This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json) Hash identifier: C2DLDqq6zy2limd3UT9kuRVP+V6ZK8wRj4Nka/t0fTM= Subject key identifier: 58:96:5B:0F:F6:A2:AC:C9:FB:69:C9:E2:45:3A:C2:8D:D0:72:8C:CB Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019B5599768D02B7A514160917A5F5F288AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft Manifest number: 0879 Signing time: Thu 25 Dec 2025 13:01:19 +0000 Manifest this update: Thu 25 Dec 2025 13:01:19 +0000 Manifest next update: Fri 26 Dec 2025 13:01:19 +0000 Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=) 2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: pEyRTsCRLqM5IlTB/bCbR/ZDi4lgPtRJiavcRvfHIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:76:8d:02:b7:a5:14:16:09:17:a5:f5:f2:88:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Dec 25 13:01:19 2025 GMT Not After : Dec 26 13:01:19 2025 GMT Subject: CN=58965b0ff6a2acc9fb69c9e2453ac28dd0728ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:1f:81:6d:c5:7f:08:b7:e0:73:45:06:4c: fe:a2:b0:0b:91:1c:81:4b:cf:a0:bd:74:b7:61:9c: 3d:a9:8d:dc:95:e2:42:c2:f6:21:34:5d:58:9c:40: 74:0e:89:d8:2e:66:c8:e2:83:30:be:0b:28:f8:4c: 2c:de:66:55:fd:73:00:c0:a2:24:a7:af:ab:b6:79: b2:e0:33:02:34:a8:8a:36:cb:b4:53:d5:48:1c:53: 7c:61:6d:9a:28:3d:18:c7:06:6a:ef:49:14:54:df: 43:ff:59:56:b5:e2:1a:2f:0f:1f:00:17:97:5b:f9: 8e:d6:4c:55:d3:d4:07:e2:04:c1:b1:e5:58:dc:a5: bd:d0:b2:68:a6:69:39:96:53:2e:29:29:cb:20:c2: be:58:3d:26:32:f5:67:59:df:fe:bf:a4:ce:a5:58: 6f:70:ce:14:9f:91:d9:bb:d2:01:8d:6c:e5:48:59: cc:9a:7c:f8:61:89:68:e0:d8:03:49:c6:f9:2e:ae: 5e:be:2c:01:46:13:6f:a9:e2:e8:76:19:19:4d:f2: 28:64:b1:f5:ed:44:8b:4a:62:cb:fd:a7:93:12:5e: 02:8e:0e:a7:4c:28:23:f8:08:33:38:fa:78:b9:46: 2c:89:5e:40:be:a0:6d:ef:bb:2e:0a:d5:51:70:d8: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:96:5B:0F:F6:A2:AC:C9:FB:69:C9:E2:45:3A:C2:8D:D0:72:8C:CB X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:19:b9:cc:c6:21:26:dc:bd:40:ce:3a:3d:fe:f6:b1:e0:db: c0:24:0c:d0:fe:de:e0:70:34:52:cf:9e:2c:e2:59:cd:0c:6c: 09:e2:d3:5c:d6:11:e3:95:4d:c0:b7:31:4b:a2:8a:d7:38:f2: 09:6d:5d:16:e2:57:a3:eb:b6:97:f1:57:e6:7b:25:39:6f:d2: c7:08:f0:e4:49:9d:8b:8f:36:a2:ca:ad:d9:34:f4:98:32:4b: 83:e2:0a:9a:d1:43:e1:96:8e:37:a7:6f:80:92:1d:24:ef:60: 19:db:b1:8b:4f:17:29:5a:09:08:03:64:b9:95:ad:bc:64:db: 77:51:59:c9:33:60:71:9a:f3:be:76:92:d6:40:79:45:1b:3a: 62:72:6c:02:9c:fe:ef:43:dd:6a:62:a1:c5:c2:67:2f:c2:c5: dc:4f:f5:2d:28:5e:7c:da:80:30:4c:b7:13:70:f6:7c:58:40: f1:af:83:10:16:36:c7:d6:b2:97:d7:e4:df:32:f8:72:52:fa: 77:96:be:e4:7e:74:1b:93:be:6b:79:a8:b6:8a:f9:d3:9d:d5: 58:3d:5b:fc:ed:1c:13:2a:73:e2:3e:7e:73:5e:a3:b5:26:2d: 5f:4e:b0:14:20:f4:ae:70:0b:4b:15:3f:4d:dc:cf:e9:99:c1: 3c:79:ce:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmXaNArelFBYJF6X18oivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjUxMjI1MTMwMTE5WhcNMjUxMjI2MTMwMTE5WjAzMTEwLwYDVQQD Eyg1ODk2NWIwZmY2YTJhY2M5ZmI2OWM5ZTI0NTNhYzI4ZGQwNzI4Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0gfgW3Ffwi34HNFBkz+orALkRyB S8+gvXS3YZw9qY3cleJCwvYhNF1YnEB0DonYLmbI4oMwvgso+Ews3mZV/XMAwKIk p6+rtnmy4DMCNKiKNsu0U9VIHFN8YW2aKD0YxwZq70kUVN9D/1lWteIaLw8fABeX W/mO1kxV09QH4gTBseVY3KW90LJopmk5llMuKSnLIMK+WD0mMvVnWd/+v6TOpVhv cM4Un5HZu9IBjWzlSFnMmnz4YYlo4NgDScb5Lq5eviwBRhNvqeLodhkZTfIoZLH1 7USLSmLL/aeTEl4Cjg6nTCgj+AgzOPp4uUYsiV5AvqBt77suCtVRcNhZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiWWw/2oqzJ+2nJ4kU6wo3QcozLMB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBm5zMYh Jty9QM46Pf72seDbwCQM0P7e4HA0Us+eLOJZzQxsCeLTXNYR45VNwLcxS6KK1zjy CW1dFuJXo+u2l/FX5nslOW/Sxwjw5Emdi482osqt2TT0mDJLg+IKmtFD4ZaON6dv gJIdJO9gGduxi08XKVoJCANkuZWtvGTbd1FZyTNgcZrzvnaS1kB5RRs6YnJsApz+ 70PdamKhxcJnL8LF3E/1LShefNqAMEy3E3D2fFhA8a+DEBY2x9ayl9fk3zL4clL6 d5a+5H50G5O+a3motor5053VWD1b/O0cEypz4j5+c16jtSYtX06wFCD0rnALSxU/ TdzP6ZnBPHnO2g== -----END CERTIFICATE-----Generated at Thu Dec 25 15:41:59 2025 by rpki-client