This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json) Hash identifier: AvKMiJBaSOSvAna2kX/l0lZD6JbTac4dBA2VA2mnflY= Subject key identifier: 9B:CE:A0:37:84:EC:19:C1:4E:52:6B:AC:DD:11:F2:7A:69:E1:76:E9 Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Certificate serial: 019C42EADFA9A0FF1C5B2A26ACBE8CD85099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 15:00:14 +0000 Manifest this update: Mon 09 Feb 2026 15:00:14 +0000 Manifest next update: Tue 10 Feb 2026 15:00:14 +0000 Files and hashes: 1: H3jTyRlviQDZUSJc8TpRwj8PKRA.roa (hash: p+++YoYuwo888NrE0/pgeoUageDuwSXAR7Cb5CIQ67s=) 2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: jYAPDYpgSxsQwbAXpfTGKGU8Zdcpltyn8r3STrSuQpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:df:a9:a0:ff:1c:5b:2a:26:ac:be:8c:d8:50:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Validity Not Before: Feb 9 15:00:14 2026 GMT Not After : Feb 10 15:00:14 2026 GMT Subject: CN=9bcea03784ec19c14e526bacdd11f27a69e176e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:06:f4:c4:72:21:ee:b2:42:4b:55:eb:24: 12:f5:ab:3c:13:f0:b6:41:aa:8b:83:92:be:c9:de: 47:cc:5c:a1:48:87:f5:7a:0d:6f:b9:37:48:14:f5: 33:45:55:a8:e6:45:2c:6f:5c:ef:9f:8c:de:2a:42: a6:72:05:a7:0f:2b:3d:58:ca:92:ad:1a:a1:b7:68: f1:e5:c3:30:d2:e9:f4:72:2b:47:92:9b:36:ce:0f: 7f:bd:12:2b:4a:21:29:18:43:54:4b:a2:4d:4c:b7: f8:fa:aa:ea:f0:d1:2d:70:df:0f:78:4e:0d:0c:79: 75:d6:13:07:67:e7:f0:e0:b8:7c:1f:80:60:25:23: 4c:1e:85:3d:27:89:e7:24:cf:df:61:8e:67:31:61: f9:9c:65:f5:60:09:55:59:62:03:19:4f:0e:80:13: 41:5c:aa:b0:6c:02:d0:63:f7:9b:9d:f1:40:99:94: f3:7f:bb:5a:15:3f:66:68:4a:75:b1:99:b6:ce:2b: 91:4b:fb:3f:7b:e7:5e:6c:67:fe:c8:f9:66:46:6d: a1:f6:57:8b:67:de:91:df:90:91:5b:d1:4c:26:c9: 07:84:7e:14:7b:00:f5:6f:fb:c7:55:aa:47:1c:f3: 25:38:37:5b:b4:50:e0:d5:56:a0:3d:d7:82:a6:5e: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:A0:37:84:EC:19:C1:4E:52:6B:AC:DD:11:F2:7A:69:E1:76:E9 X509v3 Authority Key Identifier: keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:61:cf:c4:8d:f8:55:19:9e:89:fd:66:c2:f4:78:25:29:6b: b3:5a:1f:2e:16:b1:cb:c5:e7:5e:e4:58:40:a4:32:41:8d:7d: e1:6a:e9:1f:08:14:9b:41:bd:43:b3:7b:3d:07:44:30:0d:36: 2f:69:a1:11:d2:17:b3:2e:b8:4f:be:19:d9:0b:d0:22:87:4a: a0:98:fd:a7:31:ff:22:ec:a7:71:bf:7a:87:a8:41:64:87:53: 5d:15:18:bd:c0:b5:3d:2e:48:e0:9e:b6:ea:02:fe:fe:a6:e4: dd:9b:33:76:5a:5f:4b:83:c4:88:cf:20:6c:bf:3e:5a:7f:1c: f9:01:6d:8a:da:1b:d6:cc:95:c8:3f:bd:d4:f4:72:a1:f9:36: 46:f8:c3:90:8e:b6:c7:1e:cf:1c:dc:0f:85:d5:94:a1:b6:f1: 60:4c:0b:75:f2:a1:23:e4:08:de:4d:2e:6d:f5:01:e0:30:72: 91:07:f0:95:d2:cb:70:fd:66:4b:d9:87:34:3b:86:c0:ad:1c: 8d:b9:2d:97:30:6c:7c:f8:17:e1:ef:e0:72:14:6e:e7:01:eb: 43:6f:71:27:03:d7:16:82:31:19:28:c8:ad:71:47:39:05:57: 1b:c2:91:d2:79:bd:b6:1a:dc:60:57:1d:34:cf:21:11:3e:59: 3c:0b:57:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6t+poP8cWyomrL6M2FCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4 NTA5NTUwHhcNMjYwMjA5MTUwMDE0WhcNMjYwMjEwMTUwMDE0WjAzMTEwLwYDVQQD Eyg5YmNlYTAzNzg0ZWMxOWMxNGU1MjZiYWNkZDExZjI3YTY5ZTE3NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz18G9MRyIe6yQktV6yQS9as8E/C2 QaqLg5K+yd5HzFyhSIf1eg1vuTdIFPUzRVWo5kUsb1zvn4zeKkKmcgWnDys9WMqS rRqht2jx5cMw0un0citHkps2zg9/vRIrSiEpGENUS6JNTLf4+qrq8NEtcN8PeE4N DHl11hMHZ+fw4Lh8H4BgJSNMHoU9J4nnJM/fYY5nMWH5nGX1YAlVWWIDGU8OgBNB XKqwbALQY/ebnfFAmZTzf7taFT9maEp1sZm2ziuRS/s/e+debGf+yPlmRm2h9leL Z96R35CRW9FMJskHhH4UewD1b/vHVapHHPMlODdbtFDg1VagPdeCpl74iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvOoDeE7BnBTlJrrN0R8npp4XbpMB8GA1UdIwQY MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt M2EzYTlmMDI0MmI4LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4 LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmHPxI34 VRmeif1mwvR4JSlrs1ofLhaxy8XnXuRYQKQyQY194WrpHwgUm0G9Q7N7PQdEMA02 L2mhEdIXsy64T74Z2QvQIodKoJj9pzH/Iuyncb96h6hBZIdTXRUYvcC1PS5I4J62 6gL+/qbk3ZszdlpfS4PEiM8gbL8+Wn8c+QFtitob1syVyD+91PRyofk2RvjDkI62 xx7PHNwPhdWUobbxYEwLdfKhI+QI3k0ubfUB4DBykQfwldLLcP1mS9mHNDuGwK0c jbktlzBsfPgX4e/gchRu5wHrQ29xJwPXFoIxGSjIrXFHOQVXG8KR0nm9thrcYFcd NM8hET5ZPAtXFw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:23 2026 by rpki-client