This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
File: m263eIMkLPw4ZQB4iNCt7-s-cYs.mft (raw, json)
Hash identifier: cgp8RTwW/Q/s4AiBf7lJoTkgbODGLVpl3UwCCyKlAzU=
Subject key identifier: 02:D8:93:56:9E:08:2E:55:B5:9F:22:7C:B1:F4:9E:D3:7C:2F:1F:47
Authority key identifier: 9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
Certificate issuer: /CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Certificate serial: 019A7C3BDE72F858B647FC7E22DF1F04E4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
Manifest number: 0413
Signing time: Thu 13 Nov 2025 08:01:29 +0000
Manifest this update: Thu 13 Nov 2025 08:01:29 +0000
Manifest next update: Fri 14 Nov 2025 08:01:29 +0000
Files and hashes: 1: m263eIMkLPw4ZQB4iNCt7-s-cYs.crl (hash: 0I5fKvdiDAxYfJ7fuFKydMbWgxiasROQey8sTcKQYsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7c:3b:de:72:f8:58:b6:47:fc:7e:22:df:1f:04:e4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Validity
Not Before: Nov 13 08:01:29 2025 GMT
Not After : Nov 14 08:01:29 2025 GMT
Subject: CN=02d893569e082e55b59f227cb1f49ed37c2f1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:12:43:38:af:f4:42:6f:95:24:94:8a:71:
26:df:6e:0e:90:19:f6:e7:b5:d5:55:80:ab:75:a3:
7d:92:2f:12:7f:69:cf:e7:11:bf:9d:79:d0:e7:fa:
28:5d:62:42:39:6e:90:57:24:fc:f2:0c:f5:2e:50:
36:1b:4b:fe:f5:8b:d9:f4:58:59:15:ab:db:8c:97:
53:d2:b5:e9:10:9f:31:74:58:9a:81:59:6a:13:4c:
05:5b:29:de:de:21:9f:44:e2:d7:6a:25:a0:24:7c:
99:ea:37:27:d1:8e:8b:1b:fc:39:84:c1:6c:f2:d1:
ff:bd:b3:d9:f5:40:0b:7d:42:1d:b1:10:73:6b:b3:
a2:8d:6e:56:b7:38:c0:a9:9d:05:5a:97:1c:99:c9:
9b:47:ea:b9:0d:64:53:2e:45:93:ef:17:8c:1e:f7:
43:a4:17:fe:69:31:55:28:1c:96:df:dd:6e:4a:0e:
91:ee:ac:fc:ad:c1:d2:01:12:d4:95:e5:11:ba:1a:
65:b2:15:e7:f5:62:48:8c:56:cc:85:72:e1:2b:0d:
85:a0:a6:43:42:0a:32:6d:a0:8b:00:9b:49:ca:e1:
8e:30:65:a2:cd:9d:fc:71:9f:a3:bc:ab:9c:78:dc:
fa:ce:01:68:4d:32:c8:67:4c:80:66:7b:1e:e7:95:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:93:56:9E:08:2E:55:B5:9F:22:7C:B1:F4:9E:D3:7C:2F:1F:47
X509v3 Authority Key Identifier:
keyid:9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:5f:0f:d1:ae:53:0a:d0:32:af:4b:9c:8c:49:66:6b:a1:
f6:45:9d:e2:73:69:46:41:25:0e:43:97:c2:57:a1:49:85:08:
ff:7c:77:fd:5d:55:91:0c:40:de:d1:d0:ff:c8:be:e9:0e:a2:
53:9c:5e:70:d9:4c:8b:14:7b:82:af:9e:ab:2d:07:75:12:cf:
85:d8:40:aa:e7:98:e0:4f:43:00:ef:84:46:cc:65:0f:30:41:
02:fa:0b:b3:2b:5f:1f:ff:52:51:2d:3b:92:ce:97:83:ea:e2:
87:72:5a:11:30:6f:14:88:f7:2a:72:f7:ef:a5:87:8d:a6:0c:
1a:ec:8a:7f:e4:e3:3a:f5:16:2f:54:36:f7:d9:5d:ee:57:36:
1a:25:42:8e:f0:46:0f:67:a8:18:fd:76:cc:51:85:3c:16:53:
1c:92:d8:3b:79:1a:ab:46:78:dc:28:24:17:fd:3a:1b:29:0c:
0f:54:0b:e0:2a:ce:71:64:c5:b2:39:a1:c4:55:7b:7c:c8:f0:
25:f7:06:35:93:0e:6b:26:81:97:ec:5a:6d:00:e1:a8:f4:40:
31:b6:bc:a3:60:62:35:06:5e:f9:a4:f7:d1:75:04:2a:48:06:
73:d3:f7:21:cd:fb:5c:cb:8a:c4:b8:f3:fc:c5:39:98:94:e9:
23:76:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:16:21 2025 by rpki-client