This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json) Hash identifier: eObJ+wyokuXPZOOiJZPm5iBzAoUltNL48/dRo1aHWEI= Subject key identifier: 79:2D:21:31:37:77:0C:DB:42:EE:49:55:93:8C:62:F7:96:C9:64:44 Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019B9CD77E2F2D2784628AD62AD56848E615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft Manifest number: 089E Signing time: Thu 08 Jan 2026 09:02:06 +0000 Manifest this update: Thu 08 Jan 2026 09:02:06 +0000 Manifest next update: Fri 09 Jan 2026 09:02:06 +0000 Files and hashes: 1: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (hash: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE=) 2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: u+fbmk1wlqH4t8xpd4wwv7jx3W3nC4tLV32oIqdmrPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:d7:7e:2f:2d:27:84:62:8a:d6:2a:d5:68:48:e6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Jan 8 09:02:06 2026 GMT Not After : Jan 9 09:02:06 2026 GMT Subject: CN=792d213137770cdb42ee4955938c62f796c96444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:cf:90:ce:6b:a8:c8:ba:03:ad:b6:07:6a: 48:93:cd:c6:31:ee:a0:f6:8f:f4:ba:29:3e:00:f3: 0f:a0:34:bd:d5:ab:e3:7e:0a:4f:56:9e:a8:d0:99: cc:62:19:3d:14:79:4f:10:79:35:86:b5:3d:73:c9: 2a:d9:ee:04:b5:2f:0a:2b:08:70:ec:90:a1:98:7a: 72:90:9d:4d:01:98:06:54:e1:7e:a9:11:b9:09:31: 22:60:d2:fd:c0:fa:2e:d4:65:bf:2e:2f:17:1b:e3: eb:2b:53:0f:00:c5:c4:68:d2:b3:3a:06:fc:55:a3: 70:90:39:af:f2:16:ed:30:a5:2a:ce:e1:0a:80:0f: c0:e5:dd:86:f8:c7:96:20:ae:db:3e:7c:c4:62:e9: d3:df:84:3c:f2:d9:65:b4:20:21:69:66:f5:a6:3b: 22:d2:7f:eb:f8:7b:0b:16:8f:a9:dc:3a:de:0c:a1: 3f:3d:fb:05:55:95:a3:02:0e:e0:e8:0c:95:f0:eb: 1e:50:95:41:a1:99:ca:47:60:20:cc:f9:e8:4f:5c: b0:17:df:e9:53:ed:28:03:7b:46:e9:b0:5d:ae:b4: 76:dc:64:19:b9:46:a4:46:54:22:ec:b4:8b:98:f0: 55:72:06:c5:4e:98:c3:b1:5d:ee:0a:a7:9b:48:68: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:21:31:37:77:0C:DB:42:EE:49:55:93:8C:62:F7:96:C9:64:44 X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f6:20:2a:4c:93:b6:ea:b3:de:7a:4a:ea:7e:b5:f1:f1:7c: bf:55:ee:ad:ef:c8:8b:31:6e:8a:ad:99:aa:83:3e:2c:50:bc: b0:e9:d2:90:12:bd:fa:89:8c:3e:ac:49:99:6a:c1:52:83:04: 67:cc:79:33:b3:d0:a1:c4:0d:af:f3:1c:9e:61:c1:df:fb:ad: bb:68:5a:ed:2f:14:03:26:3a:f5:40:82:ac:77:77:a6:0a:05: 06:e9:9d:47:4a:4f:69:58:1d:c5:fb:8c:27:58:8d:db:04:6c: 41:c3:74:1b:59:d8:d6:6a:eb:7f:12:c1:10:80:72:61:bb:03: fa:33:52:07:8c:30:a9:81:f6:90:3c:3f:2d:c9:b5:fb:21:35: ea:b4:65:e0:fb:b3:f7:72:e5:a8:5b:9c:76:8d:f2:e6:5e:37: 5b:45:99:35:f3:ca:52:34:14:08:e4:38:80:48:0d:33:58:5a: 8d:df:a3:34:5f:bb:98:15:4a:11:a2:e4:4d:12:ae:e2:45:af: 68:50:27:06:b4:e2:75:8a:01:03:75:af:a1:b5:bf:d2:ec:d6: a8:12:41:9f:22:f3:04:96:ac:b4:a8:70:b5:ab:3f:be:e6:7f: 95:bd:b7:1a:82:32:2f:c8:0c:28:c7:58:3e:58:51:a6:13:8b: 8d:44:d4:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuc134vLSeEYorWKtVoSOYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjYwMTA4MDkwMjA2WhcNMjYwMTA5MDkwMjA2WjAzMTEwLwYDVQQD Eyg3OTJkMjEzMTM3NzcwY2RiNDJlZTQ5NTU5MzhjNjJmNzk2Yzk2NDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmTPkM5rqMi6A622B2pIk83GMe6g 9o/0uik+APMPoDS91avjfgpPVp6o0JnMYhk9FHlPEHk1hrU9c8kq2e4EtS8KKwhw 7JChmHpykJ1NAZgGVOF+qRG5CTEiYNL9wPou1GW/Li8XG+PrK1MPAMXEaNKzOgb8 VaNwkDmv8hbtMKUqzuEKgA/A5d2G+MeWIK7bPnzEYunT34Q88tlltCAhaWb1pjsi 0n/r+HsLFo+p3DreDKE/PfsFVZWjAg7g6AyV8OseUJVBoZnKR2AgzPnoT1ywF9/p U+0oA3tG6bBdrrR23GQZuUakRlQi7LSLmPBVcgbFTpjDsV3uCqebSGjF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHktITE3dwzbQu5JVZOMYveWyWREMB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffYgKkyT tuqz3npK6n618fF8v1Xure/IizFuiq2ZqoM+LFC8sOnSkBK9+omMPqxJmWrBUoME Z8x5M7PQocQNr/McnmHB3/utu2ha7S8UAyY69UCCrHd3pgoFBumdR0pPaVgdxfuM J1iN2wRsQcN0G1nY1mrrfxLBEIByYbsD+jNSB4wwqYH2kDw/Lcm1+yE16rRl4Puz 93LlqFucdo3y5l43W0WZNfPKUjQUCOQ4gEgNM1hajd+jNF+7mBVKEaLkTRKu4kWv aFAnBrTidYoBA3WvobW/0uzWqBJBnyLzBJastKhwtas/vuZ/lb23GoIyL8gMKMdY PlhRphOLjUTUHA== -----END CERTIFICATE-----Generated at Thu Jan 8 17:05:11 2026 by rpki-client