This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
File: t4UKnl5747TStkImX4JbhQwHI2Y.mft (raw, json)
Hash identifier: 7cnx+kg5/belmHYXTaPrmcnotpxzoiYUd2Oixb6d4U0=
Subject key identifier: EA:DB:16:C0:25:84:32:63:68:76:84:7D:8D:D7:CA:3B:2A:FE:5E:2B
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Certificate issuer: /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial: 019716578CCF9AD4975096D46E697EB1B6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
Manifest number: 03F6
Signing time: Wed 28 May 2025 10:02:05 +0000
Manifest this update: Wed 28 May 2025 10:02:05 +0000
Manifest next update: Thu 29 May 2025 10:02:05 +0000
Files and hashes: 1: kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa (hash: LC5M9URWylDvxfMKsYWhEBj1id9NYxvTcyivO+BgMe0=)
2: t4UKnl5747TStkImX4JbhQwHI2Y.crl (hash: v/EPqAiR/zQBe07FNj1f+HXsWM0mzpbnUBFtHg0PtUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:57:8c:cf:9a:d4:97:50:96:d4:6e:69:7e:b1:b6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Validity
Not Before: May 28 10:02:05 2025 GMT
Not After : May 29 10:02:05 2025 GMT
Subject: CN=eadb16c0258432636876847d8dd7ca3b2afe5e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:86:3e:a1:66:c8:c9:b7:56:be:26:1a:01:
07:82:1d:b8:1f:73:f0:05:5d:3a:b1:cf:47:b0:c1:
fe:22:06:27:b5:a1:f9:c8:51:80:52:fb:e2:be:68:
7d:97:40:15:11:10:d6:5f:33:a1:af:3b:96:8f:38:
e7:52:ee:ad:13:bd:eb:dc:91:83:56:d4:4e:bb:71:
f5:4e:89:34:d9:c3:27:4f:24:1b:e1:02:01:e4:16:
a1:66:26:9f:13:02:be:5f:72:e0:a2:d7:a5:4e:0a:
c0:06:e6:a3:e8:ae:17:a1:e8:cb:b1:44:ec:92:f6:
0d:4e:26:41:47:5c:f9:86:25:da:87:40:e2:33:31:
72:5f:2e:a1:86:af:ca:e7:9e:30:06:1b:d1:ca:1e:
ab:87:1e:63:b9:02:90:ba:56:41:18:27:5f:90:03:
06:0a:ff:fe:b6:6f:8c:15:32:bd:5f:03:eb:e7:2a:
4b:fd:fe:e8:5e:5e:ce:1f:0f:4c:5b:a4:c2:b2:77:
ee:27:8c:29:0b:ed:9c:ad:ef:c6:7f:df:16:46:ab:
4d:36:53:06:84:5c:bc:34:2d:98:88:b3:77:1d:98:
b3:df:c9:6f:53:f3:c5:88:52:8e:af:e2:f5:61:26:
a5:54:d8:8f:56:10:4c:90:f8:34:d5:64:3a:f2:57:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:16:C0:25:84:32:63:68:76:84:7D:8D:D7:CA:3B:2A:FE:5E:2B
X509v3 Authority Key Identifier:
keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:f5:ae:65:9a:1b:97:7e:29:d3:69:c0:4b:48:62:5f:0b:de:
38:f6:23:23:93:aa:4d:8a:1a:7b:68:c2:6e:8e:83:a3:74:6b:
15:b7:b8:a2:1a:35:a4:a2:3a:00:16:68:d5:4b:91:b9:20:15:
3e:23:e3:06:38:74:87:87:2e:bc:4f:ff:51:03:37:16:1c:16:
63:e2:fc:6e:ca:1e:68:39:d1:7a:34:d5:7c:ef:4a:e8:9f:6b:
12:c6:ca:1d:1e:7c:7c:69:d9:ca:9b:b1:14:2b:08:2d:ff:8b:
71:d1:34:d4:b5:cc:45:10:88:fe:3b:3f:6a:67:be:67:ea:3b:
cf:5f:2f:f2:76:78:53:d8:68:92:72:38:bc:60:7a:db:37:ae:
5b:3f:b3:55:5f:44:88:72:6b:e8:fc:35:41:c2:66:8f:35:9c:
38:db:64:37:6a:2b:dd:60:ac:e7:63:a1:bf:4a:8b:0c:70:63:
32:66:47:7b:91:d4:c7:69:33:1c:7a:6e:b8:3e:2e:05:ac:0d:
b8:af:9a:db:63:60:de:fd:97:4d:98:04:59:14:68:c4:ea:30:
11:82:24:b0:7d:39:cd:22:97:df:b8:be:8f:11:0e:f3:58:f5:
c5:5e:80:61:8d:73:d8:bd:ef:ef:44:ee:81:f1:19:47:23:b4:
3c:49:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:29:22 2025 by rpki-client