This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: WoDJCWu6Y6q8/ecFdhBlIANSALFQ8JPkOnHOd+jdMjs=
Subject key identifier: A7:8E:D9:A6:DC:C4:D6:4E:3C:D0:66:64:FA:66:CD:75:69:8E:E2:57
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 019A7AF1C9F6B7743EC3AA8CAB28D766B0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 1724
Signing time: Thu 13 Nov 2025 02:00:57 +0000
Manifest this update: Thu 13 Nov 2025 02:00:57 +0000
Manifest next update: Fri 14 Nov 2025 02:00:57 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: rD7LNIL2gOxeupAI2AznWy3b70B4TWmICtk+GoNzAZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7a:f1:c9:f6:b7:74:3e:c3:aa:8c:ab:28:d7:66:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Nov 13 02:00:57 2025 GMT
Not After : Nov 14 02:00:57 2025 GMT
Subject: CN=a78ed9a6dcc4d64e3cd06664fa66cd75698ee257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:6b:10:e1:63:a9:ce:02:8e:bb:31:95:bd:
9f:20:58:b2:d5:e2:2c:95:79:d5:36:bd:99:0a:2c:
84:39:9f:12:84:23:36:2e:c0:ac:ec:52:be:a9:8d:
4b:0c:e8:ce:bf:aa:94:eb:72:f9:09:9b:da:26:b3:
d7:d6:21:91:ad:1e:2e:95:ff:b1:06:52:84:1f:a0:
f5:60:a8:4e:96:c0:15:48:ea:e7:09:c2:81:45:15:
46:3c:2c:c8:d1:ca:23:88:50:cd:c0:25:56:5d:50:
7c:34:dc:36:9e:f5:af:28:c9:28:ac:cc:55:59:fb:
eb:3b:23:84:00:0d:c8:ef:ce:bb:82:3d:8f:bf:62:
25:76:84:dd:77:df:ab:8e:a0:51:c9:97:43:d2:db:
6a:5b:9f:dc:4f:6a:5d:be:f0:c4:9d:03:f9:8b:ca:
b9:10:91:99:82:1e:96:51:91:82:e5:7d:bf:cf:ce:
8a:7c:ee:bc:57:3a:83:95:de:08:26:62:b0:37:e3:
71:f6:5f:2c:ff:8a:71:b6:03:42:12:f3:f3:73:7b:
1f:16:5c:1b:28:96:bc:1b:96:04:77:ee:24:8a:5b:
e7:93:15:05:2d:65:d0:12:d9:b2:90:b2:af:ee:9e:
e8:15:04:5c:c5:43:e4:df:87:fb:ca:57:c4:6d:8b:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:D9:A6:DC:C4:D6:4E:3C:D0:66:64:FA:66:CD:75:69:8E:E2:57
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e3:82:cd:c6:35:71:8e:39:38:d9:55:ee:3c:6c:9e:dd:c4:
11:56:b6:4c:31:9b:23:7c:ab:f9:0a:a7:2c:76:38:f3:36:c9:
28:d4:fb:a0:a5:fe:e3:53:ff:fb:8f:9c:62:3b:40:75:c8:2e:
5b:c4:6e:d2:c9:79:bb:ca:72:98:11:1e:b0:af:f7:8a:2a:25:
21:b7:9d:49:23:62:50:09:d7:8e:d7:61:21:64:c4:9c:fc:69:
d3:3f:22:37:be:1e:50:f6:f1:b8:68:12:6b:81:f9:25:4c:97:
92:03:c6:60:d3:71:11:77:bc:a6:43:95:e0:c3:35:41:2a:34:
f3:76:7c:35:d7:9e:00:2f:6b:ee:b1:e4:02:19:91:02:80:90:
fc:a2:96:80:7b:21:a1:06:32:d1:91:a2:a8:cf:ff:d7:15:e4:
a6:cd:37:43:ca:8b:25:34:97:fe:66:1e:3a:9e:98:21:fe:16:
4d:a0:13:f3:e4:b5:ff:71:be:1c:d8:11:7d:40:17:c8:98:14:
ce:21:1c:71:5f:81:1f:d6:4f:56:47:b4:7e:d3:69:44:c9:2b:
f9:db:67:18:4f:d2:02:23:53:11:f0:4f:58:8c:90:f1:37:87:
03:91:1d:26:c3:c0:03:be:b6:55:ea:ee:43:3b:4f:4f:05:ae:
48:55:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:55:19 2025 by rpki-client