This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json) Hash identifier: UqjsYdIuY8QU1EHTVEfqjgiDuswbNsoHb41CJBse1/U= Subject key identifier: BB:0E:FC:68:D7:52:62:73:AE:D4:DD:09:56:8C:E8:9A:94:8B:92:14 Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1 Certificate serial: 019BF5AC1E22659D4301184E44E7BDFF4BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft Manifest number: 0BEC Signing time: Sun 25 Jan 2026 15:00:56 +0000 Manifest this update: Sun 25 Jan 2026 15:00:56 +0000 Manifest next update: Mon 26 Jan 2026 15:00:56 +0000 Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: 0BW4RAsK27MBTgNvi3Oj3Rf5QH3dPnKHuZySwRz/CuQ=) 2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:1e:22:65:9d:43:01:18:4e:44:e7:bd:ff:4b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1 Validity Not Before: Jan 25 15:00:56 2026 GMT Not After : Jan 26 15:00:56 2026 GMT Subject: CN=bb0efc68d7526273aed4dd09568ce89a948b9214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:e1:c6:ae:5b:ef:61:b4:9c:e4:ab:4f:7d: fa:c7:aa:88:f0:e8:11:fe:b4:50:20:52:fa:fd:2f: 00:0f:e4:92:70:d2:fa:50:97:d5:11:da:97:a8:2e: 1b:15:65:85:5d:44:77:d4:23:69:e7:f9:ec:a1:09: a7:f0:ca:92:d5:9e:16:2f:15:29:17:5c:53:73:4a: ba:09:9e:5f:00:1e:60:cc:a2:f3:1a:90:88:76:43: 78:dd:1a:10:2f:0f:91:82:bc:68:1d:ca:57:e1:44: a5:6b:3c:34:80:6d:e2:aa:e4:0b:15:89:d0:93:e1: a8:82:aa:a4:48:90:58:d4:44:5a:68:6d:ce:ce:70: 29:5b:40:44:96:f2:9d:01:1e:1f:3f:fa:56:90:93: 66:34:15:32:ce:65:bd:08:aa:9a:5c:7b:ca:25:8c: 17:68:13:34:79:70:a3:57:e9:3c:14:1d:fa:99:41: 9d:30:a2:84:72:4c:59:f9:e2:25:d4:57:8c:60:5b: f6:e7:c7:ab:ea:43:e5:89:68:a0:e9:3e:6b:a0:76: 59:5e:0a:c0:dd:4a:18:7d:39:54:28:e5:66:77:c5: 1a:22:59:37:6e:1d:32:65:7a:d0:e6:c9:07:d3:38: 1d:6c:19:29:79:c4:53:b0:22:e6:aa:4b:68:67:47: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:FC:68:D7:52:62:73:AE:D4:DD:09:56:8C:E8:9A:94:8B:92:14 X509v3 Authority Key Identifier: keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6e:be:ba:f2:d0:92:10:73:8c:95:77:a4:71:ce:f0:6c:da: 55:9c:9a:a2:d3:8c:6e:5c:a6:b2:aa:60:36:fd:c3:0c:c6:d5: b7:75:f2:c2:dc:4c:72:76:33:89:f1:52:e2:7a:1d:4c:92:70: 3a:1c:e8:13:a0:c2:fe:da:55:ec:83:7b:55:81:87:bc:38:17: aa:1f:f6:42:0c:77:71:ff:9b:8a:33:47:ba:2d:2b:55:7e:70: 4a:fa:b4:06:40:e0:51:03:34:e3:9a:6f:7a:2e:ac:5a:ac:ed: 88:84:0e:bf:99:71:ca:19:b0:e8:7f:cc:99:ac:0e:09:94:32: 7d:a7:3f:0e:88:a4:99:29:80:56:6b:78:85:63:33:81:a0:c3: b9:e9:53:80:d1:a3:31:98:07:0c:ec:25:0b:28:eb:87:ee:1a: 86:a3:46:b9:f9:88:4d:9b:78:e0:2f:94:b6:fb:69:1f:82:f3: 7a:f8:23:f0:98:74:ef:dd:d8:1f:77:b9:0a:0e:49:80:1f:08: d2:cf:2f:89:9d:c9:fc:44:4c:3d:56:aa:34:da:65:cb:58:85: 52:8a:bc:68:d4:ce:00:07:05:c6:27:37:67:a3:b1:df:77:d9: 7a:20:8d:f2:6a:a0:5b:f6:84:78:56:2c:c3:44:87:4f:52:50: 0c:a6:33:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rB4iZZ1DARhOROe9/0vxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWJkNDU0M2RmMjlkYTY0ZTQyMzJlZjM3OTFmNTM0NTcz YzEyZjEwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD EyhiYjBlZmM2OGQ3NTI2MjczYWVkNGRkMDk1NjhjZTg5YTk0OGI5MjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMnhxq5b72G0nOSrT336x6qI8OgR /rRQIFL6/S8AD+SScNL6UJfVEdqXqC4bFWWFXUR31CNp5/nsoQmn8MqS1Z4WLxUp F1xTc0q6CZ5fAB5gzKLzGpCIdkN43RoQLw+RgrxoHcpX4USlazw0gG3iquQLFYnQ k+GogqqkSJBY1ERaaG3OznApW0BElvKdAR4fP/pWkJNmNBUyzmW9CKqaXHvKJYwX aBM0eXCjV+k8FB36mUGdMKKEckxZ+eIl1FeMYFv258er6kPliWig6T5roHZZXgrA 3UoYfTlUKOVmd8UaIlk3bh0yZXrQ5skH0zgdbBkpecRTsCLmqktoZ0dXbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsO/GjXUmJzrtTdCVaM6JqUi5IUMB8GA1UdIwQY MBaAFErr1FQ98p2mTkIy7zeR9TRXPBLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYt ZDAwMzA2M2FlNWJiLzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYtZDAwMzA2M2FlNWJi LzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi26+uvLQ khBzjJV3pHHO8GzaVZyaotOMblymsqpgNv3DDMbVt3XywtxMcnYzifFS4nodTJJw OhzoE6DC/tpV7IN7VYGHvDgXqh/2Qgx3cf+bijNHui0rVX5wSvq0BkDgUQM045pv ei6sWqztiIQOv5lxyhmw6H/MmawOCZQyfac/DoikmSmAVmt4hWMzgaDDuelTgNGj MZgHDOwlCyjrh+4ahqNGufmITZt44C+UtvtpH4Lzevgj8Jh0793YH3e5Cg5JgB8I 0s8viZ3J/ERMPVaqNNply1iFUoq8aNTOAAcFxic3Z6Ox33fZeiCN8mqgW/aEeFYs w0SHT1JQDKYz+A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:07 2026 by rpki-client