This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
File: DC943CC2A7CDC378A37702573BB4F821170B530D.mft (raw, json)
Hash identifier: x6ZNizaXEElekvMP2EpbniDD+cMDo4yI6K1Og17GGy4=
Subject key identifier: E7:7C:A3:FE:AA:FB:E1:E7:F3:FC:97:94:E9:AB:BE:F4:01:83:11:09
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 0C338655B54A863D3E07028F454014424CDE7508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
Manifest number: 04E7
Signing time: Sat 13 Dec 2025 06:41:46 +0000
Manifest this update: Sat 13 Dec 2025 06:36:46 +0000
Manifest next update: Sun 14 Dec 2025 07:49:46 +0000
Files and hashes: 1: DC943CC2A7CDC378A37702573BB4F821170B530D.crl (hash: Fap+Tbu7gPfzLagHQSniy13l1KdA59dcdnkuom6FXfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:33:86:55:b5:4a:86:3d:3e:07:02:8f:45:40:14:42:4c:de:75:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Dec 13 06:36:46 2025 GMT
Not After : Dec 14 07:49:46 2025 GMT
Subject: CN=E77CA3FEAAFBE1E7F3FC9794E9ABBEF401831109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:82:1a:41:8f:19:84:67:59:5c:a2:17:45:
a4:7b:29:5c:16:ba:a9:06:b4:74:ba:6d:33:74:c7:
2f:d5:09:d2:c7:8a:08:46:c7:ba:3e:82:2b:4a:de:
70:b4:cc:dd:f0:0c:18:5e:b7:40:e5:cb:69:14:27:
0b:30:6e:d0:03:27:5c:5a:53:e2:40:46:21:6c:d3:
91:87:c4:64:de:b7:0d:d9:ac:f7:96:d2:2b:85:72:
5e:91:f2:f8:54:e8:01:44:0f:f0:bc:58:57:f2:22:
ae:80:f2:7c:4b:10:eb:db:79:f5:51:be:35:df:b1:
fb:43:51:d2:4f:a2:54:18:03:00:ac:41:db:64:aa:
2f:56:7d:07:5e:a9:f2:25:03:96:ba:fb:b2:de:65:
2c:f7:96:16:99:fa:27:0f:72:f4:73:f4:cd:fe:96:
ff:ea:a9:1a:3d:62:56:e9:a6:97:24:65:be:c9:d2:
b0:0d:f0:2f:bd:b5:54:94:19:d7:d4:44:2a:0b:10:
97:8f:87:a6:ce:c8:3a:6c:78:39:8c:30:66:f0:c1:
ba:13:95:2e:88:29:55:54:63:6e:57:7e:af:60:d6:
4e:4c:9e:4a:0d:d6:b3:6a:f4:d9:7b:01:ca:54:9f:
a8:70:24:ed:90:61:a1:c2:3b:32:c4:e7:d8:46:49:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:A3:FE:AA:FB:E1:E7:F3:FC:97:94:E9:AB:BE:F4:01:83:11:09
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:30:71:83:b2:7f:ad:3f:c7:99:45:d7:e0:ce:5d:92:0c:
b1:47:c1:e0:b2:68:87:1d:29:3a:2f:1c:2b:b2:65:9c:95:39:
27:7f:a2:9b:c9:23:1d:50:c4:16:f5:03:a4:29:9e:fb:8f:e9:
ca:a1:0a:5d:f4:b7:da:8d:9c:87:b7:4a:d9:c4:9f:9c:b3:3b:
11:71:9b:72:38:7c:ab:83:42:f3:40:47:66:d7:fc:96:c9:1d:
c4:94:00:3e:dc:dc:ef:f1:44:f8:35:9b:1a:da:21:c7:93:68:
68:7f:0a:e6:f1:3f:03:d2:03:5f:df:53:62:5d:88:04:57:91:
96:a8:a7:57:2c:c6:bb:04:15:8e:91:5b:51:79:5b:ad:41:8a:
fd:ad:1f:dc:42:a2:04:26:6d:41:80:e6:24:34:cb:6a:45:2f:
c0:ea:ab:ef:4c:26:3d:71:b0:8f:f6:a2:2e:42:f6:ba:6b:91:
b8:df:11:3d:9a:8c:05:6d:07:9e:b6:d2:49:79:c1:8f:59:c4:
e5:e1:50:e7:63:10:f8:79:10:ba:69:0a:e3:96:62:03:4f:6d:
7e:8d:6f:47:b3:70:b5:a9:53:b9:b6:2a:1e:38:f8:21:89:15:
69:4e:31:16:94:92:21:7d:dd:92:1d:3b:e5:91:2a:77:0c:57:
01:43:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:51:40 2025 by rpki-client