This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: xx94Twzh7kWQjk5pd/6dLKteThkYQSE7084rptju1gk=
Subject key identifier: FF:10:FB:75:62:B2:15:8A:3E:2F:61:5E:82:27:29:40:A0:5C:01:47
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 019B1F872E57CD38C9ECE80156757E0292BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0ED9
Signing time: Mon 15 Dec 2025 01:01:51 +0000
Manifest this update: Mon 15 Dec 2025 01:01:51 +0000
Manifest next update: Tue 16 Dec 2025 01:01:51 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: 5iOKu7dSTKGymbCQq7CVvJTCB5P2mwbSSY3dGK+Rj6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1f:87:2e:57:cd:38:c9:ec:e8:01:56:75:7e:02:92:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Dec 15 01:01:51 2025 GMT
Not After : Dec 16 01:01:51 2025 GMT
Subject: CN=ff10fb7562b2158a3e2f615e82272940a05c0147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:be:98:1d:b2:43:ad:55:e4:07:9d:8f:21:
e2:87:8b:51:a2:c2:a3:e0:02:c7:55:4e:be:da:77:
2b:e4:f8:e1:0f:5d:68:8a:e1:28:87:1f:a9:d2:28:
50:23:22:65:c7:2e:86:0a:c6:5a:40:d7:dd:3c:ce:
1a:b2:2c:da:f9:9d:13:6a:d6:36:06:4d:27:6d:14:
05:69:5b:ad:15:79:93:8d:1b:f6:90:b2:eb:20:5a:
b7:6f:63:36:e7:b4:23:9a:88:59:7a:28:8b:85:74:
30:21:63:3f:bf:b3:3f:33:b4:30:d1:37:65:f6:a2:
ac:1e:34:ce:6c:99:1e:76:6a:01:8b:d1:c2:5a:f5:
98:2b:3e:f1:62:dd:b8:c0:95:59:7c:8f:5f:c9:6f:
2a:08:04:56:52:43:61:71:b1:30:db:dc:f4:ec:eb:
b0:d1:51:f1:0b:05:83:22:34:8e:d7:f0:e7:f9:0f:
e3:83:ca:54:4c:0a:1e:34:ca:5f:9b:76:de:ee:36:
a9:8a:5e:aa:6e:b1:4a:1b:05:af:a7:5b:22:88:9e:
35:1d:e3:02:98:29:84:b5:9d:96:6d:0b:b4:11:66:
07:8c:7a:8a:7e:dc:d2:cc:46:45:73:2c:ea:9e:41:
02:f0:06:70:db:bf:a5:52:f8:b1:93:33:c3:c9:f2:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:FB:75:62:B2:15:8A:3E:2F:61:5E:82:27:29:40:A0:5C:01:47
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:0e:10:ce:36:79:25:20:fc:e7:51:2a:0c:09:f2:ff:32:
53:86:76:81:d6:f2:60:25:60:d6:c8:1f:b4:c7:54:a1:9a:2f:
b7:fc:c0:32:3f:1a:f1:f7:49:70:a8:41:3f:a2:86:ff:a7:56:
9e:a3:69:e1:8a:4a:c0:a0:06:90:d9:dd:12:ff:db:19:31:cd:
06:26:47:c0:61:16:37:ae:e9:2d:45:16:be:3a:4b:05:a2:47:
85:14:77:37:3b:a0:79:ed:30:a3:3a:8e:29:96:8d:d6:fa:5e:
01:bd:1b:04:4a:5b:90:f5:5d:a8:3e:cd:41:72:2e:e4:29:48:
44:92:55:e3:2b:46:f7:74:b6:d8:7f:c1:4d:72:79:b2:81:3d:
2c:df:1d:f6:2b:63:6d:74:34:b5:c0:4f:3b:22:e6:75:4b:34:
0e:0b:c1:1b:90:2a:29:79:19:e4:fa:26:77:a7:96:0b:86:b9:
93:25:04:69:1b:0e:1d:2b:a6:ea:92:fd:53:83:ff:ba:be:6d:
27:a4:c9:d8:84:1a:8f:59:6b:6e:a9:28:53:2c:62:b5:f4:c2:
3f:23:13:d6:8f:55:da:50:da:43:e0:07:c7:cb:4a:ea:e0:7c:
20:01:31:92:e0:67:d6:0a:f6:df:75:a1:47:b9:7c:92:66:31:
9b:e4:33:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsfhy5XzTjJ7OgBVnV+ApK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NzgyZTQ1ZTdlOGU5MjljNWMzZjk2NDQxYTdlNjRjNTQx
ZjgyZTYwHhcNMjUxMjE1MDEwMTUxWhcNMjUxMjE2MDEwMTUxWjAzMTEwLwYDVQQD
EyhmZjEwZmI3NTYyYjIxNThhM2UyZjYxNWU4MjI3Mjk0MGEwNWMwMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfa+mB2yQ61V5AedjyHih4tRosKj
4ALHVU6+2ncr5PjhD11oiuEohx+p0ihQIyJlxy6GCsZaQNfdPM4asiza+Z0TatY2
Bk0nbRQFaVutFXmTjRv2kLLrIFq3b2M257QjmohZeiiLhXQwIWM/v7M/M7Qw0Tdl
9qKsHjTObJkedmoBi9HCWvWYKz7xYt24wJVZfI9fyW8qCARWUkNhcbEw29z07Ouw
0VHxCwWDIjSO1/Dn+Q/jg8pUTAoeNMpfm3be7japil6qbrFKGwWvp1siiJ41HeMC
mCmEtZ2WbQu0EWYHjHqKftzSzEZFcyzqnkEC8AZw27+lUvixkzPDyfKN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8Q+3VishWKPi9hXoInKUCgXAFHMB8GA1UdIwQY
MBaAFBZ4LkXn6OkpxcP5ZEGn5kxUH4LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lZjAxYTUtNTg2Ny00MTlmLTgzYzgt
N2Q1N2Y1ODM2MGEwLzEvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lZjAxYTUtNTg2Ny00MTlmLTgzYzgtN2Q1N2Y1ODM2MGEw
LzEvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIx4OEM42
eSUg/OdRKgwJ8v8yU4Z2gdbyYCVg1sgftMdUoZovt/zAMj8a8fdJcKhBP6KG/6dW
nqNp4YpKwKAGkNndEv/bGTHNBiZHwGEWN67pLUUWvjpLBaJHhRR3Nzugee0wozqO
KZaN1vpeAb0bBEpbkPVdqD7NQXIu5ClIRJJV4ytG93S22H/BTXJ5soE9LN8d9itj
bXQ0tcBPOyLmdUs0DgvBG5AqKXkZ5Pomd6eWC4a5kyUEaRsOHSum6pL9U4P/ur5t
J6TJ2IQaj1lrbqkoUyxitfTCPyMT1o9V2lDaQ+AHx8tK6uB8IAExkuBn1gr233Wh
R7l8kmYxm+QzTw==
-----END CERTIFICATE-----
Generated at Thu Jan 1 02:50:32 2026 by rpki-client