This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File: S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier: xSUgxFHnnj/VpxGzpfo12DauUplXLdCEf+FJiPGKJfI=
Subject key identifier: CA:D5:59:4D:12:7A:4B:65:B2:B1:35:A7:EF:80:5C:54:97:EA:B7:56
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 019AF1D221BD09E28772FF56695206D103A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number: 0D7D
Signing time: Sat 06 Dec 2025 04:01:11 +0000
Manifest this update: Sat 06 Dec 2025 04:01:11 +0000
Manifest next update: Sun 07 Dec 2025 04:01:11 +0000
Files and hashes: 1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: TL+n43+PeSxhO7Ln4rX7wu/uVu1gvq3HUzqv6fTKtFo=)
3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:21:bd:09:e2:87:72:ff:56:69:52:06:d1:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Dec 6 04:01:11 2025 GMT
Not After : Dec 7 04:01:11 2025 GMT
Subject: CN=cad5594d127a4b65b2b135a7ef805c5497eab756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:01:80:94:ee:9c:9b:7f:ae:aa:c7:cc:e7:
69:e8:b6:70:29:0b:15:17:7f:ff:59:e3:f9:97:6e:
63:82:24:06:b5:a3:04:c6:b9:61:a6:2f:ad:92:a3:
34:14:89:c3:65:4e:64:99:13:86:93:79:bb:d2:27:
77:22:12:6d:fb:65:e2:55:a4:a6:98:9c:b8:2a:97:
db:90:86:b3:d6:27:4b:01:7a:29:ca:dd:9b:7f:47:
9d:48:91:51:1e:b3:5c:32:82:39:19:14:10:dd:50:
ec:0d:7b:ff:ce:fa:29:08:d4:80:56:4b:62:bb:35:
8f:e8:3d:63:52:eb:a7:f6:18:f6:66:d5:47:6e:04:
51:72:17:16:ad:c0:0d:c6:80:94:5a:4c:13:fb:8f:
7a:80:56:f7:4b:c7:7c:0b:a8:18:9b:c8:2c:fd:03:
2b:7a:48:aa:df:f1:14:8b:2a:bc:1e:26:c6:33:7a:
c3:73:98:33:40:00:8b:50:5c:32:c6:00:3d:4d:e9:
9f:a7:62:e0:44:d1:09:1b:39:e0:20:c5:1a:e0:0e:
25:2b:c0:2a:79:8d:3a:ab:f9:a3:57:cb:bd:43:1c:
40:bc:aa:48:17:7b:63:62:ed:a5:fb:62:f8:4f:a1:
62:24:9a:5f:d1:bc:cc:31:63:14:bc:c1:98:79:ae:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:59:4D:12:7A:4B:65:B2:B1:35:A7:EF:80:5C:54:97:EA:B7:56
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:61:40:20:5e:c2:6e:0f:48:69:f2:42:fd:d8:b5:8c:11:
a1:45:88:ca:7c:57:2b:ff:0b:b8:b9:28:c1:c5:52:18:86:e9:
42:ed:99:0f:50:82:58:56:c1:2d:94:fa:3e:d7:ee:fa:5e:56:
c2:50:5c:a1:f9:5e:99:39:31:bc:bd:85:1b:d8:e0:80:22:ee:
52:fe:f5:f3:dd:a2:74:34:6e:ea:9a:5d:66:f8:49:28:55:2c:
92:bc:9e:83:0c:26:57:f4:28:ff:35:4b:ba:a1:ad:e2:5c:09:
47:ca:77:39:01:ef:7c:ca:c0:d9:41:04:8b:a8:f2:77:cc:08:
0e:21:c5:e5:83:2a:fe:fb:73:98:b0:67:01:ed:f0:a2:c6:0e:
2d:55:65:8c:24:fd:d2:26:48:90:9b:70:0a:c9:d7:7c:c4:cc:
89:75:36:5d:2e:2a:38:1a:f6:f6:d9:c6:0b:c9:04:ff:58:c6:
3a:17:f8:cf:f3:cb:8e:9b:0e:57:f3:f3:5e:9c:4e:0e:45:97:
50:19:04:b0:d7:88:52:3c:6c:ab:6c:f6:9c:cd:2c:b2:c3:f3:
66:27:06:44:7c:0d:3e:c9:8d:69:a8:73:a5:51:16:39:ce:64:
5d:03:ea:c3:48:47:cd:de:41:6a:68:aa:f6:e5:2b:46:1c:3b:
1d:de:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:37:27 2025 by rpki-client