This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File: SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier: 5ioYuIo/cx0G+uit1+HR0GscjGUzVrev2JUMAlNN6H8=
Subject key identifier: 4E:D8:3E:C3:06:A2:5D:61:A4:9A:2C:36:4B:21:E2:CF:77:43:68:E8
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer: /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial: 019AF23F9E9BD4F917E0ECDA78C474D9A03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number: 01A9
Signing time: Sat 06 Dec 2025 06:00:46 +0000
Manifest this update: Sat 06 Dec 2025 06:00:46 +0000
Manifest next update: Sun 07 Dec 2025 06:00:46 +0000
Files and hashes: 1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=)
2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: 266Nl1zoLGH9OfiDRWWeB0l40rz1OqPel8GAYLTTjNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:9e:9b:d4:f9:17:e0:ec:da:78:c4:74:d9:a0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
Validity
Not Before: Dec 6 06:00:46 2025 GMT
Not After : Dec 7 06:00:46 2025 GMT
Subject: CN=4ed83ec306a25d61a49a2c364b21e2cf774368e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:43:df:34:05:41:16:dc:a6:6d:42:12:0e:
88:43:42:29:3f:41:e3:ff:0b:ca:fc:12:47:a9:fa:
61:e1:62:c1:3c:c3:10:20:05:ed:7c:7b:43:c9:3d:
06:de:ac:fe:1d:7b:78:c8:9f:2f:fd:19:81:9f:1d:
5d:30:1b:3f:5b:50:6e:c7:35:bc:1b:fe:c4:dc:29:
cb:d9:7a:2a:25:73:b3:04:c0:86:e4:ab:eb:c7:d3:
45:b6:af:4c:23:2b:d0:72:60:a3:8f:2a:af:21:15:
b0:27:45:2e:30:6d:06:ab:42:64:3e:47:35:2d:28:
ff:f4:d7:56:2c:fe:fb:e3:1b:b1:c0:9f:1d:1c:b3:
e8:39:55:36:eb:9c:8e:b2:cf:61:57:cc:bf:14:07:
97:fb:b4:75:6b:93:08:f6:b9:ed:9a:3c:2b:39:b2:
91:1d:dc:5b:a9:e0:70:fb:e6:d8:50:97:4c:1b:6a:
2f:b0:25:65:c1:83:05:b0:6f:43:4d:a4:3d:a4:01:
88:27:dd:9f:28:2f:1b:fc:0d:d7:63:2b:3c:af:e6:
b5:e6:63:4c:08:36:46:80:e5:3a:60:25:6d:99:be:
42:e4:e4:3d:83:0d:25:11:03:12:9e:c0:35:2d:2d:
14:2e:fe:88:78:cb:41:ae:ba:2b:a1:9d:b8:6c:d4:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:3E:C3:06:A2:5D:61:A4:9A:2C:36:4B:21:E2:CF:77:43:68:E8
X509v3 Authority Key Identifier:
keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9a:d6:04:5b:98:30:9a:a6:0b:8f:34:3d:ad:58:ef:24:2b:
48:df:24:69:1f:dc:b3:1e:f5:76:19:02:63:f8:44:54:22:a8:
bb:9d:03:1a:78:41:20:25:04:86:b9:3e:1a:8c:d6:99:a8:5a:
63:0a:65:88:38:55:08:43:08:b1:93:38:8e:65:82:b8:3d:2f:
da:32:b9:e7:d7:5d:ab:69:5f:fb:f0:37:84:b3:31:14:46:91:
66:b0:82:80:68:65:9a:69:f7:49:66:e9:ef:f7:a3:bb:2b:ed:
64:fe:2b:18:36:85:88:d3:92:30:b3:82:57:58:04:b3:18:b8:
f2:9b:b3:ff:d9:0a:cd:4f:70:d8:48:35:d2:20:9b:66:d8:d2:
8b:47:b9:e2:06:9d:d7:94:70:dd:d8:50:56:e6:fc:a4:b4:e0:
53:ec:1a:0c:5a:2b:42:6b:ee:67:76:ee:3e:74:82:2a:77:24:
1a:63:5a:19:4e:07:6e:70:c2:d5:ec:d6:32:43:af:62:df:d4:
0b:fd:54:e1:4b:88:e5:af:b0:7b:12:9d:f5:29:d1:61:dc:2a:
e6:4e:b5:5b:1b:f3:0b:06:dc:a4:87:0b:0c:b1:45:5a:ad:a4:
de:2d:b8:c7:45:3e:fb:65:33:e1:8f:18:c8:84:70:35:47:e2:
7f:14:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:14:53 2025 by rpki-client