This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: mrXNkYLXWPqTH5Kyc8FSTLA328sw+SPKma1T9hedEQI=
Subject key identifier: A8:B8:02:EF:2F:76:ED:98:80:8C:00:54:20:E7:33:09:A8:81:0D:01
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 019A7301194AA8E14E81A69AC8962ACAC7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0EF9
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: r7ge0dkLTAWL8Ix4q+iE6mabIXJheMaLt8RE6wvPu1w=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:19:4a:a8:e1:4e:81:a6:9a:c8:96:2a:ca:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=a8b802ef2f76ed98808c005420e73309a8810d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:7d:4c:29:3e:37:fc:98:fb:7d:1f:5a:f7:
2d:8a:3a:4e:c2:fe:eb:14:0a:cd:33:95:28:27:3d:
60:36:98:8b:b2:f9:c1:77:5b:f1:a7:28:bd:d7:0f:
ff:fd:f6:11:f4:6f:d8:42:4a:2f:95:a4:12:2f:4a:
60:30:4c:4c:ca:b4:90:e9:99:92:70:eb:56:0b:1c:
b1:93:a5:ec:05:49:83:25:cf:fc:ef:2e:78:7e:8f:
46:49:ba:10:fd:9b:ff:66:4a:8b:65:89:16:7d:49:
96:78:cf:c5:c5:12:4e:9b:e5:4e:10:d5:28:ba:ce:
7f:f3:b1:b5:55:d5:67:c3:91:54:61:d9:e5:2e:9a:
61:a6:ee:74:f2:c5:1b:ed:d2:f9:2e:b7:bb:9c:19:
12:cc:02:64:6a:4b:bb:07:09:9a:53:00:76:44:32:
5e:61:0c:eb:4d:ab:2b:f5:ef:f0:36:25:4f:43:1e:
a6:46:e1:88:02:02:28:79:e1:40:2c:48:9a:3e:f3:
79:15:1a:f7:fa:14:4f:df:d3:18:32:b1:4b:3f:e9:
42:2e:51:5a:d2:64:a4:f9:72:27:77:ef:00:08:b5:
39:76:be:1c:6a:14:52:3f:d7:8d:ce:da:0f:f6:3a:
a7:0d:58:a2:0a:92:8f:c3:16:e4:ac:33:b4:da:86:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:02:EF:2F:76:ED:98:80:8C:00:54:20:E7:33:09:A8:81:0D:01
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:03:bd:fa:50:84:15:51:b4:e6:ca:2b:e9:ac:11:8e:8f:3c:
74:62:0f:9e:92:09:c9:a8:da:06:9a:7d:9f:42:c3:7c:86:a5:
cc:da:f5:12:65:a4:6d:34:27:d4:3d:13:66:43:37:87:6b:2a:
24:90:9d:b2:94:ac:e1:5d:e6:0c:da:9e:36:8f:ae:29:43:07:
6f:b4:42:64:64:95:d9:b7:8a:a3:0a:24:46:6a:0c:1d:a5:f7:
16:9e:47:f7:a4:0c:13:71:da:64:3b:96:46:7c:f0:6f:5a:f3:
1c:54:7d:0e:e7:bc:da:bf:78:21:d3:62:b2:05:e4:ca:cf:ca:
f2:a8:c9:b6:ae:bc:c6:99:cd:51:a5:10:3a:f2:6c:80:7f:11:
7e:de:60:86:c4:f6:25:90:10:9d:2f:c0:fc:0b:48:c9:f2:1a:
9d:0e:fd:d5:6b:14:82:92:11:a9:18:24:32:b7:88:ea:38:48:
f3:55:b6:f7:87:1f:b5:ca:13:6e:0c:12:00:d1:92:85:cb:71:
d9:43:51:e6:94:1e:72:95:71:82:64:37:3b:35:cc:f0:8b:be:
22:cf:14:52:70:3b:34:d7:7a:5a:a2:d5:6f:df:eb:b4:1c:91:
0f:ea:b7:d1:bc:33:ba:59:57:94:c5:35:aa:d1:1a:2f:91:0d:
32:a9:f9:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzARlKqOFOgaaayJYqyse4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzA2NTA5ODU3NDYyOWQ0YTdlMmQyYjIwNTVhYTdiZjIz
MDJmZWUwHhcNMjUxMTExMTMwMDQzWhcNMjUxMTEyMTMwMDQzWjAzMTEwLwYDVQQD
EyhhOGI4MDJlZjJmNzZlZDk4ODA4YzAwNTQyMGU3MzMwOWE4ODEwZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytt9TCk+N/yY+30fWvctijpOwv7r
FArNM5UoJz1gNpiLsvnBd1vxpyi91w///fYR9G/YQkovlaQSL0pgMExMyrSQ6ZmS
cOtWCxyxk6XsBUmDJc/87y54fo9GSboQ/Zv/ZkqLZYkWfUmWeM/FxRJOm+VOENUo
us5/87G1VdVnw5FUYdnlLpphpu508sUb7dL5Lre7nBkSzAJkaku7BwmaUwB2RDJe
YQzrTasr9e/wNiVPQx6mRuGIAgIoeeFALEiaPvN5FRr3+hRP39MYMrFLP+lCLlFa
0mSk+XInd+8ACLU5dr4cahRSP9eNztoP9jqnDViiCpKPwxbkrDO02oaUUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi4Au8vdu2YgIwAVCDnMwmogQ0BMB8GA1UdIwQY
MBaAFF/AZQmFdGKdSn4tKyBVqnvyMC/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhCbENZVjBZcDFLZmkwcklGV3FlX0l3TC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZmZhMDMtMWNkNi00MDM0LWE3YmQt
ODU3NTk5NjgzYzNlLzEvWDhCbENZVjBZcDFLZmkwcklGV3FlX0l3TC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZmZhMDMtMWNkNi00MDM0LWE3YmQtODU3NTk5NjgzYzNl
LzEvWDhCbENZVjBZcDFLZmkwcklGV3FlX0l3TC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQO9+lCE
FVG05sor6awRjo88dGIPnpIJyajaBpp9n0LDfIalzNr1EmWkbTQn1D0TZkM3h2sq
JJCdspSs4V3mDNqeNo+uKUMHb7RCZGSV2beKowokRmoMHaX3Fp5H96QME3HaZDuW
Rnzwb1rzHFR9Due82r94IdNisgXkys/K8qjJtq68xpnNUaUQOvJsgH8Rft5ghsT2
JZAQnS/A/AtIyfIanQ791WsUgpIRqRgkMreI6jhI81W294cftcoTbgwSANGShctx
2UNR5pQecpVxgmQ3OzXM8Iu+Is8UUnA7NNd6WqLVb9/rtByRD+q30bwzullXlMU1
qtEaL5ENMqn5+w==
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:41:54 2025 by rpki-client