This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: 2Nz++HuL73JYWkW88hZ7R9EFI6FbePkyrra7dHGco+s=
Subject key identifier: 9A:95:C1:8D:00:6F:02:E1:8D:FA:92:1F:C9:9B:6C:40:A5:79:00:5A
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019AF12DEC7DEC86229E8872BEAEAB1BBCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 01:01:49 +0000
Manifest this update: Sat 06 Dec 2025 01:01:49 +0000
Manifest next update: Sun 07 Dec 2025 01:01:49 +0000
Files and hashes: 1: J8OgK6YIDY4_wow6LOJWl2UwPMw.roa (hash: ehaTtO6bdlhf0UUT+6tJJXKQ0CyD4JoJHUd/4QXn6/c=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 8FtBENPNSYEBCArLKGMzfZEkYU6V44gpocXp9DAFUHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:ec:7d:ec:86:22:9e:88:72:be:ae:ab:1b:bc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Dec 6 01:01:49 2025 GMT
Not After : Dec 7 01:01:49 2025 GMT
Subject: CN=9a95c18d006f02e18dfa921fc99b6c40a579005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:c4:5e:c8:6b:d1:13:c4:37:53:4f:9e:0f:
ed:27:da:29:8c:d1:ed:e4:f0:7e:ad:99:89:aa:7d:
2e:1f:9d:df:c7:27:c8:84:96:b9:84:4d:77:cc:7a:
1f:c0:66:b8:3c:f1:11:e8:98:68:1f:eb:7e:4f:ac:
9c:9a:2f:13:ed:8d:b0:2a:b4:f9:ae:97:81:95:83:
47:8d:ef:de:d9:c6:e2:ce:a6:25:d2:55:34:ba:62:
9d:ff:f6:da:4c:b1:4d:74:a4:cf:a0:5d:60:19:12:
4c:ff:47:ec:7e:c4:fc:0b:51:a6:5e:9d:e1:11:26:
ac:b9:76:29:7d:4e:8d:1a:08:be:7b:d1:ab:b4:24:
aa:57:4b:c7:cf:76:e1:b0:3e:af:65:b7:de:57:53:
d7:c2:20:38:33:95:e8:d7:31:ce:a1:c6:e1:9a:01:
a6:b8:99:10:9a:5a:8b:ad:f2:a8:a3:13:a8:b2:b7:
51:e6:0c:a2:88:ef:90:f7:09:f8:9c:af:e9:56:59:
5d:54:5e:c1:8f:e6:6f:3e:71:e0:ce:85:50:37:cb:
26:ae:5d:87:de:89:ed:b9:05:86:99:48:26:cd:9a:
7a:ad:1f:b7:5d:3d:b0:ff:78:d0:64:37:3e:93:f7:
73:ee:b0:c1:c8:1c:99:f3:2b:83:b8:ce:33:28:0b:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:C1:8D:00:6F:02:E1:8D:FA:92:1F:C9:9B:6C:40:A5:79:00:5A
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:31:44:91:c9:01:fb:38:32:6c:8f:b1:ec:fa:e5:9e:ec:9a:
1c:a1:a2:c6:f5:f2:b8:6e:de:64:ae:ae:0f:ef:69:18:e5:b3:
c4:19:6d:aa:d7:13:ac:c5:fb:8d:8c:49:7d:ff:af:d1:0c:cb:
bb:af:76:24:ff:37:64:a2:09:7c:14:67:0a:61:7b:27:1b:a8:
3d:67:54:25:36:c0:e2:22:50:20:42:a2:44:bb:11:d0:39:b4:
21:5f:a7:8c:97:b6:1f:cf:1a:b5:70:f8:f3:a4:b7:60:13:3a:
41:82:eb:c4:fa:5c:bc:30:ee:ce:d6:0d:aa:e6:43:e2:e6:95:
42:eb:54:61:ba:6d:f7:28:b8:be:54:82:49:51:db:97:c5:ca:
69:30:24:2d:32:7d:a0:e2:9c:e5:dc:65:b6:10:96:97:fe:5f:
f4:c9:dc:a7:14:b9:d0:e9:c2:3b:82:4b:a1:d9:7f:b2:9f:91:
94:5f:59:c1:13:d0:c9:fa:67:ec:2e:8b:dd:73:ec:0c:73:c0:
52:73:41:af:2e:05:da:7e:4a:88:bc:fb:dd:4f:a9:e8:30:d7:
79:08:3c:b6:f3:7c:b5:87:c3:0e:ef:ba:b8:e2:90:ed:25:af:
08:de:3b:84:57:96:cc:4d:0b:ca:ae:d6:e5:bd:15:cf:36:1c:
b0:ad:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:15 2025 by rpki-client