This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File: mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier: RTqx7cBJhOO0UNz8DfJB1nlfosnRmOYo3YJm2u0q8ls=
Subject key identifier: 86:9B:B3:E4:5C:7D:D0:AB:F2:95:12:9C:F9:F9:2D:FE:74:86:84:72
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer: /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial: 019B6CC5A8B6D1492522E4FC9986039307C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number: 02E2
Signing time: Tue 30 Dec 2025 01:00:51 +0000
Manifest this update: Tue 30 Dec 2025 01:00:51 +0000
Manifest next update: Wed 31 Dec 2025 01:00:51 +0000
Files and hashes: 1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: 9nWnHmoXZaH5d+LfSX48+CqlZqwZ98Cuv4b1OecLf04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6c:c5:a8:b6:d1:49:25:22:e4:fc:99:86:03:93:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
Validity
Not Before: Dec 30 01:00:51 2025 GMT
Not After : Dec 31 01:00:51 2025 GMT
Subject: CN=869bb3e45c7dd0abf295129cf9f92dfe74868472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:ac:4b:ed:36:c9:ff:53:a9:14:5a:6f:57:
53:c9:40:00:cc:39:71:7c:7d:b7:f5:09:b6:b7:56:
d1:d2:d4:d7:07:8b:c0:75:30:24:d3:e3:ca:12:b1:
36:5d:80:09:1a:02:cb:7e:3b:8d:f7:73:9a:8d:14:
36:3d:7e:57:5f:75:12:d9:6f:71:49:0d:a8:35:b9:
f2:12:f2:d0:d5:ef:f9:23:9b:5b:7f:16:83:26:53:
51:16:c5:c6:d1:41:00:bd:19:a7:50:fc:20:82:7a:
56:69:9b:8a:8b:13:39:67:8b:6c:89:b8:f6:2f:c4:
5d:87:0e:27:82:e0:ea:1b:72:46:e1:54:57:9f:d5:
fe:08:73:68:a8:d3:77:5c:23:02:6e:28:cc:03:e4:
02:3d:ff:0a:ad:61:23:99:0a:1e:e0:3b:5b:8b:72:
29:63:58:a0:eb:ac:9c:92:5b:71:1e:0e:8e:b1:b2:
9a:31:d9:e6:78:18:cd:98:da:e9:8d:6f:7c:24:44:
62:7d:b1:53:3f:8a:f1:35:3c:d7:45:b4:d6:1a:c2:
0d:ea:6d:71:ed:cf:db:59:8c:8a:f4:4a:3d:66:7c:
00:54:31:30:a3:29:98:ac:b3:f7:85:e7:7a:6a:61:
c4:96:61:b6:27:fd:ff:e3:90:64:74:65:94:61:56:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:B3:E4:5C:7D:D0:AB:F2:95:12:9C:F9:F9:2D:FE:74:86:84:72
X509v3 Authority Key Identifier:
keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:27:00:7a:fc:fa:91:4f:27:49:e3:70:05:12:ad:b2:80:
2c:94:bd:3c:6e:a4:61:02:d7:7f:af:bd:66:3a:83:0a:29:af:
91:98:4b:ec:c0:c0:13:99:f6:fa:82:9e:ac:3d:66:8f:47:43:
d2:8d:99:05:8e:d2:0e:36:95:c0:59:c1:c8:54:9e:54:02:ff:
58:07:f3:21:66:9a:15:dc:b5:82:cd:b8:2a:84:dd:20:28:27:
d7:ef:e2:55:a3:2b:93:65:99:18:b0:5f:30:cc:c3:72:53:c9:
90:d6:f4:26:a3:47:38:94:0b:a8:8b:d2:be:29:23:8b:21:ee:
0a:76:09:80:b3:38:78:79:bd:a7:21:72:bf:b7:56:de:d1:38:
69:18:a6:32:fd:48:92:4e:ef:3d:b1:c1:21:2d:cc:1d:37:34:
81:d5:a1:bb:6e:30:41:97:6e:fa:62:85:24:f9:13:9c:59:c3:
82:33:81:16:8c:8d:53:f4:d3:e1:48:e3:0a:93:dd:eb:58:e7:
d2:c8:4a:5e:fb:d3:81:4e:b4:c0:b9:b0:35:3e:70:b6:be:7d:
4f:90:aa:a3:0a:f9:42:5d:37:95:80:eb:ec:e0:0a:f8:2a:46:
94:62:92:08:ac:cb:fd:4b:4f:31:30:e1:8a:6a:c9:1f:21:d7:
19:0a:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:21:28 2025 by rpki-client