This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
File: HAEKqEOKglpVQgE_G5DTSO2KAMY.mft (raw, json)
Hash identifier: wjz90eqIk8HKppVgnvkOduUeK8P9eRmXn7Hr3BsGMCQ=
Subject key identifier: 1A:DE:78:D5:5D:0A:3D:8F:A7:BA:C5:B9:7F:2A:6C:1C:F2:5F:12:48
Authority key identifier: 1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
Certificate issuer: /CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Certificate serial: 01936B22BC1A6328D6EC78C07B5492D6FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
Manifest number: 0A5C
Signing time: Wed 27 Nov 2024 01:00:58 +0000
Manifest this update: Wed 27 Nov 2024 01:00:58 +0000
Manifest next update: Thu 28 Nov 2024 01:00:58 +0000
Files and hashes: 1: HAEKqEOKglpVQgE_G5DTSO2KAMY.crl (hash: o3BsQBnKVOjSPW29+qAnZ4/CnT+hGD8vFapbUAtLVfM=)
2: WqciO0wM3a-hRegaXIDxCwj6DTs.roa (hash: 2f8Ra2i6rR7L/ms00UoiBbWxLAAABSwSxae0lrnw7j0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:bc:1a:63:28:d6:ec:78:c0:7b:54:92:d6:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Validity
Not Before: Nov 27 01:00:58 2024 GMT
Not After : Nov 28 01:00:58 2024 GMT
Subject: CN=1ade78d55d0a3d8fa7bac5b97f2a6c1cf25f1248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:ac:24:72:04:65:24:e3:15:ab:5f:41:25:
45:5c:a5:1d:c8:2f:9d:e5:55:ee:9f:c8:80:b2:a0:
6c:c5:18:97:58:e0:be:fb:1a:1e:fd:7b:8a:2f:ce:
12:49:3a:4b:29:07:d6:20:67:9b:80:91:59:d5:7a:
3f:6d:f2:24:75:6f:a3:2b:c2:66:19:55:b9:cd:a8:
0f:bc:ef:c8:d9:a0:a5:91:38:99:d1:d4:f8:b7:de:
75:fe:55:3f:08:5d:d5:65:c6:ef:7a:35:8d:62:d7:
81:a4:b9:56:53:25:d9:6c:79:b6:26:bc:a6:d7:b2:
ad:47:1c:8a:8e:33:a4:0a:eb:8d:d5:af:67:c2:76:
55:4b:de:32:b3:b3:05:28:41:13:10:41:38:75:07:
9a:38:81:62:4c:19:2f:09:e1:c4:d5:f4:02:e4:13:
92:2c:65:8c:d7:f4:a0:b9:88:49:98:ba:6f:b0:53:
03:7e:21:30:57:45:8f:24:b3:67:72:49:33:f9:36:
37:92:a3:83:56:f6:c6:0e:41:df:99:d7:d9:74:45:
35:ed:9c:6b:85:67:ec:b1:ca:8d:92:eb:f1:74:d0:
7d:86:bc:03:42:59:5c:84:91:3f:b4:44:3e:39:30:
93:bf:e6:42:7b:6c:d5:75:20:76:d2:5d:95:4b:7c:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:78:D5:5D:0A:3D:8F:A7:BA:C5:B9:7F:2A:6C:1C:F2:5F:12:48
X509v3 Authority Key Identifier:
keyid:1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:40:54:22:86:8e:aa:5c:ef:52:d5:58:9a:d2:88:a0:9e:
86:3e:bd:14:bc:76:db:98:99:f8:38:43:11:d7:7f:da:7c:a1:
d5:06:28:05:2e:2e:80:76:cc:0d:8b:78:10:00:e8:7a:f4:a8:
d8:47:86:ea:1a:26:19:a4:54:6a:34:a5:76:57:5d:c4:4a:54:
2b:37:52:7f:2d:d2:0d:51:8b:72:8e:e7:01:bc:73:9e:f2:e0:
68:d8:85:75:ec:78:d8:8c:76:a5:1e:fa:70:c7:80:8d:1f:78:
36:d8:6b:6e:db:9c:0e:f0:c1:3e:ce:cd:af:34:5f:17:18:24:
65:10:53:16:6d:47:ea:d9:7b:df:10:a4:77:7a:83:b5:8e:c3:
d5:f0:bb:77:f9:0a:79:21:46:95:34:fe:a8:26:82:54:e6:a7:
a7:f7:e5:c3:61:49:c4:f3:33:c6:0c:e1:e6:b9:61:1e:ac:c0:
e6:76:0e:26:24:3c:34:a3:f6:9a:93:fe:26:0a:8f:29:c5:e4:
4d:fe:08:72:63:93:fb:a8:be:ec:d6:7e:f1:d5:97:c0:2a:dc:
96:57:58:47:dc:a5:cc:f9:5b:6a:c8:56:75:04:07:91:17:0d:
1d:a1:7a:4c:80:58:90:95:58:b6:21:78:73:af:ad:c4:35:d3:
49:26:43:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIrwaYyjW7HjAe1SS1v7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDEwYWE4NDM4YTgyNWE1NTQyMDEzZjFiOTBkMzQ4ZWQ4
YTAwYzYwHhcNMjQxMTI3MDEwMDU4WhcNMjQxMTI4MDEwMDU4WjAzMTEwLwYDVQQD
EygxYWRlNzhkNTVkMGEzZDhmYTdiYWM1Yjk3ZjJhNmMxY2YyNWYxMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCsJHIEZSTjFatfQSVFXKUdyC+d
5VXun8iAsqBsxRiXWOC++xoe/XuKL84SSTpLKQfWIGebgJFZ1Xo/bfIkdW+jK8Jm
GVW5zagPvO/I2aClkTiZ0dT4t951/lU/CF3VZcbvejWNYteBpLlWUyXZbHm2Jrym
17KtRxyKjjOkCuuN1a9nwnZVS94ys7MFKEETEEE4dQeaOIFiTBkvCeHE1fQC5BOS
LGWM1/SguYhJmLpvsFMDfiEwV0WPJLNnckkz+TY3kqODVvbGDkHfmdfZdEU17Zxr
hWfsscqNkuvxdNB9hrwDQllchJE/tEQ+OTCTv+ZCe2zVdSB20l2VS3w/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBreeNVdCj2Pp7rFuX8qbBzyXxJIMB8GA1UdIwQY
MBaAFBwBCqhDioJaVUIBPxuQ00jtigDGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFFS3FFT0tnbHBWUWdFX0c1RFRTTzJLQU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kN2Q1MGYtOWViMC00OGQ1LWE1Yjkt
M2FiM2I2N2M2MjE3LzEvSEFFS3FFT0tnbHBWUWdFX0c1RFRTTzJLQU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kN2Q1MGYtOWViMC00OGQ1LWE1YjktM2FiM2I2N2M2MjE3
LzEvSEFFS3FFT0tnbHBWUWdFX0c1RFRTTzJLQU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBtAVCKG
jqpc71LVWJrSiKCehj69FLx225iZ+DhDEdd/2nyh1QYoBS4ugHbMDYt4EADoevSo
2EeG6homGaRUajSldlddxEpUKzdSfy3SDVGLco7nAbxznvLgaNiFdex42Ix2pR76
cMeAjR94NthrbtucDvDBPs7NrzRfFxgkZRBTFm1H6tl73xCkd3qDtY7D1fC7d/kK
eSFGlTT+qCaCVOanp/flw2FJxPMzxgzh5rlhHqzA5nYOJiQ8NKP2mpP+JgqPKcXk
Tf4IcmOT+6i+7NZ+8dWXwCrclldYR9ylzPlbashWdQQHkRcNHaF6TIBYkJVYtiF4
c6+txDXTSSZD1Q==
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:26:30 2025 by rpki-client