This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier: BJrZOPRhxqW9CKPlaqlqsw87OBpZKolhS1T6UFsLB1Y=
Subject key identifier: 45:2E:F4:1C:37:B5:56:9B:C3:D3:21:79:BC:70:29:DB:22:0A:30:0A
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 2A7311ADBD9DE3402AE42FE12416306EB09D671C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number: 04D1
Signing time: Fri 19 Dec 2025 06:20:02 +0000
Manifest this update: Fri 19 Dec 2025 06:15:02 +0000
Manifest next update: Sat 20 Dec 2025 09:13:02 +0000
Files and hashes: 1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: p43CUHAXUz5gvGGiV9By36VVPchOOxind53WP8PdrFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:73:11:ad:bd:9d:e3:40:2a:e4:2f:e1:24:16:30:6e:b0:9d:67:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Dec 19 06:15:02 2025 GMT
Not After : Dec 20 09:13:02 2025 GMT
Subject: CN=452EF41C37B5569BC3D32179BC7029DB220A300A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:70:66:d1:da:30:a6:05:97:fe:fc:50:12:
11:88:f2:bf:01:60:db:3b:8f:b1:77:42:98:98:3e:
3d:fb:1e:40:dd:c0:95:47:83:cf:b6:2b:ef:bf:9b:
e2:98:6b:83:5d:60:97:a5:ba:9b:7d:b6:99:1f:70:
e8:45:b3:f7:a8:a5:64:75:18:ed:e2:7e:3a:8a:8b:
e0:cd:6b:44:da:d4:c5:d8:51:ed:14:ff:d8:4d:2f:
26:bf:58:76:74:f5:b0:bd:16:6f:f8:7a:5e:c0:d5:
f8:4a:80:57:8e:55:53:10:7a:0d:93:96:83:05:3c:
1c:85:58:70:e2:1f:0c:e7:68:c3:9d:5a:a7:76:be:
7c:3c:62:35:cf:11:b6:40:96:36:2a:3a:13:21:fe:
93:b5:60:33:3c:49:dd:4e:43:d8:67:0a:29:70:5e:
9d:21:e2:df:b2:c0:19:6c:ea:de:e1:3d:93:c2:0c:
8a:2d:7b:d2:b7:bb:de:c3:7f:84:4b:59:b0:d9:d7:
52:2c:49:af:dc:02:22:63:7a:ba:0c:9d:fe:45:0a:
8c:ed:d0:ad:40:69:7e:4d:ca:08:9e:e0:cc:59:ef:
99:3c:8a:07:28:c1:35:54:25:08:3d:4c:25:db:95:
56:3a:37:a7:76:de:c4:7a:47:0d:90:10:b9:64:97:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:F4:1C:37:B5:56:9B:C3:D3:21:79:BC:70:29:DB:22:0A:30:0A
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4b:71:1b:05:d2:4b:69:b7:2e:22:21:46:86:59:b3:d2:9b:
5a:60:9a:4c:51:95:b5:2c:92:5c:e7:f4:29:32:6b:dd:7d:b6:
88:08:fa:a1:20:04:df:8f:2a:c0:66:4f:88:86:ef:2c:68:59:
84:a3:48:4b:b7:3d:51:e9:8b:d9:ae:5b:ce:5d:a7:e2:81:8c:
8f:e2:c4:f4:d1:af:9c:07:38:86:5b:d6:03:d5:b9:f1:4c:5c:
ea:2e:0f:27:14:50:85:73:bd:90:80:36:52:f0:a6:6f:9f:c1:
d8:cd:f5:1f:02:d1:ba:4a:91:58:82:87:71:cd:59:76:00:26:
2f:7d:3d:65:cb:af:25:8f:af:38:a9:a2:78:28:e1:d7:ea:bb:
df:43:b4:8c:cd:c3:27:d2:54:bc:c3:03:b4:af:75:2b:45:25:
6d:a3:dc:30:63:40:94:98:4d:b8:ef:93:4c:91:76:65:21:ff:
99:31:5f:43:c8:e1:c5:06:d3:06:41:73:c4:9b:d6:c1:69:39:
fe:1a:ad:88:1e:78:01:34:20:0a:66:d5:cb:98:1d:00:43:7e:
81:77:60:da:07:f9:b1:2b:d2:08:f0:8c:05:b3:ee:ad:7e:c8:
f8:95:87:13:16:84:48:6c:32:f1:87:50:56:2b:c4:61:5e:86:
a4:5c:8f:be
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKnMRrb2d40Aq5C/hJBYwbrCdZxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDViYmRiNjI5ZmRkMGYxYzMzYmZiMWFjN2NmNDQxMjFi
YzVlNmVhZDAeFw0yNTEyMTkwNjE1MDJaFw0yNTEyMjAwOTEzMDJaMDMxMTAvBgNV
BAMTKDQ1MkVGNDFDMzdCNTU2OUJDM0QzMjE3OUJDNzAyOURCMjIwQTMwMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/HBm0dowpgWX/vxQEhGI8r8B
YNs7j7F3QpiYPj37HkDdwJVHg8+2K++/m+KYa4NdYJelupt9tpkfcOhFs/eopWR1
GO3ifjqKi+DNa0Ta1MXYUe0U/9hNLya/WHZ09bC9Fm/4el7A1fhKgFeOVVMQeg2T
loMFPByFWHDiHwznaMOdWqd2vnw8YjXPEbZAljYqOhMh/pO1YDM8Sd1OQ9hnCilw
Xp0h4t+ywBls6t7hPZPCDIote9K3u97Df4RLWbDZ11IsSa/cAiJjeroMnf5FCozt
0K1AaX5Nygie4MxZ75k8igcowTVUJQg9TCXblVY6N6d23sR6Rw2QELlkl/DpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQURS70HDe1VpvD0yF5vHAp2yIKMAowHwYDVR0j
BBgwFoAUBbvbYp/dDxwzv7GsfPRBIbxebq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTNmMDgzYjctNzgxOC00Y2NmLTg2NjMtOTE5MWY4YTg2
MTZhLzAvMDVCQkRCNjI5RkREMEYxQzMzQkZCMUFDN0NGNDQxMjFCQzVFNkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JidmJZcF9kRHh3enY3R3NmUFJCSWJ4
ZWJxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85M2YwODNiNy03
ODE4LTRjY2YtODY2My05MTkxZjhhODYxNmEvMC8wNUJCREI2MjlGREQwRjFDMzNC
RkIxQUM3Q0Y0NDEyMUJDNUU2RUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnktxGwXSS2m3LiIhRoZZ
s9KbWmCaTFGVtSySXOf0KTJr3X22iAj6oSAE348qwGZPiIbvLGhZhKNIS7c9UemL
2a5bzl2n4oGMj+LE9NGvnAc4hlvWA9W58Uxc6i4PJxRQhXO9kIA2UvCmb5/B2M31
HwLRukqRWIKHcc1ZdgAmL309ZcuvJY+vOKmieCjh1+q730O0jM3DJ9JUvMMDtK91
K0UlbaPcMGNAlJhNuO+TTJF2ZSH/mTFfQ8jhxQbTBkFzxJvWwWk5/hqtiB54ATQg
CmbVy5gdAEN+gXdg2gf5sSvSCPCMBbPurX7I+JWHExaESGwy8YdQVivEYV6GpFyP
vg==
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:49:41 2025 by rpki-client