This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
File: qSjaimFsusTJQnRmk6Fh5JjEYs8.mft (raw, json)
Hash identifier: qOG8EG77zARv5gBARszqOH169w7VF9IwQKw9eP53rkw=
Subject key identifier: E4:3F:86:9B:D5:46:46:B7:F1:08:A1:9F:78:C6:F6:9E:AB:A3:2B:0B
Authority key identifier: A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
Certificate issuer: /CN=a928da8a616cbac4c942746693a161e498c462cf
Certificate serial: 0197790A8330124D849B8007E607593DF883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
Manifest number: 93
Signing time: Mon 16 Jun 2025 14:00:21 +0000
Manifest this update: Mon 16 Jun 2025 14:00:21 +0000
Manifest next update: Tue 17 Jun 2025 14:00:21 +0000
Files and hashes: 1: 65PIAiCfgfiAH-DOFMDqdYi7-v0.roa (hash: vrMIR5GbnN7NVc0BGSN7sHPt5ir6Ncr78mtDLJprPDY=)
2: qSjaimFsusTJQnRmk6Fh5JjEYs8.crl (hash: /DuHRiB9LxCaVudcjWDLoFbUQi0aa0qImBYrql60RyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:83:30:12:4d:84:9b:80:07:e6:07:59:3d:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a928da8a616cbac4c942746693a161e498c462cf
Validity
Not Before: Jun 16 14:00:21 2025 GMT
Not After : Jun 17 14:00:21 2025 GMT
Subject: CN=e43f869bd54646b7f108a19f78c6f69eaba32b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:2a:e9:27:ca:a5:bc:4d:2f:e3:22:eb:ba:
7b:ea:cf:2a:f1:d0:e0:96:dd:9a:0a:b0:c1:52:0b:
13:05:95:60:aa:16:da:bb:14:17:29:f4:40:34:f9:
7a:a0:f1:59:c0:4f:49:b4:0b:74:00:ac:6c:d0:a4:
d5:88:2f:57:4d:36:7b:c6:08:6e:44:0c:3d:ee:7e:
77:79:ad:18:1e:29:3d:98:2f:10:9f:d6:ae:b2:b9:
f0:5a:ca:90:f0:12:5d:78:58:a4:e1:c4:68:59:d2:
5c:d4:33:f1:60:77:cb:bb:53:ca:2e:f4:9b:1a:9e:
4b:39:51:56:ba:a0:58:ee:56:fb:7c:9e:c1:02:e6:
6f:61:2a:81:84:0a:c3:d2:a1:de:ae:52:36:a1:0e:
8a:9e:59:3e:57:a3:47:7f:ec:3d:09:0f:72:65:b1:
24:42:b3:0a:77:c1:5b:ae:33:5b:74:b5:ff:91:9d:
45:88:98:ec:69:01:23:ae:7c:15:a0:33:49:dc:f0:
d4:d4:b1:23:68:73:38:62:11:1c:73:ed:1e:fe:80:
7a:e0:eb:c9:f4:09:5e:c2:47:8f:10:f9:b8:81:98:
0f:c3:c7:9c:d5:e4:67:84:5c:9f:9e:cb:b2:78:bc:
65:e4:f8:c2:d4:3f:56:bf:1a:44:ac:e2:9d:b8:1a:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:86:9B:D5:46:46:B7:F1:08:A1:9F:78:C6:F6:9E:AB:A3:2B:0B
X509v3 Authority Key Identifier:
keyid:A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:9e:77:91:f3:22:73:57:91:13:d4:49:e0:db:18:c8:b5:
9b:11:94:1f:ad:47:14:7d:8d:c4:87:d0:90:92:0e:9a:12:26:
9c:fb:b5:d3:05:49:73:4c:77:46:d8:cd:ad:3e:c7:38:91:b1:
28:b4:00:4d:ed:ca:ed:5d:0b:0c:7d:11:00:60:8e:af:05:e1:
d5:5b:44:4d:05:5c:50:e7:fb:ed:d0:bf:89:55:cb:81:f6:08:
3b:c6:38:9f:c8:e4:6c:91:4a:18:40:fd:51:9e:8a:41:b7:e8:
28:84:ef:07:90:a9:d2:d5:3e:e5:6c:80:17:06:b9:ab:81:46:
33:6f:e5:f4:76:e8:64:71:65:dd:14:79:aa:cd:3d:4a:37:46:
48:44:69:de:d0:7e:dc:75:41:f9:4f:51:75:49:6e:37:92:2c:
f0:bb:95:81:53:90:23:05:17:ed:94:bb:ad:90:8b:21:c6:e7:
5d:e4:5e:48:ab:2d:d4:d0:e0:59:0d:d7:38:88:a4:8b:e3:c9:
37:23:52:90:e9:04:ff:e7:18:0b:f4:72:8c:75:ad:41:e7:97:
80:76:74:4f:69:ad:26:7b:7b:29:b0:f4:9b:c3:5d:85:cc:39:
97:c7:66:c2:4b:f7:12:fe:38:1b:aa:36:5c:76:fd:4f:ee:54:
67:56:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:03:56 2025 by rpki-client