This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json) Hash identifier: MQ5/oclEzOJ5Fwp4N29gpYz7tcL61vWNeabbO8fiY0c= Subject key identifier: 24:F9:76:62:42:74:6C:88:E4:90:3C:D7:6B:FE:1C:AD:F6:76:0E:6A Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Certificate serial: 019C43C7020323E784508A13E3D9BD47763C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 19:00:41 +0000 Manifest this update: Mon 09 Feb 2026 19:00:41 +0000 Manifest next update: Tue 10 Feb 2026 19:00:41 +0000 Files and hashes: 1: 0qSgEj9RKFqvqN-inwjjWZFI1pg.roa (hash: k4mc0z9gAu2JzOR/GrWxi/A3ANg5O3FYVYf/5aBTRK4=) 2: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: jE76HcizDHOldn2VB5EEp1U4cAVkmFqcLf+Q7SXrnsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:02:03:23:e7:84:50:8a:13:e3:d9:bd:47:76:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Validity Not Before: Feb 9 19:00:41 2026 GMT Not After : Feb 10 19:00:41 2026 GMT Subject: CN=24f9766242746c88e4903cd76bfe1cadf6760e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:04:c7:62:7a:ca:2e:25:4e:62:4f:7e:64: c5:67:ff:f0:a7:ad:27:14:92:de:13:d0:45:dc:27: 32:78:0a:ad:2f:be:2a:4b:e2:ad:a6:bd:31:02:5b: f6:d4:b0:03:c1:13:c4:c2:b7:68:1f:5b:07:ec:e4: ca:eb:df:60:1d:aa:9a:97:64:15:22:f6:94:4f:58: 84:bf:88:d5:75:18:77:79:0a:24:66:40:37:77:16: f3:99:e0:68:7c:57:13:ed:b1:e1:91:2e:60:46:51: 10:d1:ab:1a:7c:5f:e0:05:8b:e9:e4:39:69:67:9d: bd:dd:4d:a3:3e:d3:6a:04:32:02:4d:e3:e7:a7:6d: d8:08:97:f8:91:02:f4:6a:d4:ba:46:4e:d2:c0:cb: 7a:86:cc:61:0e:fa:d0:3f:2f:17:01:6f:fc:41:86: ec:88:dd:36:38:8b:87:75:c3:1e:3a:84:8b:01:02: 80:5f:3e:21:4c:bf:6c:95:c9:10:a3:03:cf:03:36: 2f:fd:32:87:ab:9f:c0:93:8c:ab:8d:8a:89:8a:f7: 87:77:45:86:46:4f:f6:2d:f7:fa:6d:f4:cf:96:22: 3d:32:c6:ac:b6:e2:63:b0:43:aa:05:dc:94:ff:e8: 82:62:c2:37:37:59:5d:92:83:88:3a:91:ca:87:60: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F9:76:62:42:74:6C:88:E4:90:3C:D7:6B:FE:1C:AD:F6:76:0E:6A X509v3 Authority Key Identifier: keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0d:f1:aa:c0:2b:32:f3:bf:b5:f2:ab:84:1d:f2:62:a2:d8: 20:a2:b3:09:5d:f1:7f:c9:d6:bd:e4:fd:76:18:fb:ce:1a:9f: 1e:9a:d3:43:77:6a:10:4b:a9:d8:f9:a1:bb:a8:3a:4a:30:c6: 4b:7e:3d:fe:b6:0e:cb:ff:46:4c:c9:9d:9d:64:c2:6b:03:c9: b9:72:d7:86:0b:f6:ab:fc:a0:3f:37:5a:07:07:b7:47:ea:2e: 3a:5a:60:bc:09:b9:f3:1f:dc:0e:f1:ed:02:b4:5f:ba:eb:19: 71:85:e6:b4:76:3a:15:a7:ee:a9:26:ae:63:45:36:18:cb:6c: 06:cf:32:ba:74:25:00:be:b1:0c:f8:e0:a5:90:bc:1f:92:7f: f0:42:0a:d6:e3:0a:23:66:df:3d:5f:48:1a:c6:bf:de:b3:4f: a7:f2:70:c0:78:b8:b2:b5:1c:bc:0d:34:bf:23:3f:63:00:4f: 1e:18:9c:e7:d6:52:39:05:fb:b2:27:ed:3c:0f:ae:67:57:ac: b9:3a:97:3d:48:4c:6f:75:14:cf:18:c6:f7:d7:03:b2:d6:f8: e6:55:ba:32:d2:f3:75:ff:e8:c4:b5:2f:8a:5d:4d:fb:ec:6d: 59:29:3d:0c:38:9c:ef:5e:41:14:15:d4:f7:2d:77:69:6a:1d: 7c:c8:72:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxwIDI+eEUIoT49m9R3Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl NTZjOTIwHhcNMjYwMjA5MTkwMDQxWhcNMjYwMjEwMTkwMDQxWjAzMTEwLwYDVQQD EygyNGY5NzY2MjQyNzQ2Yzg4ZTQ5MDNjZDc2YmZlMWNhZGY2NzYwZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru8Ex2J6yi4lTmJPfmTFZ//wp60n FJLeE9BF3CcyeAqtL74qS+Ktpr0xAlv21LADwRPEwrdoH1sH7OTK699gHaqal2QV IvaUT1iEv4jVdRh3eQokZkA3dxbzmeBofFcT7bHhkS5gRlEQ0asafF/gBYvp5Dlp Z5293U2jPtNqBDICTePnp23YCJf4kQL0atS6Rk7SwMt6hsxhDvrQPy8XAW/8QYbs iN02OIuHdcMeOoSLAQKAXz4hTL9slckQowPPAzYv/TKHq5/Ak4yrjYqJiveHd0WG Rk/2Lff6bfTPliI9MsastuJjsEOqBdyU/+iCYsI3N1ldkoOIOpHKh2B/dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT5dmJCdGyI5JA812v+HK32dg5qMB8GA1UdIwQY MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt ZWQwYTdhYmE4Y2IyLzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA3xqsAr MvO/tfKrhB3yYqLYIKKzCV3xf8nWveT9dhj7zhqfHprTQ3dqEEup2Pmhu6g6SjDG S349/rYOy/9GTMmdnWTCawPJuXLXhgv2q/ygPzdaBwe3R+ouOlpgvAm58x/cDvHt ArRfuusZcYXmtHY6FafuqSauY0U2GMtsBs8yunQlAL6xDPjgpZC8H5J/8EIK1uMK I2bfPV9IGsa/3rNPp/JwwHi4srUcvA00vyM/YwBPHhic59ZSOQX7siftPA+uZ1es uTqXPUhMb3UUzxjG99cDstb45lW6MtLzdf/oxLUvil1N++xtWSk9DDic715BFBXU 9y13aWodfMhySg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:03 2026 by rpki-client