This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json) Hash identifier: V5NHPsCbHCmm5M0pT07aX/p/96vcE19zo905DrefpVg= Subject key identifier: FA:77:52:E6:C8:42:ED:44:C9:D7:EC:E0:8B:19:C1:DE:3B:58:54:70 Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d Certificate serial: 019C4390D358D66DD03DF6675FCDC29EE0E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft Manifest number: 1786 Signing time: Mon 09 Feb 2026 18:01:30 +0000 Manifest this update: Mon 09 Feb 2026 18:01:30 +0000 Manifest next update: Tue 10 Feb 2026 18:01:30 +0000 Files and hashes: 1: o0Ar2DETFlUxLEOkeVUWjGR8WPc.roa (hash: opuyTRQFWnU43wU694s8uEjDvDG+GMKf+lea5jnxMmc=) 2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: PqPjq9Q3g8Zo+1qUlhNgTM7Xsrhs6C0rZ7omuOFlkpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:d3:58:d6:6d:d0:3d:f6:67:5f:cd:c2:9e:e0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d Validity Not Before: Feb 9 18:01:30 2026 GMT Not After : Feb 10 18:01:30 2026 GMT Subject: CN=fa7752e6c842ed44c9d7ece08b19c1de3b585470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:37:c7:3d:fd:ad:12:d2:14:70:48:5c:0f: a0:6f:b4:bd:98:f1:76:52:ee:ce:ee:a1:5b:5c:13: 6d:70:14:38:64:2c:ed:ac:cc:8b:34:69:ad:00:5c: 71:ef:bd:77:d5:c1:b7:9f:f5:d5:99:da:0a:c2:f5: 39:c2:d4:2c:25:d5:af:bd:d5:fd:3b:e3:37:87:91: 54:99:73:27:44:34:71:82:2e:8f:65:0c:5b:40:ad: 2a:49:32:4e:b4:b5:e9:ec:31:3b:4e:dc:be:41:5d: d0:f2:97:12:77:fb:43:7c:c8:90:1c:4e:6a:29:01: 66:09:ad:26:2f:09:10:f4:c6:d2:4e:bd:a2:e2:e7: 87:2b:88:bd:9d:fe:4f:7e:0e:aa:a4:ab:c3:1f:8c: 9c:c0:17:96:9f:6c:2a:71:60:13:f7:16:15:90:95: 23:46:66:e8:79:6a:c1:cb:b1:c0:60:8d:33:32:0f: 0c:27:a9:eb:c8:f3:75:96:28:e3:cb:70:ca:dd:f7: 48:49:86:98:8f:e2:db:2d:1d:d9:0e:5b:d9:31:74: 95:7d:f7:a5:b7:3e:29:2c:b6:05:c0:8e:88:8a:07: 58:70:92:1f:a2:5e:ef:fb:54:33:bf:62:09:52:09: 9a:5c:9b:c6:46:14:b8:27:02:70:99:cb:cf:be:67: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:52:E6:C8:42:ED:44:C9:D7:EC:E0:8B:19:C1:DE:3B:58:54:70 X509v3 Authority Key Identifier: keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:da:aa:6e:b2:7c:fa:40:86:a8:35:9f:bb:46:ab:06:a0:e5: ad:04:36:98:9d:42:77:05:20:ca:22:52:ec:92:b2:36:f0:b3: cf:ce:95:db:10:e6:14:9f:44:14:43:1f:3d:8b:23:c5:96:2d: 93:f8:74:c3:66:ee:0a:2e:21:e2:a6:2d:39:af:b5:9f:aa:39: 1f:bd:c0:27:92:29:d1:8f:14:05:61:21:47:64:4c:f8:21:4a: c3:3e:52:c0:65:8d:85:f2:84:d3:74:eb:35:f0:02:d5:9f:87: f2:22:fe:eb:52:ba:28:ea:3f:eb:88:51:b9:37:2c:8d:a9:53: 39:f5:a8:b6:0d:ce:63:f6:ea:00:f5:a4:3b:8f:1a:30:73:ca: 63:d9:44:de:d6:88:2c:d8:c3:3b:32:b7:73:43:a5:4b:3c:36: 35:58:21:6b:31:ed:83:e9:f0:1a:c5:67:92:51:df:05:13:cc: 71:ab:e3:cb:c0:f9:c0:4e:7e:5f:7d:f9:52:b6:9a:a0:1d:b4: 2a:82:96:c0:78:df:fc:0f:ce:dc:80:16:d5:82:18:f3:d8:b2: b1:a4:42:ee:7b:90:79:4d:98:46:f0:f3:4e:75:32:67:1d:8e: 25:ba:eb:95:74:1a:8c:7e:57:bd:6d:af:cf:d8:7c:4e:18:68: af:fe:5a:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkNNY1m3QPfZnX83CnuDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWVmY2E4NmRlYTcwZDNlZTkwMTgxNjc4YzhlYjMwZTY5 MTZkMWQwHhcNMjYwMjA5MTgwMTMwWhcNMjYwMjEwMTgwMTMwWjAzMTEwLwYDVQQD EyhmYTc3NTJlNmM4NDJlZDQ0YzlkN2VjZTA4YjE5YzFkZTNiNTg1NDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMw3xz39rRLSFHBIXA+gb7S9mPF2 Uu7O7qFbXBNtcBQ4ZCztrMyLNGmtAFxx77131cG3n/XVmdoKwvU5wtQsJdWvvdX9 O+M3h5FUmXMnRDRxgi6PZQxbQK0qSTJOtLXp7DE7Tty+QV3Q8pcSd/tDfMiQHE5q KQFmCa0mLwkQ9MbSTr2i4ueHK4i9nf5Pfg6qpKvDH4ycwBeWn2wqcWAT9xYVkJUj RmboeWrBy7HAYI0zMg8MJ6nryPN1lijjy3DK3fdISYaYj+LbLR3ZDlvZMXSVffel tz4pLLYFwI6IigdYcJIfol7v+1Qzv2IJUgmaXJvGRhS4JwJwmcvPvmdv9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp3UubIQu1Eydfs4IsZwd47WFRwMB8GA1UdIwQY MBaAFLqe/Kht6nDT7pAYFnjI6zDmkW0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWI4MzgtNGVjZS00OTk4LThhZDgt MTdkMzFkZWU4ZTEyLzEvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWI4MzgtNGVjZS00OTk4LThhZDgtMTdkMzFkZWU4ZTEy LzEvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdqqbrJ8 +kCGqDWfu0arBqDlrQQ2mJ1CdwUgyiJS7JKyNvCzz86V2xDmFJ9EFEMfPYsjxZYt k/h0w2buCi4h4qYtOa+1n6o5H73AJ5Ip0Y8UBWEhR2RM+CFKwz5SwGWNhfKE03Tr NfAC1Z+H8iL+61K6KOo/64hRuTcsjalTOfWotg3OY/bqAPWkO48aMHPKY9lE3taI LNjDOzK3c0OlSzw2NVghazHtg+nwGsVnklHfBRPMcavjy8D5wE5+X335UraaoB20 KoKWwHjf/A/O3IAW1YIY89iysaRC7nuQeU2YRvDzTnUyZx2OJbrrlXQajH5XvW2v z9h8Thhor/5a+A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:17 2026 by rpki-client