This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json) Hash identifier: tiMFPup+figR1jczng0cAJus7OPbWiCUEV+jPxYAUlQ= Subject key identifier: AA:80:3E:49:99:FF:1E:5A:79:B2:3C:9E:41:70:4B:F3:A1:DF:D6:4C Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Certificate serial: 019B79EDB5DA24BE66D96A65BB45001493EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft Manifest number: 0A08 Signing time: Thu 01 Jan 2026 14:19:40 +0000 Manifest this update: Thu 01 Jan 2026 14:19:40 +0000 Manifest next update: Fri 02 Jan 2026 14:19:40 +0000 Files and hashes: 1: EmCFsRB7nHcOjmkLyyE_coUmYTQ.roa (hash: e0zxqy0vwJME17A6+oI5gRAMtW4kGM5NlBGOnBwJ+9k=) 2: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: q6J8DcjhEed6KHHO1sneKLpHHkJr8/6tBlEJtnUaofE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:b5:da:24:be:66:d9:6a:65:bb:45:00:14:93:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Validity Not Before: Jan 1 14:19:40 2026 GMT Not After : Jan 2 14:19:40 2026 GMT Subject: CN=aa803e4999ff1e5a79b23c9e41704bf3a1dfd64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:e3:58:0d:0e:7e:9e:82:23:24:cf:0f:0d: 08:0b:7e:ea:a5:94:2d:88:0e:90:09:2b:98:5f:46: f0:d5:38:3c:96:21:41:74:0e:f1:8b:de:e0:6c:a0: 9e:3e:5d:e4:d8:b7:42:de:e0:a5:3a:d6:5d:93:cd: db:45:a5:51:00:dc:af:93:96:45:a4:e6:a7:07:79: e2:c9:73:3d:1d:34:69:5c:3f:63:01:86:fd:f9:b3: 92:8e:75:a8:70:4b:20:eb:bd:cd:2e:bd:01:ee:9e: 14:74:4b:d6:35:e6:10:af:95:3a:fc:8f:2f:9a:e2: 9d:a2:f5:85:52:67:a5:c2:32:53:35:ca:3e:9e:94: d6:98:c5:ed:d7:6a:e4:9f:7a:9d:6a:0c:96:8a:6d: 5b:69:73:e5:32:12:db:64:aa:a0:b2:83:fc:af:39: b7:74:9b:77:24:7c:9f:79:17:0d:a6:be:2b:d8:0d: dc:0e:cd:fc:39:4c:18:eb:f9:6e:50:38:e4:a6:96: 12:44:12:f4:85:15:ad:20:bc:54:4f:02:5f:41:bd: 28:6a:23:d6:00:08:df:54:d5:b0:02:3f:e3:6e:68: 69:8d:50:29:81:da:84:57:2b:eb:8d:fb:6a:d2:9f: 8a:28:9e:c0:e1:13:86:cf:94:42:ad:4e:3f:57:63: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:3E:49:99:FF:1E:5A:79:B2:3C:9E:41:70:4B:F3:A1:DF:D6:4C X509v3 Authority Key Identifier: keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:69:99:e8:78:16:09:cc:22:a0:f7:7d:04:96:47:16:f8:f6: 2e:fa:79:bf:3d:4e:61:8c:dd:7e:b8:6b:1e:b0:6d:38:ee:4c: 62:d3:58:49:1c:cb:4a:1a:89:19:72:da:a7:43:b0:74:81:39: 19:8f:b3:25:32:ae:52:e0:a8:28:0d:2c:cd:8e:8d:1a:ba:43: ae:cc:ca:6f:36:5f:4b:33:c1:da:60:e3:ca:52:4c:45:71:d2: 86:94:98:ff:99:83:f5:ba:82:bb:e7:5d:24:e3:c0:5b:9c:e0: 58:a5:11:03:43:e2:5d:e1:d1:15:ab:4e:70:97:42:6c:0a:cd: a5:4a:4e:16:f1:5d:a2:1d:4e:51:5b:c9:a0:6d:c1:65:39:65: 23:cb:ce:78:67:76:18:5d:b0:ee:41:36:b4:1e:9d:47:fb:d4: 12:25:f7:bc:55:f8:08:20:80:20:67:93:45:4f:af:2c:ec:90: 98:2d:07:d2:ce:c8:be:6f:e3:43:1d:1d:c8:38:27:9d:b1:d2: 72:39:a1:c9:4d:3b:0d:93:e9:67:2c:e4:a9:21:98:f8:bc:b2: 59:ba:f2:47:34:04:8c:8b:9b:d3:e2:be:06:38:5f:01:8b:21: 26:4e:57:19:1e:71:ea:8a:54:2e:e2:82:bc:93:ed:60:0b:c6: 42:14:ff:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt57bXaJL5m2Wplu0UAFJPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3 ZGI1ZWEwHhcNMjYwMTAxMTQxOTQwWhcNMjYwMTAyMTQxOTQwWjAzMTEwLwYDVQQD EyhhYTgwM2U0OTk5ZmYxZTVhNzliMjNjOWU0MTcwNGJmM2ExZGZkNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQvjWA0Ofp6CIyTPDw0IC37qpZQt iA6QCSuYX0bw1Tg8liFBdA7xi97gbKCePl3k2LdC3uClOtZdk83bRaVRANyvk5ZF pOanB3niyXM9HTRpXD9jAYb9+bOSjnWocEsg673NLr0B7p4UdEvWNeYQr5U6/I8v muKdovWFUmelwjJTNco+npTWmMXt12rkn3qdagyWim1baXPlMhLbZKqgsoP8rzm3 dJt3JHyfeRcNpr4r2A3cDs38OUwY6/luUDjkppYSRBL0hRWtILxUTwJfQb0oaiPW AAjfVNWwAj/jbmhpjVApgdqEVyvrjftq0p+KKJ7A4ROGz5RCrU4/V2PbwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqAPkmZ/x5aebI8nkFwS/Oh39ZMMB8GA1UdIwQY MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3 LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmmZ6HgW CcwioPd9BJZHFvj2Lvp5vz1OYYzdfrhrHrBtOO5MYtNYSRzLShqJGXLap0OwdIE5 GY+zJTKuUuCoKA0szY6NGrpDrszKbzZfSzPB2mDjylJMRXHShpSY/5mD9bqCu+dd JOPAW5zgWKURA0PiXeHRFatOcJdCbArNpUpOFvFdoh1OUVvJoG3BZTllI8vOeGd2 GF2w7kE2tB6dR/vUEiX3vFX4CCCAIGeTRU+vLOyQmC0H0s7Ivm/jQx0dyDgnnbHS cjmhyU07DZPpZyzkqSGY+LyyWbryRzQEjIub0+K+BjhfAYshJk5XGR5x6opULuKC vJPtYAvGQhT/XQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:04:45 2026 by rpki-client