This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json) Hash identifier: ZS+Nfiwqzm43cbdNKgkiWfU7BWInPhWQg6NGnxcbd1g= Subject key identifier: A8:FA:10:D4:55:F6:84:C7:DC:27:EE:81:A1:85:F3:F3:06:0A:4A:94 Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019B8D633908DD5CE23F3B1DBF840602755B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft Manifest number: 0896 Signing time: Mon 05 Jan 2026 09:00:48 +0000 Manifest this update: Mon 05 Jan 2026 09:00:48 +0000 Manifest next update: Tue 06 Jan 2026 09:00:48 +0000 Files and hashes: 1: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (hash: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE=) 2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: FPXDj5p6rVKk/IMEi0zDsAIxb+8oUkZ8waqZudys+8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:63:39:08:dd:5c:e2:3f:3b:1d:bf:84:06:02:75:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Jan 5 09:00:48 2026 GMT Not After : Jan 6 09:00:48 2026 GMT Subject: CN=a8fa10d455f684c7dc27ee81a185f3f3060a4a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:3e:d1:9e:ec:c7:ba:bd:6b:69:24:67:3d: de:c6:d1:0c:b5:6d:61:ce:d1:fd:74:f6:9f:a9:c3: 0f:9f:85:28:1e:b4:48:37:2c:c7:65:04:cb:59:ad: 93:9c:2d:a3:37:ce:8e:0e:10:98:f5:3e:ea:45:ff: bf:04:d1:b8:41:47:52:a1:12:f4:4a:d7:30:03:4b: 0f:1a:c7:e9:49:ff:21:8f:01:b9:34:43:45:ee:e1: db:af:07:0c:a3:88:6b:c5:91:b8:7b:f3:6d:0b:17: 91:a0:69:d9:e3:44:22:70:25:09:08:8e:7e:32:f3: 05:ad:40:d0:4e:7b:d3:b0:77:60:71:73:2b:cb:0e: 6f:2b:df:0e:0f:4b:6d:39:4a:c7:79:fb:12:4b:7c: 5c:50:ac:eb:1e:a8:8a:ab:89:17:0d:80:ef:31:11: fd:d9:71:85:1a:cc:f1:c3:d2:48:bb:8d:c6:98:ac: 8d:d1:2b:64:71:9c:b3:bd:84:7d:f9:95:dd:ad:a4: 5e:e9:d1:fa:2b:b1:5c:b4:c0:8c:b9:17:57:15:42: ba:20:99:b3:c4:62:20:0c:4e:53:63:ce:55:1e:cc: df:80:2b:82:40:d1:da:cc:e9:5f:6d:23:98:da:13: a3:98:34:1d:c4:98:8e:ec:59:20:55:86:82:58:73: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FA:10:D4:55:F6:84:C7:DC:27:EE:81:A1:85:F3:F3:06:0A:4A:94 X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:34:9f:ad:db:40:f6:0a:fd:cb:a7:a6:f8:83:71:44:55:a3: 6a:ea:70:40:9c:c0:f3:a2:29:92:50:43:5b:c0:ee:a6:5e:f8: b6:98:b6:44:f0:c3:f9:16:f7:01:84:9b:72:f6:f8:fe:1b:d4: 96:d4:44:13:8a:b4:73:06:8d:ed:e1:3c:44:1d:9a:e0:7f:7c: 7c:f6:5d:a5:fd:ed:84:18:9b:3a:0b:04:1b:cc:5c:37:b1:86: aa:a4:8f:c2:09:e2:02:05:5e:ae:3f:49:68:8f:9c:10:38:fe: 47:8d:26:a1:97:4d:37:44:75:f6:7e:93:26:ce:a1:19:48:23: 5c:85:49:de:38:27:10:ac:98:57:6b:d0:e2:79:a7:29:13:55: 2a:64:1b:1d:da:a9:42:28:4d:f9:20:d4:59:28:d4:4f:c1:5f: 9d:bc:c1:4a:1b:be:78:9e:a0:bd:23:e9:1d:ba:bd:da:63:d4: 70:75:89:04:cb:33:a2:e2:f9:dd:39:d8:80:2b:c6:85:4b:81: 79:8f:6c:58:5b:8f:2e:d2:c4:02:ac:3d:11:27:07:7b:88:e5: cf:eb:e0:6c:fd:ef:5e:cd:d3:e9:f3:c6:a7:fa:01:a6:ff:0e: 6b:c8:71:a0:29:06:cd:42:74:2c:0c:d6:32:38:56:b3:9d:23: b1:14:df:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuNYzkI3VziPzsdv4QGAnVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjYwMTA1MDkwMDQ4WhcNMjYwMTA2MDkwMDQ4WjAzMTEwLwYDVQQD EyhhOGZhMTBkNDU1ZjY4NGM3ZGMyN2VlODFhMTg1ZjNmMzA2MGE0YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru8+0Z7sx7q9a2kkZz3extEMtW1h ztH9dPafqcMPn4UoHrRINyzHZQTLWa2TnC2jN86ODhCY9T7qRf+/BNG4QUdSoRL0 StcwA0sPGsfpSf8hjwG5NENF7uHbrwcMo4hrxZG4e/NtCxeRoGnZ40QicCUJCI5+ MvMFrUDQTnvTsHdgcXMryw5vK98OD0ttOUrHefsSS3xcUKzrHqiKq4kXDYDvMRH9 2XGFGszxw9JIu43GmKyN0StkcZyzvYR9+ZXdraRe6dH6K7FctMCMuRdXFUK6IJmz xGIgDE5TY85VHszfgCuCQNHazOlfbSOY2hOjmDQdxJiO7FkgVYaCWHNlkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj6ENRV9oTH3CfugaGF8/MGCkqUMB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjSfrdtA 9gr9y6em+INxRFWjaupwQJzA86IpklBDW8Dupl74tpi2RPDD+Rb3AYSbcvb4/hvU ltREE4q0cwaN7eE8RB2a4H98fPZdpf3thBibOgsEG8xcN7GGqqSPwgniAgVerj9J aI+cEDj+R40moZdNN0R19n6TJs6hGUgjXIVJ3jgnEKyYV2vQ4nmnKRNVKmQbHdqp QihN+SDUWSjUT8FfnbzBShu+eJ6gvSPpHbq92mPUcHWJBMszouL53TnYgCvGhUuB eY9sWFuPLtLEAqw9EScHe4jlz+vgbP3vXs3T6fPGp/oBpv8Oa8hxoCkGzUJ0LAzW MjhWs50jsRTfQA== -----END CERTIFICATE-----Generated at Mon Jan 5 19:13:38 2026 by rpki-client