This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json) Hash identifier: FgQmKNc1gNVt//Bf8JsVWRVa6wJYjCPAYhF9T9wVmYU= Subject key identifier: 77:10:A4:45:34:23:7B:C3:1B:C3:AE:2E:9D:00:D9:7C:45:F5:37:4A Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca Certificate serial: 019C4321F41CA563C31B9D5ED3983065864D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft Manifest number: 17F5 Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: JTACl1obxB9B8AQK4y49X1YaRVXWCh/QzRTU7R0AcR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f4:1c:a5:63:c3:1b:9d:5e:d3:98:30:65:86:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=7710a44534237bc31bc3ae2e9d00d97c45f5374a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:38:02:15:50:71:af:ef:03:da:10:4e:b4: 56:11:7f:ce:e0:48:4e:4b:05:b8:42:bc:8b:7a:b7: 54:7e:e3:44:ba:04:ae:ab:af:87:ce:05:f4:46:e0: a9:f5:c3:31:09:e7:fa:81:96:af:12:40:78:1d:f1: 88:33:9a:1c:66:0c:2d:6f:ab:32:8f:75:75:0c:8d: 19:c0:0d:c3:dc:5c:5b:e8:af:4f:ab:8d:6a:52:3b: 00:13:3a:66:86:39:80:eb:aa:4f:d3:15:f4:51:65: 51:cd:6d:a2:91:21:f8:90:a1:47:88:76:f0:f2:ed: c0:21:60:f9:e9:f2:69:67:90:60:a3:90:27:7b:f0: 92:c7:b7:f6:53:de:5f:7c:19:d5:36:eb:3e:c0:20: ff:23:a0:0a:e0:35:2d:f3:86:f8:e0:fa:80:8a:5f: 64:9f:c2:8c:9a:7e:f0:e5:03:fd:bc:0d:bd:73:d6: 11:e0:fb:5c:22:6c:02:8a:c1:b6:ad:95:76:58:29: 59:9c:28:bf:27:52:70:06:8a:f8:b9:5d:72:b3:34: ec:f1:19:1b:6d:a9:36:d8:25:ee:50:3a:59:1f:43: b7:17:53:93:dc:4a:90:4c:9b:3a:8b:d5:b2:d9:5e: 9e:3b:0f:73:7e:fa:1b:d9:2f:cc:71:52:6e:5b:c5: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:10:A4:45:34:23:7B:C3:1B:C3:AE:2E:9D:00:D9:7C:45:F5:37:4A X509v3 Authority Key Identifier: keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ab:ee:58:a1:c3:e8:95:b4:50:95:9b:2b:52:d8:08:e5:a8: 7f:71:0f:eb:5c:e5:de:b8:77:28:75:ce:0b:05:45:09:72:1e: a8:1c:06:5e:a5:7e:d6:56:7e:72:b6:89:d1:87:df:5f:bd:be: bb:d1:e0:ea:20:90:e9:c8:33:7a:c1:d0:0b:15:1c:35:44:21: 45:13:ac:3b:c1:04:a3:a1:c3:f4:f1:a5:62:b2:f4:45:07:ba: 8b:f5:59:e0:e6:72:94:cc:61:16:cc:b9:27:7c:c4:f3:5b:17: 98:54:35:e7:87:14:87:15:ac:f7:28:f5:8c:d7:83:79:79:c8: 8b:d2:78:84:c3:cd:44:e7:89:4a:9f:a2:c0:ee:9e:a6:4a:9b: 95:0c:3a:e8:58:f8:9c:8b:3b:fa:f7:69:19:cd:fc:52:c5:69: d6:14:f1:fd:db:fc:d5:3e:d0:3c:dd:44:e9:40:70:8d:e1:96: 35:79:5e:f9:87:2a:1c:06:13:d7:b5:54:4f:cc:1b:37:3c:d4: a5:fc:ac:fd:f0:e4:7a:45:6c:78:85:04:fb:4d:4a:7f:f0:eb: f1:97:f1:a5:f6:8b:4a:f7:72:8d:80:9f:8d:f9:2b:e9:41:2f: 58:b0:ac:57:7f:5d:ab:79:7c:ff:53:93:7b:ee:7d:c1:eb:06: 9f:58:bd:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfQcpWPDG51e05gwZYZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDNkN2U0NGQzN2FjNTkxMDAyNjMxOWYxMGNkZDczOTY3 ZDk3Y2EwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD Eyg3NzEwYTQ0NTM0MjM3YmMzMWJjM2FlMmU5ZDAwZDk3YzQ1ZjUzNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r84AhVQca/vA9oQTrRWEX/O4EhO SwW4QryLerdUfuNEugSuq6+HzgX0RuCp9cMxCef6gZavEkB4HfGIM5ocZgwtb6sy j3V1DI0ZwA3D3Fxb6K9Pq41qUjsAEzpmhjmA66pP0xX0UWVRzW2ikSH4kKFHiHbw 8u3AIWD56fJpZ5Bgo5Ane/CSx7f2U95ffBnVNus+wCD/I6AK4DUt84b44PqAil9k n8KMmn7w5QP9vA29c9YR4PtcImwCisG2rZV2WClZnCi/J1JwBor4uV1yszTs8Rkb bak22CXuUDpZH0O3F1OT3EqQTJs6i9Wy2V6eOw9zfvob2S/McVJuW8UlVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcQpEU0I3vDG8OuLp0A2XxF9TdKMB8GA1UdIwQY MBaAFLlD1+RNN6xZEAJjGfEM3XOWfZfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zZjMwODAtYzE5MC00ZGE2LThhYjQt MDgzZTdlNWZkNmE1LzEvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zZjMwODAtYzE5MC00ZGE2LThhYjQtMDgzZTdlNWZkNmE1 LzEvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6vuWKHD 6JW0UJWbK1LYCOWof3EP61zl3rh3KHXOCwVFCXIeqBwGXqV+1lZ+craJ0YffX72+ u9Hg6iCQ6cgzesHQCxUcNUQhRROsO8EEo6HD9PGlYrL0RQe6i/VZ4OZylMxhFsy5 J3zE81sXmFQ154cUhxWs9yj1jNeDeXnIi9J4hMPNROeJSp+iwO6epkqblQw66Fj4 nIs7+vdpGc38UsVp1hTx/dv81T7QPN1E6UBwjeGWNXle+YcqHAYT17VUT8wbNzzU pfys/fDkekVseIUE+01Kf/Dr8ZfxpfaLSvdyjYCfjfkr6UEvWLCsV39dq3l8/1OT e+59wesGn1i9Mw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:55 2026 by rpki-client