This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier: h1Gdlkl2g2rq3bZJk/ilIxOerYG+aAmV/ddP+5oTUxU=
Subject key identifier: 84:4B:2B:C9:E9:70:05:2C:B8:5E:72:F6:5B:E0:6B:DF:CE:E4:82:5B
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer: /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial: 019C42B4073178A319738D246F03AC512824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number: 0620
Signing time: Mon 09 Feb 2026 14:00:20 +0000
Manifest this update: Mon 09 Feb 2026 14:00:20 +0000
Manifest next update: Tue 10 Feb 2026 14:00:20 +0000
Files and hashes: 1: KgqOJvnjitpRt1U686ywPTayP5A.roa (hash: RoNo13qMkmhokM2MMXGnBD9uvJP9pS8UBZJLsr3FWfw=)
2: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: a6h78U2OXm2gAxztoc6DSTm+2ndfeQrirnHzsEXMXCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:07:31:78:a3:19:73:8d:24:6f:03:ac:51:28:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Validity
Not Before: Feb 9 14:00:20 2026 GMT
Not After : Feb 10 14:00:20 2026 GMT
Subject: CN=844b2bc9e970052cb85e72f65be06bdfcee4825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:2d:04:4b:dc:0f:77:f3:f7:bf:87:8f:2d:
56:c6:fe:a8:fb:45:df:9b:df:2e:5b:f9:21:f4:c4:
7a:f7:b8:dc:9e:07:0f:f1:74:68:ca:e2:0f:3b:0a:
4c:0c:f2:05:df:50:76:35:d9:c1:3d:7f:0f:37:29:
3f:03:b2:d8:0e:2a:ba:ca:8e:c0:81:4d:e7:98:a3:
57:40:59:b1:a3:b1:09:9e:7e:55:99:a0:b8:a8:ac:
3e:33:5d:31:4c:4b:19:1e:9a:ce:81:24:e0:76:1f:
f2:a1:a6:51:ab:b0:88:47:f2:52:ba:02:1c:07:05:
23:96:88:df:ac:1f:44:f9:f1:b4:0c:b6:ef:65:c9:
47:c0:2a:0c:79:7b:54:92:b4:3f:8d:ed:e5:1d:a3:
7b:28:8b:c3:bc:da:58:de:4c:53:61:9a:2f:a0:bd:
26:d0:67:af:14:01:e3:ae:fd:50:91:25:ca:26:61:
53:8d:02:f8:bf:0e:07:58:0a:92:3d:95:e9:8a:3b:
e4:8e:b6:8b:d0:9d:e5:b4:89:a6:8d:7f:bc:6c:87:
24:57:e5:50:be:5d:20:f7:c4:3b:80:2c:0a:c1:63:
8b:7d:25:bb:b7:c9:79:ce:1b:07:a8:7e:45:1a:78:
5d:cd:83:79:6c:38:aa:ee:b6:76:ac:a2:ca:46:a4:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:2B:C9:E9:70:05:2C:B8:5E:72:F6:5B:E0:6B:DF:CE:E4:82:5B
X509v3 Authority Key Identifier:
keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:83:2c:82:7b:c2:5f:ae:fb:c0:13:e2:9d:f3:b8:c6:41:f2:
b4:24:32:b0:41:1b:ed:45:1c:9a:6d:1f:51:aa:bf:b4:27:be:
ff:ec:51:b5:db:90:eb:34:d5:59:02:63:26:21:d7:65:26:82:
39:4c:40:eb:06:65:00:a4:d3:5e:99:8f:68:e8:6d:a8:f6:cf:
1a:f7:65:0e:06:bd:c1:92:7c:05:4e:04:39:89:b9:0a:3c:1f:
e4:19:a9:47:43:23:73:5c:5f:c8:bc:08:8e:3c:63:00:b4:bf:
47:02:15:ed:d8:d8:ee:25:0b:36:68:47:41:3a:6d:97:da:bd:
8d:97:b7:66:f8:a0:12:e1:2e:18:c5:e2:e8:d5:0e:89:c1:77:
14:b4:0b:b8:d1:ca:9a:ad:8c:a9:76:65:e7:9d:e0:94:f7:24:
a6:ee:fd:78:ed:9d:95:d0:90:89:1f:c1:81:7e:ec:7a:f5:02:
a4:a8:7c:2b:7d:1c:fa:4b:12:f3:10:ca:56:ef:49:7f:25:bd:
0a:c9:1c:00:82:9c:40:89:d2:79:a1:17:10:3c:79:27:57:10:
6c:8a:68:9c:2d:49:0f:be:29:cd:05:5a:24:ab:e9:42:4a:06:
c2:ae:b8:b6:2b:b7:0d:4e:0c:40:db:c2:93:a9:40:27:c3:50:
48:5d:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:26 2026 by rpki-client