This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json) Hash identifier: fxm8EnauD4pWwPH5EO1/ZYieVrJLO5HDqsfwuJOhQE4= Subject key identifier: 44:58:15:83:49:1E:B4:3E:70:7A:8A:66:63:B6:B0:85:AB:B9:53:51 Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019B70A28DC7E5CB19ACD571AD5F31019846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft Manifest number: 0887 Signing time: Tue 30 Dec 2025 19:00:59 +0000 Manifest this update: Tue 30 Dec 2025 19:00:59 +0000 Manifest next update: Wed 31 Dec 2025 19:00:59 +0000 Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=) 2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: wb9Gh85NXp67OP30VjAcwAzlqO60mCDakff3MZ4KPDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:8d:c7:e5:cb:19:ac:d5:71:ad:5f:31:01:98:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Dec 30 19:00:59 2025 GMT Not After : Dec 31 19:00:59 2025 GMT Subject: CN=44581583491eb43e707a8a6663b6b085abb95351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:da:da:d5:65:05:d0:fe:3d:7b:19:d2:da: d2:bf:4c:cd:17:3a:3f:ca:3f:20:5e:dc:a1:1d:3f: ca:d8:af:9b:c8:88:06:e0:1e:7e:94:2c:5a:ce:1e: d2:cd:46:a6:6b:0a:7c:cd:4b:08:24:a0:8a:e1:5f: d5:76:1d:0d:21:58:57:ec:ee:34:2a:7e:9f:d0:df: f9:6e:4e:04:e0:e2:ee:4e:d4:e2:a1:40:98:c8:90: 8f:b4:ca:f0:d3:63:5e:6c:bb:5e:e1:d3:36:5b:82: 37:59:ec:94:d4:bd:a9:2c:4e:2c:89:2b:36:ea:2a: d0:0c:87:46:2a:4f:b2:60:93:e3:9f:ce:27:4f:06: 2f:96:4d:d6:35:5e:dc:77:b6:7c:08:95:2c:84:7e: 29:cd:83:df:3f:a4:e0:57:59:aa:e7:e9:64:df:c7: 8e:d0:93:80:3a:78:dc:9a:aa:80:d9:4f:b3:c2:f7: 7e:3e:c8:17:49:e9:71:e6:25:b9:97:8e:46:33:e1: 61:b5:89:2c:7a:68:ca:14:ee:de:5c:68:6a:a7:67: dc:16:e8:8d:b2:d7:09:fd:48:3c:f1:82:51:e0:8a: 90:83:29:e0:75:6a:43:1a:22:c5:e3:25:c9:60:08: 99:f2:fa:37:7c:a1:4e:54:17:4c:20:6f:41:48:c5: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:58:15:83:49:1E:B4:3E:70:7A:8A:66:63:B6:B0:85:AB:B9:53:51 X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:36:ec:8b:b1:22:15:2a:22:a3:f9:35:ee:2e:93:bd:ea:a7: 81:c4:93:0b:37:fe:e5:31:26:69:ab:cb:b0:1f:2a:9b:14:f9: ec:1b:5f:19:4f:fd:15:f3:b7:61:7e:b5:20:bf:52:ae:8e:27: 69:fc:71:e2:c7:6c:a8:71:d0:f5:8d:e3:2c:d0:2b:58:9f:9a: 03:4b:7a:8b:7b:e8:46:fa:e7:fd:23:ee:c6:43:36:72:e9:22: 5e:f1:54:c0:e3:2c:9b:77:35:50:9b:ab:46:22:46:02:97:ea: b4:ff:4b:94:d9:d9:4a:6e:91:b6:50:13:c9:2e:2f:6e:81:4d: ab:24:67:85:a6:e8:9a:82:19:ed:31:d9:66:ac:e2:30:e3:10: 3d:aa:f6:70:a3:2f:36:df:90:f3:38:8f:b3:56:df:4f:eb:d6: 90:c2:2c:2a:1a:e4:09:21:48:7d:37:93:2f:eb:e7:a0:2d:19: ee:7d:a8:3f:f3:a0:92:de:ae:3f:1e:27:c7:b6:56:50:c3:15: ce:a5:27:8e:f9:c9:31:69:72:58:e7:0d:d9:0c:4e:c3:b4:3b: ba:85:7c:02:51:79:7b:cf:39:4e:24:ff:08:1a:c6:1c:9f:1d: 04:b1:43:83:93:8b:a7:56:e7:3d:e2:05:b2:13:85:5a:53:14: 3b:d4:5e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwoo3H5csZrNVxrV8xAZhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjUxMjMwMTkwMDU5WhcNMjUxMjMxMTkwMDU5WjAzMTEwLwYDVQQD Eyg0NDU4MTU4MzQ5MWViNDNlNzA3YThhNjY2M2I2YjA4NWFiYjk1MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaHa2tVlBdD+PXsZ0trSv0zNFzo/ yj8gXtyhHT/K2K+byIgG4B5+lCxazh7SzUamawp8zUsIJKCK4V/Vdh0NIVhX7O40 Kn6f0N/5bk4E4OLuTtTioUCYyJCPtMrw02NebLte4dM2W4I3WeyU1L2pLE4siSs2 6irQDIdGKk+yYJPjn84nTwYvlk3WNV7cd7Z8CJUshH4pzYPfP6TgV1mq5+lk38eO 0JOAOnjcmqqA2U+zwvd+PsgXSelx5iW5l45GM+FhtYksemjKFO7eXGhqp2fcFuiN stcJ/Ug88YJR4IqQgyngdWpDGiLF4yXJYAiZ8vo3fKFOVBdMIG9BSMXOJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERYFYNJHrQ+cHqKZmO2sIWruVNRMB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTbsi7Ei FSoio/k17i6TveqngcSTCzf+5TEmaavLsB8qmxT57BtfGU/9FfO3YX61IL9Sro4n afxx4sdsqHHQ9Y3jLNArWJ+aA0t6i3voRvrn/SPuxkM2cukiXvFUwOMsm3c1UJur RiJGApfqtP9LlNnZSm6RtlATyS4vboFNqyRnhabomoIZ7THZZqziMOMQPar2cKMv Nt+Q8ziPs1bfT+vWkMIsKhrkCSFIfTeTL+vnoC0Z7n2oP/Ogkt6uPx4nx7ZWUMMV zqUnjvnJMWlyWOcN2QxOw7Q7uoV8AlF5e885TiT/CBrGHJ8dBLFDg5OLp1bnPeIF shOFWlMUO9Rezg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:30 2025 by rpki-client