This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json) Hash identifier: 0r5ZO4bPtuquYisjX21LPCv0cNX0Am1h5tBpop2gj7A= Subject key identifier: 5E:76:4D:E9:31:2D:B4:C6:15:7B:78:B8:CE:D5:56:B6:A6:98:5B:53 Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Certificate serial: 019B4E16704DEF2AE76B02DB9245D5B4F87F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 02:00:51 +0000 Manifest this update: Wed 24 Dec 2025 02:00:51 +0000 Manifest next update: Thu 25 Dec 2025 02:00:51 +0000 Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: jypHo00Rhgg8h3M/+sPjBFcINjZH5cHAvmwx3fZJBtw=) 2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:70:4d:ef:2a:e7:6b:02:db:92:45:d5:b4:f8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Validity Not Before: Dec 24 02:00:51 2025 GMT Not After : Dec 25 02:00:51 2025 GMT Subject: CN=5e764de9312db4c6157b78b8ced556b6a6985b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:7a:8d:eb:f7:19:78:63:de:99:06:e2:79: 32:37:3d:f3:d5:fb:57:09:2c:56:28:6b:e7:5b:ea: d9:a7:a8:30:84:d0:26:2c:1b:04:2d:82:0a:02:d8: 7e:fb:4b:70:f0:b8:3e:3b:6c:5d:fd:93:58:e5:6f: ab:07:d3:c9:7d:07:56:c5:78:86:7a:05:0c:8b:b5: 79:8a:5e:67:23:db:58:c1:4c:20:ad:b5:18:74:cd: 01:c5:8b:aa:84:81:52:4d:0a:e0:69:7d:25:2d:df: 09:96:d9:c6:eb:66:66:8e:11:0e:a2:48:9c:0e:1e: da:3b:ab:e0:54:fc:26:62:64:cf:5c:10:b0:5e:d0: b1:9f:ac:aa:cd:3f:d5:bb:b4:a2:a3:dc:cb:2f:33: 28:fc:70:37:36:0c:e3:8b:3f:19:60:44:9a:8e:d6: ff:c7:91:b0:86:48:fd:1d:55:dc:bd:79:3a:e7:c3: 76:e8:77:73:98:ce:19:1c:38:72:3d:80:de:d1:4f: 7d:21:6b:4d:ff:c0:85:8c:cb:03:53:84:c0:fd:e6: 28:66:ab:48:06:e2:75:30:43:a6:c5:72:66:34:a4: cf:bc:c4:03:77:b3:e2:60:aa:d1:b7:61:c4:f3:ee: fd:51:3b:4e:cc:fb:9d:0c:fe:c6:d3:21:70:fb:da: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:76:4D:E9:31:2D:B4:C6:15:7B:78:B8:CE:D5:56:B6:A6:98:5B:53 X509v3 Authority Key Identifier: keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:eb:c2:45:14:cd:6f:14:77:e0:64:65:61:70:9b:c8:9f:5c: b6:a2:9e:3d:d5:d3:1e:7e:28:da:37:7d:3e:54:25:8e:48:fc: bd:52:dc:23:68:19:7c:4e:6b:57:ec:a9:63:f7:4f:74:27:90: 1b:25:e5:92:93:40:bf:a0:af:5d:c9:a7:8f:5d:74:a3:09:89: 0b:e7:34:22:df:25:83:96:ae:cc:68:b1:43:6e:fa:a6:79:80: ef:61:7a:54:27:c4:c7:8a:d0:6d:89:00:8d:80:ae:5c:32:77: bd:df:53:0d:8a:cd:dc:2a:72:fa:fe:de:95:59:99:df:f8:20: ec:da:f3:97:e1:c6:16:6a:16:d5:7f:df:de:91:51:12:27:db: fc:8f:77:23:b0:fc:20:69:68:41:3f:d8:fd:62:ea:9e:e3:c6: d0:3e:9a:fa:df:20:81:4e:3a:23:93:89:e8:84:11:8c:12:e2: c6:75:35:0d:15:ae:20:9e:04:4b:4a:4e:d8:4d:2a:af:61:d6: b4:e9:82:5e:cf:47:e0:53:84:20:a5:75:7c:30:4d:21:74:68: 03:2e:7c:35:9c:6f:b9:0b:0a:f5:13:b2:05:06:82:a1:b0:5b: bf:1d:8c:0d:d2:13:fd:b6:30:40:a7:12:88:51:3d:3a:4a:23: 14:bd:e2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFnBN7yrnawLbkkXVtPh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl NTZjOTIwHhcNMjUxMjI0MDIwMDUxWhcNMjUxMjI1MDIwMDUxWjAzMTEwLwYDVQQD Eyg1ZTc2NGRlOTMxMmRiNGM2MTU3Yjc4YjhjZWQ1NTZiNmE2OTg1YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz96jev3GXhj3pkG4nkyNz3z1ftX CSxWKGvnW+rZp6gwhNAmLBsELYIKAth++0tw8Lg+O2xd/ZNY5W+rB9PJfQdWxXiG egUMi7V5il5nI9tYwUwgrbUYdM0BxYuqhIFSTQrgaX0lLd8JltnG62ZmjhEOokic Dh7aO6vgVPwmYmTPXBCwXtCxn6yqzT/Vu7Sio9zLLzMo/HA3Ngzjiz8ZYESajtb/ x5Gwhkj9HVXcvXk658N26HdzmM4ZHDhyPYDe0U99IWtN/8CFjMsDU4TA/eYoZqtI BuJ1MEOmxXJmNKTPvMQDd7PiYKrRt2HE8+79UTtOzPudDP7G0yFw+9oCGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF52TekxLbTGFXt4uM7VVrammFtTMB8GA1UdIwQY MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt ZWQwYTdhYmE4Y2IyLzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuvCRRTN bxR34GRlYXCbyJ9ctqKePdXTHn4o2jd9PlQljkj8vVLcI2gZfE5rV+ypY/dPdCeQ GyXlkpNAv6CvXcmnj110owmJC+c0It8lg5auzGixQ276pnmA72F6VCfEx4rQbYkA jYCuXDJ3vd9TDYrN3Cpy+v7elVmZ3/gg7Nrzl+HGFmoW1X/f3pFREifb/I93I7D8 IGloQT/Y/WLqnuPG0D6a+t8ggU46I5OJ6IQRjBLixnU1DRWuIJ4ES0pO2E0qr2HW tOmCXs9H4FOEIKV1fDBNIXRoAy58NZxvuQsK9ROyBQaCobBbvx2MDdIT/bYwQKcS iFE9OkojFL3iAg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:25:48 2025 by rpki-client