This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft File: Suvuj-dUnRqa5Vnl2ggWQunqwng.mft (raw, json) Hash identifier: /pwi6Dka78vQ42eN1kuGXMLS4sX2Rr+UNB6RNhWjN1k= Subject key identifier: EF:71:44:57:AC:1E:B7:5C:D2:79:B1:D3:6A:8E:88:28:A6:9F:92:AB Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78 Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278 Certificate serial: 019BF6F5FEB9C3ED333F7F8BB004DC924FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 21:01:15 +0000 Manifest this update: Sun 25 Jan 2026 21:01:15 +0000 Manifest next update: Mon 26 Jan 2026 21:01:15 +0000 Files and hashes: 1: DvIXkhqBYB1CNCsvtOQdhfIz6iI.roa (hash: WtwbKx7EDAG40O4+pnLNdkRgCJIycpEiuUwlCosElYc=) 2: Suvuj-dUnRqa5Vnl2ggWQunqwng.crl (hash: PUKU12ecwn3A2YNzUQZll+51XeyZo9/nFQWoQODJuWs=) 3: XplGelg9MV7OQGXKZPX1d5s9klQ.roa (hash: 2PgymyPPcp2BExgW0hYggo5eXzv0X6o56cydo+1LOvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:fe:b9:c3:ed:33:3f:7f:8b:b0:04:dc:92:4f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278 Validity Not Before: Jan 25 21:01:15 2026 GMT Not After : Jan 26 21:01:15 2026 GMT Subject: CN=ef714457ac1eb75cd279b1d36a8e8828a69f92ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:43:4d:1d:d7:b7:17:9d:68:d2:98:c1:7e: e0:09:6f:80:42:c3:c6:e0:95:ec:8b:fc:1e:d3:54: 53:b8:b3:0c:d2:45:42:cc:7e:29:49:2f:f3:ca:d8: a7:e7:45:64:c5:58:d3:73:13:19:7f:b3:34:2b:1f: bf:89:c5:e6:58:19:3d:f2:e3:9f:30:70:d0:51:4c: d0:23:bb:19:db:cd:5d:11:38:0b:2c:dc:7e:d1:ca: 79:87:ce:04:39:5f:5a:91:a2:57:42:da:94:fe:93: e8:28:88:a2:79:12:4e:8e:74:8d:ab:42:92:f1:f3: ae:3a:b0:3f:a1:1b:a4:2e:b3:77:0c:24:ed:9f:4b: fd:d8:57:50:e2:ec:bc:51:a4:1a:7e:84:8a:5e:cb: fe:f3:1c:a9:f5:f3:5b:f1:24:5f:23:34:14:88:36: a5:40:36:95:d1:ff:41:d8:84:cf:85:c9:a1:e4:04: e2:06:50:48:8e:4c:73:d0:73:ac:0f:fd:01:29:09: 8e:92:b8:2c:bf:fe:35:fe:b1:80:2d:d3:8f:7f:65: 07:6d:fc:f2:66:51:cd:4a:c4:01:5c:e5:a7:2e:77: 11:c2:e9:20:ca:17:40:e2:f5:f3:8e:38:eb:5c:85: ef:7c:a1:2e:96:73:0c:c8:ff:e4:60:ee:60:77:74: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:71:44:57:AC:1E:B7:5C:D2:79:B1:D3:6A:8E:88:28:A6:9F:92:AB X509v3 Authority Key Identifier: keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:07:ed:12:36:e3:cd:e1:96:ab:f2:d8:f6:cf:e2:d1:30:20: 87:a7:2c:bc:cf:a8:09:a7:1f:3a:da:0b:0e:f1:49:38:a0:e9: fd:43:a0:44:7c:46:1b:95:ba:16:55:24:2d:c1:58:a8:1c:e2: 05:96:d3:94:cd:7b:7a:c6:44:ec:9d:a7:89:97:f8:29:75:90: 23:6b:20:d0:4e:f8:f4:c5:e8:f7:9d:64:90:1e:0d:51:4c:d4: 4b:ba:2c:76:34:1f:90:25:cb:c0:c2:9d:a7:e4:ec:b1:85:55: 48:58:9a:f9:4e:5b:3c:35:f1:cd:74:a3:e3:1b:d7:57:a5:69: 0a:99:b6:18:30:68:5f:1d:3b:ac:85:7a:28:05:cb:85:5d:1d: 13:3c:e1:c4:ce:03:3c:b1:bb:4e:ba:3c:16:ea:87:14:35:b4: 91:2f:34:bc:3f:db:b8:3f:e0:15:69:eb:4d:cc:8b:59:63:da: 11:92:a3:75:f6:92:0c:63:3b:13:79:46:de:1f:fd:73:1f:a3: cf:fc:69:96:71:ea:60:26:7d:25:45:a0:8e:3c:b0:e4:47:dd: 95:9a:c5:bb:e2:ac:17:d3:20:7a:97:25:25:ee:9a:31:a2:a1: 11:15:9b:66:ca:3e:fb:c3:e9:a7:3f:6f:33:77:3a:b4:75:82: e6:f7:a3:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29f65w+0zP3+LsATckk/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWJlZThmZTc1NDlkMWE5YWU1NTllNWRhMDgxNjQyZTll YWMyNzgwHhcNMjYwMTI1MjEwMTE1WhcNMjYwMTI2MjEwMTE1WjAzMTEwLwYDVQQD EyhlZjcxNDQ1N2FjMWViNzVjZDI3OWIxZDM2YThlODgyOGE2OWY5MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3VDTR3XtxedaNKYwX7gCW+AQsPG 4JXsi/we01RTuLMM0kVCzH4pSS/zytin50VkxVjTcxMZf7M0Kx+/icXmWBk98uOf MHDQUUzQI7sZ281dETgLLNx+0cp5h84EOV9akaJXQtqU/pPoKIiieRJOjnSNq0KS 8fOuOrA/oRukLrN3DCTtn0v92FdQ4uy8UaQafoSKXsv+8xyp9fNb8SRfIzQUiDal QDaV0f9B2ITPhcmh5ATiBlBIjkxz0HOsD/0BKQmOkrgsv/41/rGALdOPf2UHbfzy ZlHNSsQBXOWnLncRwukgyhdA4vXzjjjrXIXvfKEulnMMyP/kYO5gd3RGqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9xRFesHrdc0nmx02qOiCimn5KrMB8GA1UdIwQY MBaAFErr7o/nVJ0amuVZ5doIFkLp6sJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3V2dWotZFVuUnFhNVZubDJnZ1dRdW5xd25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hMTg5NjAtMmNmYS00NmI3LThlNWEt MmUyZDkzYzQ3NTRiLzEvU3V2dWotZFVuUnFhNVZubDJnZ1dRdW5xd25nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9hMTg5NjAtMmNmYS00NmI3LThlNWEtMmUyZDkzYzQ3NTRi LzEvU3V2dWotZFVuUnFhNVZubDJnZ1dRdW5xd25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwftEjbj zeGWq/LY9s/i0TAgh6csvM+oCacfOtoLDvFJOKDp/UOgRHxGG5W6FlUkLcFYqBzi BZbTlM17esZE7J2niZf4KXWQI2sg0E749MXo951kkB4NUUzUS7osdjQfkCXLwMKd p+TssYVVSFia+U5bPDXxzXSj4xvXV6VpCpm2GDBoXx07rIV6KAXLhV0dEzzhxM4D PLG7Tro8FuqHFDW0kS80vD/buD/gFWnrTcyLWWPaEZKjdfaSDGM7E3lG3h/9cx+j z/xplnHqYCZ9JUWgjjyw5EfdlZrFu+KsF9MgepclJe6aMaKhERWbZso++8Pppz9v M3c6tHWC5vejDg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:37 2026 by rpki-client