This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
File: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft (raw, json)
Hash identifier: aJH+TtBGU0XDBPYD9ysD4CiMCQAEI3xPklobBoOWIJU=
Subject key identifier: 15:4B:58:4D:4B:62:40:7C:CB:5A:42:1E:0A:DA:13:C4:93:E9:5D:AD
Authority key identifier: E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
Certificate issuer: /CN=e5c04c019bc693650428558551facd222080126d
Certificate serial: 0198E8659E42511DF5F765689D6FD7E724FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
Manifest number: 02FD
Signing time: Tue 26 Aug 2025 22:00:30 +0000
Manifest this update: Tue 26 Aug 2025 22:00:30 +0000
Manifest next update: Wed 27 Aug 2025 22:00:30 +0000
Files and hashes: 1: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl (hash: iEAeY4TV+bsi0DrqtTmuBmdVplGl41GL+xf3/VdZTNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e8:65:9e:42:51:1d:f5:f7:65:68:9d:6f:d7:e7:24:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c04c019bc693650428558551facd222080126d
Validity
Not Before: Aug 26 22:00:30 2025 GMT
Not After : Aug 27 22:00:30 2025 GMT
Subject: CN=154b584d4b62407ccb5a421e0ada13c493e95dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:d7:a8:4f:bd:5a:a2:0b:00:fe:3b:05:d8:
c5:72:fe:ca:fd:3a:75:e0:8f:ee:63:cd:14:f7:08:
0f:a2:0a:bd:48:ee:f9:34:4e:85:45:ff:5c:3d:bc:
b3:05:a2:af:e9:f4:3a:9e:e5:94:e3:c7:e6:44:9e:
6a:6c:0c:d8:84:04:bc:e5:c7:50:b4:15:bd:85:6c:
8f:6b:7b:66:6a:b7:4d:4d:88:80:22:a2:4c:12:19:
1e:20:34:38:71:4e:c5:e0:20:e7:04:a4:aa:a5:0e:
2d:a1:12:f5:d4:b2:64:a6:1e:25:d7:3b:3f:0e:f4:
1f:e0:ed:62:57:38:ee:93:62:d5:5f:e6:bf:ea:86:
10:72:49:69:5f:4b:bb:a9:c1:1c:2c:cd:53:ed:61:
8c:21:eb:f6:23:70:07:32:16:78:08:f5:03:7f:1f:
e5:07:db:da:72:8e:5e:9e:01:f1:0f:34:a7:b3:c0:
7b:1d:f0:97:f1:f0:83:5f:67:21:58:d7:43:d0:db:
e3:7b:cf:d6:7b:40:ba:8f:e3:3e:2c:66:b4:f2:71:
20:55:24:7f:d9:1a:cc:c8:ab:04:7f:fe:74:4c:cd:
07:70:93:63:28:08:60:55:89:a9:98:f5:37:0a:21:
79:fe:24:d1:96:63:7b:f3:dc:c3:31:0b:db:17:a9:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:58:4D:4B:62:40:7C:CB:5A:42:1E:0A:DA:13:C4:93:E9:5D:AD
X509v3 Authority Key Identifier:
keyid:E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cd:d7:89:a1:4b:b1:bb:18:df:e9:12:c9:ae:45:e1:c2:fe:
95:89:82:df:96:62:25:cf:be:77:59:bd:cb:7b:b1:82:a8:a4:
75:54:68:dc:95:1f:eb:e2:77:8b:b6:5e:3b:e5:fd:0d:60:a9:
81:7f:5f:ed:14:6d:2f:7d:ea:de:e1:e7:84:30:b0:ab:8a:fb:
e8:4a:58:0b:6a:4f:19:9d:31:68:ec:5e:04:a6:8c:c2:38:54:
7c:ce:46:28:38:ee:fd:a7:ee:11:1a:58:79:9c:db:ce:6f:99:
b9:76:56:93:05:9c:c9:ea:35:ac:77:20:99:87:53:9b:19:c7:
0f:ac:13:e2:47:99:20:88:ee:5e:f3:49:32:b2:4c:d6:37:a1:
43:63:3a:5f:16:c5:c0:4f:ec:cc:f2:59:83:aa:d3:fa:43:81:
63:41:18:9c:4e:08:99:c2:d9:46:5e:d3:6f:d2:83:6d:b5:8b:
8b:c0:cd:d9:45:a9:86:81:b6:24:e2:a4:f9:ba:78:cc:e4:97:
66:57:71:67:7f:13:b0:7d:6c:97:4b:b4:05:c3:0e:3f:58:68:
a1:11:2c:ef:3b:23:e9:7a:74:e6:4c:d9:5c:cd:2c:e2:ed:26:
31:90:57:2c:00:97:2b:7e:99:31:28:45:0a:17:bd:a2:0d:9d:
1f:a0:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:23:30 2025 by rpki-client