:53:af:42:
a8:0d:9d:05:0d:3a:5c:5f:9f:f0:58:dc:41:7b:c3:27:42:1d:
44:1c:e7:b4:ef:e9:53:62:fb:e3:c5:bb:53:7e:1c:76:60:9b:
93:f9:53:4f:fa:55:76:86:e3:bc:31:05:04:78:4c:a5:f4:2a:
c1:4b:1f:12:c7:3c:3d:e7:ce:09:a3:4a:c2:3c:b2:cd:07:0e:
b6:d0:40:6a:04:2c:e2:a1:97:68:53:bf:f0:c2:09:d6:3e:02:
b3:70:d6:77:20:20:73:6a:5d:76:f5:87:90:55:24:c7:ea:4b:
1d:26:1d:cd:83:e2:b7:16:29:3f:a8:e8:30:75:a6:d9:a5:e4:
81:6d:fd:30:21:4d:86:93:5e:1a:82:b2:d6:e2:e8:48:ee:89:
e6:5f:e8:00:4d:e8:a7:b5:50:75:3f:9a:2f:61:15:cc:30:2c:
d1:3e:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:20:33 2025 by rpki-client