This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
File: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft (raw, json)
Hash identifier: 9E9LAYHPS5tJ2ugoHQqYtt6/wYsmvH8gjGRgY+ZMLyk=
Subject key identifier: 56:0D:46:32:55:81:99:C1:97:8C:B6:CB:D7:D5:CE:29:47:29:E3:35
Authority key identifier: 38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
Certificate issuer: /CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Certificate serial: 019781D794D8BFD5490D6DB511E7A141A270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
Manifest number: AF
Signing time: Wed 18 Jun 2025 07:01:18 +0000
Manifest this update: Wed 18 Jun 2025 07:01:18 +0000
Manifest next update: Thu 19 Jun 2025 07:01:18 +0000
Files and hashes: 1: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl (hash: r7wutunbL9FyM0dP9a9O4nXSw3ox2pShVNfsZIPIMnQ=)
2: Sd24d28V76HUXI5tJozId-LBxGU.roa (hash: sz6vCalE+qZ8AG41dIYIziT32WF467U+LgWfS31nXaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:94:d8:bf:d5:49:0d:6d:b5:11:e7:a1:41:a2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Validity
Not Before: Jun 18 07:01:18 2025 GMT
Not After : Jun 19 07:01:18 2025 GMT
Subject: CN=560d4632558199c1978cb6cbd7d5ce294729e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:a2:62:19:18:6a:d0:02:c5:3b:e3:a7:6a:
ee:57:a4:11:d5:af:b9:b3:ed:87:60:0d:00:4b:d7:
e6:24:db:46:33:f8:67:de:e5:01:41:0d:56:66:19:
44:df:9d:a3:67:1b:14:cd:6c:61:a9:bc:6c:ad:c9:
94:94:39:7a:ff:0a:e0:df:e1:b0:9e:44:46:40:f7:
07:81:ef:33:31:69:87:90:87:4a:88:55:60:89:bd:
9c:2b:16:18:fa:df:b1:20:94:bb:8f:e7:b8:fb:89:
4b:53:e6:2c:92:c1:a9:dd:3a:2f:bb:f8:f7:1b:18:
c8:9a:b7:4f:b6:06:df:ce:a9:92:c7:a0:24:98:bc:
21:8f:be:75:99:ae:c6:da:49:bd:08:81:d8:2c:e6:
b7:74:b1:67:48:64:9e:5f:d3:3a:dd:f1:a7:83:07:
13:cd:be:9b:eb:fc:6a:b5:19:fe:c6:8b:36:0d:8e:
82:27:a8:8d:28:eb:9e:e2:e9:b1:6d:64:9b:9f:87:
c3:c1:91:0c:52:c3:3b:ef:c8:39:a2:af:ff:5f:84:
1a:35:a3:dc:16:be:00:49:54:01:c8:ea:08:cb:87:
c1:10:72:48:e0:ce:d1:73:fb:1a:27:50:4c:4c:a1:
ac:c0:e9:6b:4e:31:83:ff:29:18:02:54:eb:e7:cb:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:46:32:55:81:99:C1:97:8C:B6:CB:D7:D5:CE:29:47:29:E3:35
X509v3 Authority Key Identifier:
keyid:38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d8:8c:e0:be:35:79:e6:c5:06:34:0a:f6:5f:64:ec:9f:92:
22:c9:82:71:9c:ab:05:cc:12:3b:71:80:73:71:7a:ec:1a:12:
41:91:66:80:d4:48:b6:34:06:7a:ec:0d:53:47:a6:0b:90:20:
26:03:db:8a:f9:dd:75:08:b4:8b:f7:59:31:cf:06:ed:3b:87:
10:93:ee:0e:6e:a1:5b:92:e9:6c:15:ad:67:06:d4:f2:85:9c:
03:2e:7c:8a:8d:65:5d:10:ee:27:a8:ae:90:70:5a:c5:39:b4:
b9:f1:47:3f:ad:54:72:12:cc:8a:ff:d6:6a:e1:eb:f0:a4:98:
43:08:f5:e2:0f:53:9e:f1:b5:9c:94:5b:ab:bb:c6:b7:48:cb:
bd:97:fe:de:5a:20:f5:5f:e1:c4:fc:40:5a:8d:1d:74:36:1a:
33:39:df:b8:1e:f4:50:cd:d4:57:48:d5:25:d3:31:d2:16:76:
ac:9f:5d:a4:47:78:b0:a9:72:fa:6c:db:e5:37:89:e9:ce:89:
15:18:5e:f0:67:ce:b1:e6:ed:06:70:2d:8c:c6:94:2b:38:2c:
8e:a3:9a:92:6b:d5:39:74:78:6f:d3:97:26:fe:52:84:07:e8:
c8:1f:c1:28:a8:a4:a9:49:e5:f7:d4:19:d3:dd:55:86:ef:b1:
e9:27:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:31:34 2025 by rpki-client