This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: fxCywjnQ+NUL42sIFz7Yo9Hp1eIdRC02obHjlDrSaiU=
Subject key identifier: C8:AC:2D:9C:E7:5A:39:74:4C:3B:3E:E4:34:BE:99:98:11:53:0E:3D
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 019AD813555E37D388917A1BA18C38BB8037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 0A8B
Signing time: Mon 01 Dec 2025 04:02:16 +0000
Manifest this update: Mon 01 Dec 2025 04:02:16 +0000
Manifest next update: Tue 02 Dec 2025 04:02:16 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: mH47y5rQV+S1n+tCS9CQpAPLzzQ/zuXcsPdWswdEuhQ=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:d8:13:55:5e:37:d3:88:91:7a:1b:a1:8c:38:bb:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Dec 1 04:02:16 2025 GMT
Not After : Dec 2 04:02:16 2025 GMT
Subject: CN=c8ac2d9ce75a39744c3b3ee434be999811530e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:54:61:83:f0:d5:59:4f:bd:72:97:b3:d6:ad:
f6:86:fa:bc:a2:c1:c6:25:af:f8:5c:43:f7:df:b8:
05:6d:1a:81:13:0b:4f:7a:82:22:34:ff:31:17:5e:
84:70:b8:eb:9c:26:9d:de:ef:74:97:99:64:c1:2a:
34:d7:5c:15:58:0c:67:39:2b:c4:90:97:f9:c3:f7:
1a:96:2a:6e:6c:ab:89:ea:92:5b:0e:c2:44:0c:6e:
bf:05:b2:f3:4f:92:42:13:bd:bb:fc:37:f0:e0:08:
76:ac:c3:72:32:b6:83:77:74:a0:b6:66:64:35:db:
0a:ad:28:32:eb:1b:bb:dc:e4:da:0d:30:2a:84:dc:
3b:bd:fa:6d:fe:39:dd:0e:1e:62:e2:7d:8b:5b:cd:
5b:f2:2e:dc:4e:95:1b:f7:92:0d:08:76:0a:49:d6:
6e:5a:2e:67:22:03:93:44:46:d5:0d:68:6e:4a:f1:
75:43:ff:94:07:9f:29:f2:52:4f:a1:02:29:68:71:
72:99:1f:5a:06:64:a6:a5:51:4e:53:57:90:d7:4b:
dc:9e:3a:30:48:2d:3b:82:4c:4b:ca:59:5f:7d:65:
3f:6c:1c:2f:74:c2:7d:a7:87:db:61:a2:cc:a4:6c:
fe:c5:e9:d5:09:3a:b4:9a:04:5a:1e:cb:d6:6a:ae:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:2D:9C:E7:5A:39:74:4C:3B:3E:E4:34:BE:99:98:11:53:0E:3D
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c3:c0:ae:3d:66:36:00:c6:d5:10:2e:33:e8:6a:7a:36:d5:
7b:a7:fd:26:c2:1b:b9:46:9f:a8:ba:66:5e:37:2b:43:50:de:
4e:df:6c:6c:c0:36:c2:ee:95:35:65:ff:c1:66:00:97:82:74:
15:67:bc:d7:d0:5a:99:0a:8e:47:e6:f7:aa:ac:e9:ca:08:aa:
fc:a4:eb:05:52:66:3d:e3:ca:04:9b:72:21:59:98:25:8d:2f:
ad:e7:18:15:46:10:cc:99:3c:4f:c2:81:6c:1a:30:67:d0:ea:
f8:5e:fc:1c:47:4e:e6:18:ff:73:96:7d:09:fc:78:38:0a:39:
63:18:34:4d:ec:a7:64:0f:85:ca:79:b3:dd:c0:57:20:b7:2a:
32:67:ef:21:b4:ff:13:c0:b7:23:d7:aa:e7:9e:03:c8:b9:35:
db:64:ee:6d:86:84:42:21:4f:0d:53:16:c9:7e:42:32:79:de:
c1:bb:0b:5b:20:1e:56:c8:b7:90:65:c4:89:cb:07:51:7a:1e:
3b:b1:91:e0:f9:fe:fe:b1:b8:a5:c9:46:b1:50:e0:bb:6f:0c:
b6:bd:70:ba:82:4a:b1:d8:56:20:9d:ae:b7:12:ad:70:3b:c2:
6d:50:7c:fb:f5:77:81:47:e6:05:36:ed:d5:bf:1b:20:c0:32:
82:6b:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:53:30 2025 by rpki-client