This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: MQkF3GV+seT7940Pp+tJLucHiV6/Rl5/11BEX8JhPg8=
Subject key identifier: B6:BC:35:B6:26:FB:61:65:AA:66:9F:15:E9:31:65:2B:F0:DB:7E:0D
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 2EF47B6E5BD1A580A072A3827BAF5485EB1BB1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 01DB
Signing time: Mon 05 Jan 2026 02:14:27 +0000
Manifest this update: Mon 05 Jan 2026 02:09:27 +0000
Manifest next update: Tue 06 Jan 2026 02:15:27 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: 6DYW6mXsIL4AX5F1chDopiqtPWVPzfDykEY/SmFpgXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f4:7b:6e:5b:d1:a5:80:a0:72:a3:82:7b:af:54:85:eb:1b:b1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Jan 5 02:09:27 2026 GMT
Not After : Jan 6 02:15:27 2026 GMT
Subject: CN=B6BC35B626FB6165AA669F15E931652BF0DB7E0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:8f:ce:16:21:1a:18:a2:da:bf:cc:d5:43:
a9:bc:6b:29:8e:b6:01:e3:a4:25:a1:06:08:7e:d6:
e8:f9:66:8a:92:d2:16:3e:ad:68:be:7f:4d:e4:08:
5c:8c:d1:55:12:3a:55:a8:a4:7f:35:84:85:4f:f1:
3d:d7:43:49:d7:88:e5:e8:6d:ef:a6:b0:94:76:82:
d5:80:f8:eb:45:01:e1:c6:7a:0b:25:36:58:a0:d2:
88:dc:bc:38:ca:ee:5b:5c:45:06:0d:e0:62:38:79:
7d:7c:94:78:03:1f:7f:b9:bb:60:05:fc:11:dd:b5:
51:4c:09:26:6a:7b:89:bf:93:e8:90:9e:32:39:5d:
30:f5:d5:2d:83:46:e3:49:f6:ac:b1:bb:57:be:98:
16:75:a0:5a:58:e9:62:13:3b:25:87:5b:5e:4b:d3:
18:77:61:12:f4:75:0e:5e:34:5e:4f:e3:f8:0e:16:
37:ca:0d:78:32:cc:7e:ec:c1:11:7d:61:2a:a5:96:
89:5c:2d:7f:e3:9a:26:fb:13:c4:65:64:ac:00:0b:
dc:d7:ea:97:c0:23:d6:ca:2b:42:4f:55:8f:4c:21:
d0:bb:7e:ee:b4:d4:4f:f7:97:8e:fb:89:d0:cc:3d:
42:86:5e:d3:5c:89:c1:de:bf:42:cb:fc:cc:b8:bd:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:35:B6:26:FB:61:65:AA:66:9F:15:E9:31:65:2B:F0:DB:7E:0D
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:9b:ba:ae:50:94:55:c2:36:0c:9f:75:26:0d:99:d6:f2:
bd:61:cf:c8:50:73:c4:74:74:79:3e:b6:3a:9c:79:ef:ee:0f:
ae:3a:29:ed:91:5a:07:b2:27:b6:eb:6f:32:0f:a9:82:00:36:
46:9f:5a:4b:90:42:e4:99:11:f2:2b:e0:03:b4:af:fc:76:2f:
b7:98:13:a2:a1:e7:22:0a:4b:1a:e2:fc:c7:8f:70:99:f6:0d:
53:94:49:8a:7b:ae:b3:8b:f0:51:12:bd:51:02:b1:79:e0:7c:
07:95:58:4e:8a:44:2b:b7:a6:ff:93:6c:9a:d3:7c:56:3a:5b:
cb:c4:3f:88:1a:75:ff:04:3e:6c:d4:13:e8:43:81:5e:09:1d:
4d:17:1d:b0:4e:d3:64:bf:36:bc:e1:53:5a:02:71:36:3b:11:
2d:0c:84:04:64:75:3a:4f:3d:3f:d4:5f:2d:6c:14:b3:8d:6d:
94:b0:37:5c:d5:48:85:c1:a8:b0:81:4e:29:f6:c2:cd:e5:d8:
b8:10:cd:af:24:6c:74:b1:60:9a:02:a6:ab:f7:80:f5:e2:d7:
23:20:cc:6c:ee:0b:92:85:31:3a:ae:bd:55:d9:26:62:59:1b:
4a:46:d9:b6:c3:7b:c2:ae:28:ff:75:ff:6f:93:57:ee:98:6a:
be:2f:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:47:11 2026 by rpki-client