This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json) Hash identifier: sVx6Ku0ho0mh2NPbZvHWUedyezGkT95UU8h6jnT9Lfk= Subject key identifier: 90:52:0B:AE:0C:BD:D3:06:E8:27:D4:12:99:9B:E7:3B:8B:7D:48:5C Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1 Certificate serial: 019BF9892C79DBA6B79E0E14C960EF8DCF4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft Manifest number: 0BEE Signing time: Mon 26 Jan 2026 09:01:15 +0000 Manifest this update: Mon 26 Jan 2026 09:01:15 +0000 Manifest next update: Tue 27 Jan 2026 09:01:15 +0000 Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: RCAYrWQQttqwp8pq50K/R520evF9iYSBgmrjCgWBoow=) 2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:2c:79:db:a6:b7:9e:0e:14:c9:60:ef:8d:cf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1 Validity Not Before: Jan 26 09:01:15 2026 GMT Not After : Jan 27 09:01:15 2026 GMT Subject: CN=90520bae0cbdd306e827d412999be73b8b7d485c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:7d:fd:ff:31:2d:ae:38:ed:c6:89:87:ce: 91:34:60:04:26:cf:c3:fa:3a:c5:65:98:8f:1f:7e: 34:d3:69:c6:aa:5a:c6:3a:4e:3a:a6:36:bd:38:00: 5f:0a:18:5d:b1:96:53:24:3b:49:6d:75:c6:cc:fa: 0b:01:be:e6:60:d5:f8:41:e6:6c:d0:5b:61:6c:f5: e4:33:01:4a:97:17:f6:ab:c5:13:ad:19:02:9e:d0: 70:ee:47:2a:a0:60:1f:67:23:eb:cf:64:5e:11:70: 54:b8:3a:f4:4d:73:56:4e:2d:26:30:b8:6d:2c:8c: f1:2b:07:7c:93:e8:1a:61:b0:aa:06:34:36:f6:70: 8b:06:19:a6:5c:23:c6:28:47:d9:c8:77:e6:24:32: 44:82:04:96:25:f4:38:58:18:15:b3:7a:d9:e4:33: d7:25:83:99:a8:61:9b:3a:ef:49:13:a9:e8:5e:c8: e7:19:3b:28:65:b9:32:71:71:74:8a:03:a9:52:5f: 16:8d:74:2d:ea:bc:ee:78:15:4e:1d:a0:42:96:f3: be:d8:88:ba:47:35:69:e3:6d:fc:6f:ac:c6:c5:04: 86:fa:2b:03:c0:27:96:6c:db:7c:0a:7f:44:56:3d: 78:f6:e5:11:09:58:4b:2f:3b:71:d3:fb:1e:d8:85: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:0B:AE:0C:BD:D3:06:E8:27:D4:12:99:9B:E7:3B:8B:7D:48:5C X509v3 Authority Key Identifier: keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e9:1a:db:74:4b:78:95:f6:87:ba:ee:9a:24:9c:63:c5:7d: 2a:20:27:4e:e2:fe:56:dc:37:98:98:58:1a:e3:95:c5:10:ec: f8:4b:6e:b9:e4:14:b0:d9:2a:d7:8f:84:87:21:f3:0c:b5:ce: 0b:7b:44:a1:d6:3f:4b:c7:86:a2:ec:f7:2e:99:bc:5a:eb:15: 0d:36:fb:a5:dd:86:1f:a4:20:a0:30:41:20:b5:57:85:7c:90: 0f:7e:68:03:92:17:23:22:da:9d:eb:65:a8:7d:cf:21:fa:93: bf:e3:fe:e9:f8:1d:1a:17:cb:1d:bc:1d:70:c4:97:c6:4c:e5: 21:73:8f:fb:eb:2e:34:cc:f4:bd:ad:19:c5:5b:18:30:b3:9c: f1:4d:45:2b:9e:73:65:64:82:11:eb:0f:97:56:d7:6e:85:c5: 7b:5f:e4:df:a9:81:a7:41:e7:2c:46:f9:c2:f2:ba:0a:7f:99: 63:7a:76:c0:b0:e6:b3:68:14:30:7a:37:1f:b3:3a:f4:cf:d4: 3d:f6:6b:3d:2b:ff:65:45:04:1b:8c:11:88:77:ce:ee:5d:cf: b3:3f:88:19:8e:b8:71:f0:ef:37:91:69:9a:34:98:12:9c:29: ea:7f:83:5c:c8:88:54:62:b3:34:b8:74:82:ef:73:18:fc:25: fd:e9:8e:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iSx526a3ng4UyWDvjc9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWJkNDU0M2RmMjlkYTY0ZTQyMzJlZjM3OTFmNTM0NTcz YzEyZjEwHhcNMjYwMTI2MDkwMTE1WhcNMjYwMTI3MDkwMTE1WjAzMTEwLwYDVQQD Eyg5MDUyMGJhZTBjYmRkMzA2ZTgyN2Q0MTI5OTliZTczYjhiN2Q0ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv19/f8xLa447caJh86RNGAEJs/D +jrFZZiPH34002nGqlrGOk46pja9OABfChhdsZZTJDtJbXXGzPoLAb7mYNX4QeZs 0FthbPXkMwFKlxf2q8UTrRkCntBw7kcqoGAfZyPrz2ReEXBUuDr0TXNWTi0mMLht LIzxKwd8k+gaYbCqBjQ29nCLBhmmXCPGKEfZyHfmJDJEggSWJfQ4WBgVs3rZ5DPX JYOZqGGbOu9JE6noXsjnGTsoZbkycXF0igOpUl8WjXQt6rzueBVOHaBClvO+2Ii6 RzVp4238b6zGxQSG+isDwCeWbNt8Cn9EVj149uURCVhLLztx0/se2IU7SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBSC64MvdMG6CfUEpmb5zuLfUhcMB8GA1UdIwQY MBaAFErr1FQ98p2mTkIy7zeR9TRXPBLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYt ZDAwMzA2M2FlNWJiLzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYtZDAwMzA2M2FlNWJi LzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOka23RL eJX2h7rumiScY8V9KiAnTuL+Vtw3mJhYGuOVxRDs+EtuueQUsNkq14+EhyHzDLXO C3tEodY/S8eGouz3Lpm8WusVDTb7pd2GH6QgoDBBILVXhXyQD35oA5IXIyLanetl qH3PIfqTv+P+6fgdGhfLHbwdcMSXxkzlIXOP++suNMz0va0ZxVsYMLOc8U1FK55z ZWSCEesPl1bXboXFe1/k36mBp0HnLEb5wvK6Cn+ZY3p2wLDms2gUMHo3H7M69M/U PfZrPSv/ZUUEG4wRiHfO7l3Psz+IGY64cfDvN5FpmjSYEpwp6n+DXMiIVGKzNLh0 gu9zGPwl/emOLw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:11 2026 by rpki-client