This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File: h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier: k0JvREg4sPcCyxt7zJopO+JbRpr8xJIOn32U6RbZJOQ=
Subject key identifier: 05:84:4A:B2:B2:D9:7B:E7:1F:AF:0B:2F:A4:38:78:AF:AB:16:B7:7B
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer: /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial: 019710FA266CAB3C3EDB80579EC4DF10C764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number: 04CB
Signing time: Tue 27 May 2025 09:01:58 +0000
Manifest this update: Tue 27 May 2025 09:01:58 +0000
Manifest next update: Wed 28 May 2025 09:01:58 +0000
Files and hashes: 1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: uJR/0n2ys03CmGXsEnparUBXkjZwjSR2QcL46kmJ7P4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:fa:26:6c:ab:3c:3e:db:80:57:9e:c4:df:10:c7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
Validity
Not Before: May 27 09:01:58 2025 GMT
Not After : May 28 09:01:58 2025 GMT
Subject: CN=05844ab2b2d97be71faf0b2fa43878afab16b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:3c:cb:c8:81:64:75:28:88:4c:26:9a:58:
3d:7e:61:ba:bd:0e:aa:f1:79:16:88:39:e0:79:cd:
c7:b2:fd:27:03:b6:36:cd:72:6a:47:69:9e:07:82:
46:29:00:b8:47:bd:2d:32:fa:7c:23:94:78:12:f8:
46:dc:11:e9:d6:ca:35:30:5a:12:dd:a4:c4:f2:37:
b4:76:0c:99:c3:8a:31:05:d5:00:93:0f:a0:70:64:
f9:bd:7f:09:30:d0:30:7f:4b:04:1a:85:d5:11:7d:
23:c5:6e:79:3d:55:3c:65:56:ba:46:3e:d9:e0:69:
bc:2e:c9:b9:87:b7:c7:38:0d:c4:08:7d:b0:d7:01:
80:95:5f:36:15:62:7c:4d:14:7c:ea:1f:80:8e:c7:
f8:92:84:e2:71:e9:79:e2:45:bb:3b:c8:3d:b8:fe:
aa:30:33:9b:c5:c1:ef:fc:6a:4a:e7:e7:4d:cd:93:
3a:bb:23:5f:fc:5a:bc:35:b7:1c:d4:54:24:cb:79:
c8:c3:29:9a:2e:f5:a8:58:1c:12:8c:47:61:ee:e2:
e0:8d:80:93:c9:6e:77:4b:cf:b6:84:22:17:f0:05:
35:8c:04:ce:3d:e2:a3:7d:c6:42:dc:a1:5f:e3:06:
e9:33:64:26:71:bd:94:8e:a5:b6:2c:c7:30:a3:e4:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:4A:B2:B2:D9:7B:E7:1F:AF:0B:2F:A4:38:78:AF:AB:16:B7:7B
X509v3 Authority Key Identifier:
keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dc:1f:02:54:1a:7d:aa:cf:d8:40:14:fb:76:64:97:2e:5e:
3a:16:d0:f4:e0:20:17:99:93:f9:87:40:7f:c4:50:9a:df:ac:
06:58:11:90:89:c6:ba:4f:8a:0b:cb:71:6b:40:1f:7f:d9:41:
25:8c:9f:54:95:df:53:c1:e5:72:ef:2c:1b:a6:b6:4d:de:cb:
f2:4d:2a:0e:77:7e:dd:81:4e:02:d3:ff:0d:46:4f:ea:99:7f:
c7:13:99:08:73:c6:d3:39:ee:bd:57:c4:5f:79:d2:4b:dc:82:
0d:38:9a:c7:16:c2:2b:3e:04:c0:f5:4a:51:1d:ba:61:52:07:
e4:26:0e:6b:bc:33:ad:83:16:74:7a:db:ba:14:9d:bb:14:7b:
67:c0:4d:bb:4e:93:08:53:a0:64:55:09:af:1a:c4:c4:2e:7d:
1e:09:c4:4d:b2:46:4f:67:b1:e4:54:32:28:12:39:fd:9b:13:
6f:18:5f:77:30:1c:f0:2f:20:35:c3:00:72:6f:a3:1a:e1:36:
a2:c4:e4:16:55:4e:5b:6b:78:f0:a8:aa:9e:c3:fe:fa:9d:ae:
85:bc:fa:05:d1:8b:79:cf:9e:3e:ae:44:fd:71:06:53:12:19:
45:01:fc:dd:71:3a:ef:fa:28:b6:d7:f1:e7:26:d7:b9:e8:0c:
17:b0:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:27:25 2025 by rpki-client