This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json) Hash identifier: c8rbYQReLhILpk4sbrG9FXVHHGZItiPflcpJgelrMIs= Subject key identifier: 16:58:8D:4C:D3:E8:86:25:B1:9F:E0:14:58:B3:24:99:1D:F9:0C:D3 Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Certificate serial: 019B6CFCB94AE75C69E7010EE64A6F477644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 02:01:00 +0000 Manifest this update: Tue 30 Dec 2025 02:01:00 +0000 Manifest next update: Wed 31 Dec 2025 02:01:00 +0000 Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: QthI9Ci0YkSbUf3dxlWDbse5e1g1z8GSFTHEu3U51/4=) 2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:b9:4a:e7:5c:69:e7:01:0e:e6:4a:6f:47:76:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Validity Not Before: Dec 30 02:01:00 2025 GMT Not After : Dec 31 02:01:00 2025 GMT Subject: CN=16588d4cd3e88625b19fe01458b324991df90cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:d2:b2:49:5c:92:97:5a:fc:e3:ff:68:8f: 0a:ae:11:f2:ed:b1:81:18:d2:16:69:e0:98:7e:33: 6e:58:44:5a:c7:e3:e4:79:4f:47:73:08:90:49:bc: 89:81:f5:ac:ba:18:0a:5d:38:77:db:68:df:a6:f9: be:7e:32:d4:d8:d5:34:06:e4:56:59:09:8a:0c:ee: f1:89:5a:9e:6e:6f:b4:e5:0d:2f:16:5e:95:fc:da: 34:d1:af:d0:9f:d9:f0:f0:62:10:80:ff:69:36:3a: 75:05:36:ec:2b:b5:84:c5:7d:d8:14:0f:62:e9:d7: 9a:7e:98:42:86:9d:de:14:64:31:4c:f4:37:e8:bf: 5f:01:23:64:d5:92:7a:4c:6b:6a:73:74:6d:62:b3: 7a:4a:0c:1c:87:31:31:9a:01:28:0a:8c:5a:e7:d0: 88:db:c2:7b:14:bf:2c:6a:2c:e5:b0:99:92:46:3a: dc:23:40:cb:22:78:63:54:31:07:8c:9f:4b:c4:2b: 54:75:11:d4:ab:df:5f:3c:25:24:82:c2:a8:c3:f4: 79:c6:42:e8:f7:d9:a1:df:97:6e:89:5c:94:31:a6: c0:34:46:47:20:2c:fb:33:99:8e:06:e4:b7:b4:dc: 3a:8e:19:03:a4:2c:48:2b:0a:16:22:33:f6:6d:a9: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:58:8D:4C:D3:E8:86:25:B1:9F:E0:14:58:B3:24:99:1D:F9:0C:D3 X509v3 Authority Key Identifier: keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b6:87:1c:39:8d:a1:35:b8:e9:ee:c1:dd:f7:55:f8:88:3f: 9c:b5:cf:b6:ce:0c:e3:20:73:1f:47:48:d1:0b:4f:14:58:8e: 85:03:dd:bb:98:bd:09:b7:86:8f:17:b1:fc:bf:70:99:07:7b: 7d:6b:e2:72:aa:7f:74:7f:11:86:c6:9d:87:87:43:6e:e7:09: f1:58:03:cf:49:ef:39:82:78:0e:2a:bf:1a:1d:68:17:42:77: 9a:f4:91:f2:e0:1f:82:6c:fd:a7:b7:50:74:e5:7d:38:be:75: fd:e0:94:a1:f3:76:91:77:54:54:07:0e:0c:ff:7f:6a:b6:0f: cf:44:c7:59:bf:9a:3a:99:32:c5:f4:58:73:10:4d:83:51:2c: 13:23:bb:56:29:cd:8e:51:3c:22:41:f2:5d:75:79:31:b4:bb: fc:74:2b:05:f0:29:8b:c1:66:e5:ab:fc:12:8b:fc:b9:9a:ed: 7a:9e:91:fb:62:25:5d:c6:02:4f:b0:80:d0:0f:11:ba:ce:4d: 45:99:89:15:18:7a:09:26:a4:47:fd:33:51:65:d7:79:fd:0a: 96:84:28:ab:89:13:d7:4c:f3:c0:a6:a0:c3:1e:e5:7b:55:34: b5:43:fa:60:88:da:7a:f0:70:6c:f7:e5:e8:b5:26:46:04:65: 97:69:f5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/LlK51xp5wEO5kpvR3ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl NTZjOTIwHhcNMjUxMjMwMDIwMTAwWhcNMjUxMjMxMDIwMTAwWjAzMTEwLwYDVQQD EygxNjU4OGQ0Y2QzZTg4NjI1YjE5ZmUwMTQ1OGIzMjQ5OTFkZjkwY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPPSsklckpda/OP/aI8KrhHy7bGB GNIWaeCYfjNuWERax+PkeU9HcwiQSbyJgfWsuhgKXTh322jfpvm+fjLU2NU0BuRW WQmKDO7xiVqebm+05Q0vFl6V/No00a/Qn9nw8GIQgP9pNjp1BTbsK7WExX3YFA9i 6deafphChp3eFGQxTPQ36L9fASNk1ZJ6TGtqc3RtYrN6SgwchzExmgEoCoxa59CI 28J7FL8saizlsJmSRjrcI0DLInhjVDEHjJ9LxCtUdRHUq99fPCUkgsKow/R5xkLo 99mh35duiVyUMabANEZHICz7M5mOBuS3tNw6jhkDpCxIKwoWIjP2bamhMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZYjUzT6IYlsZ/gFFizJJkd+QzTMB8GA1UdIwQY MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt ZWQwYTdhYmE4Y2IyLzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLaHHDmN oTW46e7B3fdV+Ig/nLXPts4M4yBzH0dI0QtPFFiOhQPdu5i9CbeGjxex/L9wmQd7 fWvicqp/dH8Rhsadh4dDbucJ8VgDz0nvOYJ4Diq/Gh1oF0J3mvSR8uAfgmz9p7dQ dOV9OL51/eCUofN2kXdUVAcODP9/arYPz0THWb+aOpkyxfRYcxBNg1EsEyO7VinN jlE8IkHyXXV5MbS7/HQrBfApi8Fm5av8Eov8uZrtep6R+2IlXcYCT7CA0A8Rus5N RZmJFRh6CSakR/0zUWXXef0KloQoq4kT10zzwKagwx7le1U0tUP6YIjaevBwbPfl 6LUmRgRll2n1UA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:48:26 2025 by rpki-client