This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json) Hash identifier: WVQuY3kUsPW5DnQPHi+1Pw2o5MsMYvDa+voUSyZV+4Q= Subject key identifier: 38:11:39:9B:93:81:AF:D7:85:0E:08:4B:09:F0:ED:68:DC:7F:79:43 Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Certificate serial: 019C40FD6E3C1E74448A057A3FE7C1752F04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft Manifest number: 168E Signing time: Mon 09 Feb 2026 06:01:16 +0000 Manifest this update: Mon 09 Feb 2026 06:01:16 +0000 Manifest next update: Tue 10 Feb 2026 06:01:16 +0000 Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: 4LemHdljKEk2MN5TrR/4DJPpm7li2bwo0xXDgEArkAo=) 2: _kIyn54Kwl02SBVsVFIcVuZztFA.roa (hash: 72qRo50GT69ynWH6rCDwF6eh8ixb9QAqQtQqlDICbx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:6e:3c:1e:74:44:8a:05:7a:3f:e7:c1:75:2f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Validity Not Before: Feb 9 06:01:16 2026 GMT Not After : Feb 10 06:01:16 2026 GMT Subject: CN=3811399b9381afd7850e084b09f0ed68dc7f7943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:3e:f4:ea:ee:7f:24:b4:59:05:96:95:ab: c5:34:ed:f8:8b:f4:bb:b3:41:47:66:b4:7f:7a:b8: bd:8a:08:e2:2a:3c:6e:b0:e8:75:34:67:5f:d9:c6: 52:fe:ea:7b:3a:28:64:c4:d6:65:9f:7a:b0:26:f0: 49:aa:14:56:10:a1:72:b5:15:a0:3b:d7:9a:a0:0c: c8:d1:29:05:b8:2f:ea:34:b2:7b:24:3e:e7:a5:5b: e7:75:cb:8a:5d:16:67:3c:23:ad:06:7b:ab:65:dd: 6d:c2:64:e4:83:22:fd:4b:55:cc:d1:0b:de:69:0c: 9a:56:70:ef:f0:49:ed:96:58:db:ac:80:48:34:04: e8:02:24:d3:92:c7:1a:62:cb:a5:0a:55:b5:6f:19: 35:ea:a7:f3:ff:6f:fd:53:1d:1c:69:4f:ab:f5:d4: 97:48:f6:cd:52:89:c5:a7:2c:33:e1:81:ae:9b:f6: 68:40:f9:97:90:5d:50:b9:e6:40:a2:de:2e:a4:f7: 4a:06:a8:5d:a3:74:4f:59:9e:39:a9:f6:eb:e8:ea: b1:96:dc:e3:74:38:85:2e:69:74:70:c7:78:b6:3f: a6:3c:14:79:25:26:a6:54:48:01:cc:f4:83:c4:e9: 6c:4b:da:69:62:e6:9a:0b:b0:35:a4:0d:1e:4c:b8: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:11:39:9B:93:81:AF:D7:85:0E:08:4B:09:F0:ED:68:DC:7F:79:43 X509v3 Authority Key Identifier: keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:c3:32:ce:9f:13:e4:a6:0b:57:28:25:be:51:d2:f9:ce: bb:3e:21:41:73:af:85:dd:7c:a3:db:56:c7:7a:6d:29:bf:4f: 05:fc:15:45:1a:40:67:b9:58:e8:24:cb:f2:9c:c8:ac:4f:8a: 6c:96:bb:f6:7e:1a:9b:53:d1:3d:68:c1:bf:39:08:03:c1:68: 00:e6:24:c5:6c:3d:3a:ab:f8:a5:be:4a:e7:84:36:b2:a1:14: 61:53:25:77:94:67:22:e8:75:0c:63:57:cb:3e:aa:a3:54:56: 12:4e:92:e6:47:45:00:9f:54:e8:20:4d:b7:ec:c3:23:5f:f7: ad:8d:35:4b:87:b8:fa:ac:65:46:8e:58:2b:b1:b3:c7:8a:0e: 22:f6:bc:5a:59:34:ca:b1:3e:70:29:20:a6:c9:e1:52:50:32: c5:87:74:d3:fc:07:6e:4b:da:97:d1:1c:42:c0:35:7c:8d:b6: 0c:d6:e9:e1:12:6c:a0:d0:a3:b1:95:54:cf:7b:5e:51:bf:f9: 3f:f7:44:79:03:a8:cc:9e:13:1b:df:8e:37:3e:10:06:e9:cd: 90:0b:99:cc:0c:92:0a:1a:f0:60:14:88:98:fb:02:5d:ca:8b: 80:19:62:ba:3b:99:00:ff:66:45:54:c2:77:81:d7:b7:bb:02: e1:cc:15:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/W48HnREigV6P+fBdS8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZThkMDg5MDlkMTg1YWY0MWQwYTBjM2JlNWVhMjhjMzUy ZjAyMjYwHhcNMjYwMjA5MDYwMTE2WhcNMjYwMjEwMDYwMTE2WjAzMTEwLwYDVQQD EygzODExMzk5YjkzODFhZmQ3ODUwZTA4NGIwOWYwZWQ2OGRjN2Y3OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttM+9OrufyS0WQWWlavFNO34i/S7 s0FHZrR/eri9igjiKjxusOh1NGdf2cZS/up7OihkxNZln3qwJvBJqhRWEKFytRWg O9eaoAzI0SkFuC/qNLJ7JD7npVvndcuKXRZnPCOtBnurZd1twmTkgyL9S1XM0Qve aQyaVnDv8EntlljbrIBINAToAiTTkscaYsulClW1bxk16qfz/2/9Ux0caU+r9dSX SPbNUonFpywz4YGum/ZoQPmXkF1QueZAot4upPdKBqhdo3RPWZ45qfbr6Oqxltzj dDiFLml0cMd4tj+mPBR5JSamVEgBzPSDxOlsS9ppYuaaC7A1pA0eTLilAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgROZuTga/XhQ4ISwnw7Wjcf3lDMB8GA1UdIwQY MBaAFEro0IkJ0YWvQdCgw75eoow1LwImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUt OTQyNTg1NmVjNTQyLzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUtOTQyNTg1NmVjNTQy LzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGzDMs6f E+SmC1coJb5R0vnOuz4hQXOvhd18o9tWx3ptKb9PBfwVRRpAZ7lY6CTL8pzIrE+K bJa79n4am1PRPWjBvzkIA8FoAOYkxWw9Oqv4pb5K54Q2sqEUYVMld5RnIuh1DGNX yz6qo1RWEk6S5kdFAJ9U6CBNt+zDI1/3rY01S4e4+qxlRo5YK7Gzx4oOIva8Wlk0 yrE+cCkgpsnhUlAyxYd00/wHbkval9EcQsA1fI22DNbp4RJsoNCjsZVUz3teUb/5 P/dEeQOozJ4TG9+ONz4QBunNkAuZzAySChrwYBSImPsCXcqLgBliujuZAP9mRVTC d4HXt7sC4cwVPg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:47 2026 by rpki-client