This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: unYMb8DTRP++EbafEQZmlz+OPtKYcHrXK1Ki42x0wEs=
Subject key identifier: CC:E2:00:D3:A8:3C:B5:BE:89:43:F0:AF:EF:82:FD:53:14:E9:47:E5
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 019B123852C82962484A7D043B15A5DA70D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0BA5
Signing time: Fri 12 Dec 2025 11:00:39 +0000
Manifest this update: Fri 12 Dec 2025 11:00:39 +0000
Manifest next update: Sat 13 Dec 2025 11:00:39 +0000
Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: BLs5x6gLle2hjTuJ0tS6brVEa6aYh/zsTeNdYpaLl7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:38:52:c8:29:62:48:4a:7d:04:3b:15:a5:da:70:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Dec 12 11:00:39 2025 GMT
Not After : Dec 13 11:00:39 2025 GMT
Subject: CN=cce200d3a83cb5be8943f0afef82fd5314e947e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:2b:14:e2:b6:6b:fb:41:2c:5c:36:7f:db:
30:f2:bd:2c:4f:68:1e:f2:6b:bd:ec:10:f7:2a:89:
f3:35:4a:d4:e9:ff:9e:e0:e4:60:ae:7d:53:45:67:
3a:7f:a2:44:10:6b:7f:a1:31:91:14:ca:4e:49:d8:
ee:13:2e:e9:68:82:05:75:75:b8:f5:5f:10:99:fd:
cd:38:38:8a:fc:be:72:f0:d9:26:41:8f:06:98:d2:
3a:1b:b3:25:d7:27:fe:11:fd:7b:05:ba:b6:19:4c:
b3:9a:8d:f7:27:1f:56:b7:31:24:23:b7:35:74:18:
08:98:f7:cd:ad:b7:41:9b:dc:3d:2c:f1:e2:e9:d7:
9e:c7:1c:3f:90:f3:47:a0:1c:8c:c6:b6:60:02:10:
66:41:4d:a9:8d:ba:32:db:11:c4:cc:15:72:28:51:
ae:85:28:62:d2:7e:2d:f8:11:25:83:44:eb:7d:69:
43:8e:73:c7:47:8b:6c:6e:22:d5:21:93:f3:d9:df:
fa:e3:29:82:5f:f3:15:61:08:bc:71:42:36:85:44:
ec:33:4f:4b:1c:96:03:fe:39:ea:64:a0:de:29:41:
08:68:b6:36:8b:05:d0:11:92:56:73:cd:64:32:16:
bf:69:5c:4a:a9:e5:59:bf:d9:69:88:d5:fa:3b:6a:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:00:D3:A8:3C:B5:BE:89:43:F0:AF:EF:82:FD:53:14:E9:47:E5
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:68:9f:56:3b:6c:09:a6:6f:a5:37:48:85:3f:10:77:14:1b:
55:7c:ac:7f:ed:c7:91:a4:24:56:ae:63:34:47:09:a6:40:66:
33:c1:2f:fc:65:2a:6a:1d:5a:f3:92:3e:94:9b:53:b0:58:00:
6f:5b:30:3a:e3:08:5a:77:5d:3b:0d:88:b0:a6:e2:c3:9e:94:
50:b6:fd:fd:76:4f:72:64:9e:70:6a:4d:e7:24:f0:3a:cc:b2:
dd:6b:2e:62:b1:f8:71:12:91:6c:e7:48:41:40:19:22:a1:e1:
c6:55:a2:78:64:7c:fc:b6:22:1b:ce:a6:2c:0e:92:e6:0a:dd:
ee:2d:44:b8:7d:05:a7:2f:80:2e:51:d3:f5:6b:e2:10:a3:dd:
c5:cf:24:50:4e:bd:8a:54:81:0b:93:e6:17:1c:8c:16:d0:bd:
c6:08:e8:59:3f:9c:4e:66:c4:3c:43:ba:c1:5b:6e:68:31:62:
43:e7:46:d7:1a:39:39:b2:b0:fa:f9:2f:c7:76:c1:65:63:5a:
67:33:3f:34:75:23:8f:36:f0:d1:1e:09:34:fa:93:53:4b:7a:
24:03:d6:c0:ff:67:1c:55:46:32:a7:37:e0:0c:1a:4f:c3:0c:
41:f0:cc:70:c9:ce:54:6e:3e:cd:61:d3:6b:7c:25:08:28:eb:
2b:e8:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:18:39 2025 by rpki-client