This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File: SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier: CveTJ7dEhG4pRd0WCiOw343w4bMi4idtQ+47CW5rEkc=
Subject key identifier: 48:4B:25:2F:89:E7:40:BB:F1:5A:C0:E7:B5:8B:48:9E:07:9C:82:FC
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer: /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial: 019B51BD14BD306D43F83F178C13050753D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number: 06BA
Signing time: Wed 24 Dec 2025 19:01:44 +0000
Manifest this update: Wed 24 Dec 2025 19:01:44 +0000
Manifest next update: Thu 25 Dec 2025 19:01:44 +0000
Files and hashes: 1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: qZxv/S/glCGMZJ/IKldLF5V2fLLBODQc80GFe1JwGhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:51:bd:14:bd:30:6d:43:f8:3f:17:8c:13:05:07:53:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Validity
Not Before: Dec 24 19:01:44 2025 GMT
Not After : Dec 25 19:01:44 2025 GMT
Subject: CN=484b252f89e740bbf15ac0e7b58b489e079c82fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:35:92:75:61:f0:6f:79:db:54:ec:b9:67:
ed:31:a0:39:97:c4:6e:4f:c9:6e:15:7b:7d:aa:f3:
fc:cf:2e:6b:e3:01:4f:a5:db:8c:63:43:30:60:c0:
89:5a:ea:73:d2:33:9e:6f:06:66:13:54:09:cc:a7:
a1:34:61:e2:07:57:f7:12:bb:37:2b:b1:f9:b6:fe:
b6:e9:2f:c4:95:ff:be:bc:38:c6:6d:0e:92:7b:a5:
df:f4:5b:ea:5c:14:87:f5:4c:7d:97:af:f7:6b:bf:
96:cd:34:a1:98:34:61:85:9c:09:b8:cd:85:2d:5b:
c1:b0:5a:f6:74:29:e0:56:51:45:a3:fb:92:05:e4:
36:da:bb:64:b4:dd:e2:4f:31:3f:c0:c5:f8:89:7a:
89:43:55:9a:db:71:de:16:c9:e5:78:0a:62:73:07:
94:37:4d:a1:26:5c:1e:84:b6:c1:33:f1:80:62:a1:
2d:3a:5c:02:79:93:d3:7b:c7:2d:e3:19:0e:d3:fb:
e8:7d:66:55:bb:41:f2:9c:c9:3d:ee:91:47:9a:d0:
76:7d:de:67:06:91:5c:29:0b:dd:d6:a1:c7:fd:28:
91:21:04:4e:74:c4:a7:d5:31:74:28:cb:53:06:31:
90:bd:32:7a:e1:76:5f:90:3b:84:74:64:63:e3:48:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:25:2F:89:E7:40:BB:F1:5A:C0:E7:B5:8B:48:9E:07:9C:82:FC
X509v3 Authority Key Identifier:
keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b9:3e:48:4d:56:bc:4a:d9:ef:cc:32:1a:e7:e4:53:b7:41:
1d:40:09:80:a4:5e:f9:ca:61:ed:bd:59:54:51:8c:21:eb:90:
bf:4d:ef:5c:8c:5e:1f:b3:d9:d3:86:70:42:b5:85:5c:55:11:
71:fe:38:f6:19:e6:56:dd:05:78:74:9a:15:20:d9:2f:76:b0:
a7:9c:1c:62:a1:12:95:af:28:fc:41:85:96:85:48:b6:e4:40:
78:3b:6c:9c:84:0f:a8:c1:25:cd:c2:11:0b:49:cd:50:66:61:
f5:1c:c7:47:1f:2f:9f:24:0e:1c:d7:c2:c7:7f:4a:93:1a:d8:
9e:17:9c:74:1a:a1:dc:dd:17:3a:08:46:91:9e:fc:04:b6:ef:
46:49:93:58:a0:d1:2b:5f:ef:35:66:9f:4a:fb:76:32:0f:ee:
c2:4f:b4:de:a7:da:0f:d8:1f:e9:b1:78:1b:60:51:61:b9:f5:
42:5f:aa:75:de:e8:9a:d9:d5:6a:41:d0:1a:4f:a2:79:46:f2:
e8:01:e9:30:e2:a6:84:eb:ad:63:c6:a3:70:05:81:08:71:f5:
bb:72:e6:1c:cd:6e:9b:a5:98:84:57:2d:4f:be:1b:31:8e:44:
14:40:36:58:5e:c5:ee:6b:ae:ed:b9:10:5b:6f:24:0e:26:5a:
6d:91:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:47:36 2025 by rpki-client