This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier: DyXIBG9VV86X5+sRoqarCoWFelsgJAolg1kdTS3R9j0=
Subject key identifier: 73:82:B0:41:8E:7A:FF:10:D1:B9:EF:10:3A:6F:9D:CA:07:36:49:96
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer: /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial: 16DA297D488659B895CD549164BF9B6756FFAF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number: FE
Signing time: Sun 14 Sep 2025 05:50:05 +0000
Manifest this update: Sun 14 Sep 2025 05:45:05 +0000
Manifest next update: Mon 15 Sep 2025 06:11:05 +0000
Files and hashes: 1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: dttjxcjZ51LD+iFgFdMrxjKRiYHjen1QUENZG58FnKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:da:29:7d:48:86:59:b8:95:cd:54:91:64:bf:9b:67:56:ff:af:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Validity
Not Before: Sep 14 05:45:05 2025 GMT
Not After : Sep 15 06:11:05 2025 GMT
Subject: CN=7382B0418E7AFF10D1B9EF103A6F9DCA07364996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:7e:ce:08:53:0e:a8:f3:77:88:da:75:e2:
34:a6:89:2a:1e:81:34:fa:e8:f9:c7:e8:4a:2b:d4:
87:7b:c3:1d:9d:84:50:94:20:85:6e:60:fd:cd:54:
e4:3b:e0:ab:bd:19:25:b4:c7:61:c8:45:93:8d:8b:
55:a9:ef:13:35:ed:85:1a:97:3a:92:22:8a:c3:47:
80:42:99:02:41:85:37:6e:c8:9f:dd:5e:e5:26:88:
82:6e:3c:e4:9d:b4:92:ff:d0:d6:7d:58:9f:1d:7d:
fc:bb:11:08:bf:83:80:5c:5f:87:b7:57:8c:48:75:
c6:03:67:8f:eb:d7:06:fc:92:7c:96:1d:04:af:9e:
ce:c7:85:da:11:86:6b:18:f6:e2:52:a0:3b:4a:ef:
07:59:8d:bb:78:cb:6c:67:e4:6e:6e:e9:4d:53:e6:
e9:66:b4:42:20:e4:cd:81:6a:2c:d4:aa:05:61:1e:
ac:0f:b9:87:3c:3c:b2:b4:79:af:54:d9:18:9a:28:
45:67:6a:92:fa:4a:78:39:18:d4:3f:9b:c2:1c:f1:
05:36:66:cf:8c:23:76:71:c0:9e:59:f0:df:c9:d4:
0a:01:ae:d1:d5:8c:14:8d:16:b3:12:96:bc:cb:13:
dc:6e:c7:bc:78:96:2b:e7:16:09:dd:0f:fb:a5:d5:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:B0:41:8E:7A:FF:10:D1:B9:EF:10:3A:6F:9D:CA:07:36:49:96
X509v3 Authority Key Identifier:
keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:c3:03:64:15:c8:53:17:4d:e7:a7:85:0d:01:f0:65:1e:
27:b5:7f:26:e9:5a:cd:dc:81:8e:63:b4:60:9d:d4:99:4d:25:
37:76:69:65:02:3a:db:1e:2d:1e:17:db:94:51:6d:af:ca:86:
96:7e:9e:d9:5e:fb:b9:79:5c:61:46:b0:22:a7:c8:0e:c2:a4:
0a:32:10:16:bf:43:5b:95:c1:57:62:ab:72:a4:22:3f:ba:a1:
79:67:2d:9e:40:a1:83:83:a4:af:2f:4d:84:8e:1f:92:ea:e2:
14:f9:2c:c2:4a:1d:fc:03:24:ef:dc:d4:53:ec:25:e1:e9:60:
14:1e:44:20:69:3e:34:85:c5:dd:76:89:6c:b1:1d:f1:b7:89:
56:7e:18:8e:89:52:a4:d3:a9:1d:d3:fc:9a:59:47:4f:fb:76:
46:7b:b5:cb:76:94:6a:72:5b:36:49:a7:77:0f:08:13:c3:a1:
fb:a6:86:5c:49:17:92:aa:50:ff:be:3b:6b:1f:de:3c:33:78:
9e:ac:19:7c:26:23:d3:c8:7d:59:76:65:c1:d2:10:a5:29:4d:
3e:c6:4f:bb:2d:4f:8f:d9:25:0c:b1:e7:22:1c:a3:09:18:4c:
80:61:9a:f2:65:22:42:bd:e8:89:8c:0f:db:e3:04:e7:09:34:
40:df:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:00:04 2025 by rpki-client