This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
File: agYc8aPo-IYXhUvTtqza2KukWhw.mft (raw, json)
Hash identifier: 1UEdkI2GxolwlEP+hteZ7O38+5sP20I0UYNvPCNi2bg=
Subject key identifier: 42:ED:44:7D:C7:A5:CC:9E:F8:77:C3:3A:96:CA:8B:28:11:D5:64:E5
Authority key identifier: 6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
Certificate issuer: /CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Certificate serial: 01979AF273E9B8B3BD3A737CE864AC65C576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
Manifest number: 15A5
Signing time: Mon 23 Jun 2025 04:01:09 +0000
Manifest this update: Mon 23 Jun 2025 04:01:09 +0000
Manifest next update: Tue 24 Jun 2025 04:01:09 +0000
Files and hashes: 1: agYc8aPo-IYXhUvTtqza2KukWhw.crl (hash: uvDghXKrnv0yTYSdusd75OxvuM60MElwJ9cq3ip8K54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:f2:73:e9:b8:b3:bd:3a:73:7c:e8:64:ac:65:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Validity
Not Before: Jun 23 04:01:09 2025 GMT
Not After : Jun 24 04:01:09 2025 GMT
Subject: CN=42ed447dc7a5cc9ef877c33a96ca8b2811d564e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:b2:c4:82:9b:6b:41:30:c1:c1:48:65:db:
f0:99:a9:01:94:c0:89:d1:af:ac:19:4b:e8:4a:02:
99:71:0c:07:c9:36:ab:9f:2a:7b:db:1d:14:2f:fb:
16:cc:58:e5:f3:39:a6:8a:3c:77:d2:f1:35:59:20:
32:f3:02:40:2c:e2:4a:90:70:94:ff:e1:d0:37:5d:
78:47:4b:26:5f:4b:81:78:71:f6:ee:3f:cd:29:ab:
d9:e9:c2:0b:73:dd:76:6d:36:2c:e7:64:89:cf:dc:
fc:e1:ea:b3:4b:9e:12:e1:38:8c:fe:cf:1c:6e:43:
27:f8:0f:db:63:c4:fa:00:b0:4a:b9:e5:61:87:a4:
90:99:28:73:77:62:92:bb:1e:d3:4e:8c:a5:f5:7a:
16:b1:44:0c:4a:57:47:78:ca:45:74:b1:25:98:53:
4f:5e:80:10:f7:48:45:d0:5f:50:18:f3:36:0e:d9:
eb:36:ec:6a:fb:99:c2:2e:4d:be:10:b4:7a:99:0d:
e6:a0:c4:0c:37:cb:a9:9c:14:03:e7:fc:ef:44:1a:
9d:fa:3b:f1:93:5e:f7:3e:4a:9f:d4:3f:02:39:06:
af:54:25:49:b9:26:88:85:f5:fa:85:74:e3:98:bd:
dd:91:de:ee:5f:f1:eb:28:02:ab:de:1b:9c:09:a0:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:ED:44:7D:C7:A5:CC:9E:F8:77:C3:3A:96:CA:8B:28:11:D5:64:E5
X509v3 Authority Key Identifier:
keyid:6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a0:e1:44:22:15:f7:14:67:7f:d0:cc:11:cf:c5:32:c4:48:
2a:70:17:08:2e:23:80:aa:16:cc:39:09:b3:0d:d2:1c:ed:25:
a6:f3:ec:d9:08:af:24:f0:e7:de:cf:e2:79:3d:d6:3b:ac:70:
1b:24:f6:bf:a7:2d:f4:c6:3d:62:b6:8c:db:e4:8f:2c:c5:79:
03:f1:40:aa:1c:92:50:f8:fa:0e:eb:77:7f:83:63:a0:b2:d7:
13:fe:d7:28:56:cb:d6:6b:93:27:f2:86:82:09:17:a5:b9:d4:
ee:47:4c:ae:ec:27:2e:f0:8f:5a:eb:6d:82:1e:02:f1:c0:b6:
82:31:c0:2d:ae:f1:76:b0:ab:02:e8:9d:84:68:d3:04:32:11:
8f:bf:3f:d0:ee:3c:38:df:c6:54:99:dd:f4:6e:f6:a6:79:ed:
2a:c6:e5:d1:e8:fc:4a:2e:95:98:4c:2d:3a:70:76:27:70:bf:
06:97:d7:dd:82:b0:72:0f:52:8c:84:5a:6f:03:8d:57:ed:8e:
57:7f:78:b1:6b:4a:6d:0e:ca:36:03:37:a8:02:f5:86:5e:f1:
4c:9a:0b:f4:59:84:2c:7d:ed:1d:33:b7:8a:0c:1a:bd:dc:17:
03:73:1d:91:69:43:55:ab:b2:c4:a3:25:67:dc:72:1c:13:d6:
07:56:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 22:31:43 2025 by rpki-client