This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: Y1Er2f2n4LOJrqvNMIxrbUIuWNogPwI4PigF9kkwf6w=
Subject key identifier: A6:54:79:97:56:D8:04:D2:DD:26:FB:DB:16:15:43:B1:80:0D:3D:2D
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 019A902FF8A6368316877FBC26D9D9F6340F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 14E5
Signing time: Mon 17 Nov 2025 05:00:54 +0000
Manifest this update: Mon 17 Nov 2025 05:00:54 +0000
Manifest next update: Tue 18 Nov 2025 05:00:54 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: JUos8ZxEWqpRnEgR1gsYllcfiU8LwQ2Qcu26B4y9yVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:90:2f:f8:a6:36:83:16:87:7f:bc:26:d9:d9:f6:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Nov 17 05:00:54 2025 GMT
Not After : Nov 18 05:00:54 2025 GMT
Subject: CN=a654799756d804d2dd26fbdb161543b1800d3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:c6:f3:d4:82:f7:25:fb:44:f1:98:f8:27:
db:3d:3c:29:bd:81:67:0c:49:b9:e0:08:bc:e5:47:
24:58:f6:bf:43:10:b8:e9:ab:8b:a8:0b:8d:1f:04:
e1:e3:8d:fb:73:00:a7:30:ac:3c:64:a5:2f:ed:72:
d6:81:18:7b:39:fa:a0:2c:e3:25:80:52:a3:92:ef:
c8:53:57:d6:82:b8:28:b0:3a:b3:34:ee:e4:eb:61:
b2:01:f0:e6:ab:fe:b5:8d:00:b3:92:17:0c:2c:49:
d6:1f:f0:21:16:91:22:03:3a:96:b3:91:e0:20:d4:
24:02:12:72:f2:49:af:46:cf:78:12:5a:c9:dd:05:
9d:d8:9e:66:3b:e2:50:a1:30:4a:f2:3f:8c:ae:b3:
00:1d:8b:bc:34:1b:21:11:f2:8d:63:93:d6:02:75:
30:5c:50:8e:44:ed:0d:72:48:27:25:6f:42:19:ea:
28:7c:b9:94:88:5a:b7:e2:d5:c7:31:99:7b:0c:cd:
7c:c5:e0:69:d2:80:b4:0b:8a:5c:a6:62:36:8e:32:
03:82:61:af:b3:32:86:a0:59:e1:39:b3:3d:3c:75:
c8:76:5a:d0:a7:13:f8:40:83:f1:fd:66:fb:14:6d:
82:e1:c7:4b:9a:43:81:3e:7c:5e:3b:af:f5:32:17:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:79:97:56:D8:04:D2:DD:26:FB:DB:16:15:43:B1:80:0D:3D:2D
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:e4:28:3b:e1:c5:a3:4f:db:9f:c2:8d:d7:90:6a:61:38:
9c:8c:ca:29:92:48:5f:66:09:ed:08:51:2c:cf:07:95:45:7e:
57:02:4d:3a:e5:fa:45:3e:02:8f:e5:7e:ea:d2:df:17:91:5d:
2b:68:e2:60:3c:c9:ef:e3:2f:f3:10:ca:41:3a:44:36:24:98:
e4:ec:5b:f9:58:c5:59:41:74:31:a6:47:ad:46:58:f3:df:21:
f3:e0:64:8b:50:f6:76:c4:f6:1a:20:b3:95:b2:ca:f6:3d:25:
b1:3d:3d:7e:59:91:b3:44:63:80:50:9d:3b:07:6f:d7:43:b7:
0a:1b:9e:ad:cf:dc:b3:62:b7:c0:fd:c2:ee:63:ce:9d:53:ed:
2b:9c:51:b9:08:4b:c7:17:a6:20:06:8c:64:0f:32:2b:21:fe:
fa:47:df:6c:65:ce:00:f3:b2:0a:1c:32:07:aa:84:c3:86:b9:
1c:d2:4c:05:22:ce:b1:4d:a4:d5:f1:b1:f6:e1:0c:83:6a:c6:
b8:b4:ba:e2:43:a3:43:f8:88:18:d6:67:90:7a:a6:40:74:7a:
6c:f2:09:d3:12:f7:bf:ab:4b:6c:84:10:1b:72:d6:c7:d5:26:
ec:e4:5d:aa:88:bf:8c:bb:c1:8c:62:d1:e1:c1:e6:ef:36:0c:
20:cb:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:48:28 2025 by rpki-client