This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json) Hash identifier: r9OJ3m0Xxlb828fRvTZyqZrU1EFrXfuqL+metH0rFwU= Subject key identifier: A8:3A:B5:40:69:2D:EA:52:8C:10:93:A2:04:BA:93:8F:98:C2:F0:EE Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019AF31BADEF4A353BA03892FAEBF940D2CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft Manifest number: 0846 Signing time: Sat 06 Dec 2025 10:01:08 +0000 Manifest this update: Sat 06 Dec 2025 10:01:08 +0000 Manifest next update: Sun 07 Dec 2025 10:01:08 +0000 Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=) 2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: kE03RYiHcPRGk47M05n5kRB1HgR/Uzpnx2CDFe1N/o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ad:ef:4a:35:3b:a0:38:92:fa:eb:f9:40:d2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Dec 6 10:01:08 2025 GMT Not After : Dec 7 10:01:08 2025 GMT Subject: CN=a83ab540692dea528c1093a204ba938f98c2f0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:32:d5:9a:d5:b1:d2:02:34:11:f8:b8:33: fb:a6:6d:4a:16:2a:be:24:04:c7:11:d3:0c:05:8b: a1:53:3a:14:2a:66:fa:c0:0b:42:40:89:2d:5a:04: 56:ab:f7:ae:eb:34:54:d8:58:58:28:13:63:9b:6d: a6:c8:23:f9:e6:0d:46:90:85:5b:b7:5f:91:50:a6: ed:e8:f3:04:26:8d:9c:bd:7e:a0:e1:c2:ba:7c:a3: 7e:38:e7:4b:ce:b7:60:cb:99:fe:0d:18:90:00:38: c0:5e:50:a8:50:fb:be:20:a7:60:5b:ba:11:b8:45: 85:72:fd:2f:1e:b4:02:5f:17:2e:a8:71:90:2b:77: 39:61:80:00:47:3e:bb:a7:15:da:c3:99:21:be:d6: 06:72:8b:a1:3b:3e:49:db:e9:c5:cb:99:19:42:eb: ee:56:04:06:f8:96:93:8c:1f:0c:32:6c:e9:c2:fa: ff:b7:6f:60:e9:b7:d0:4e:ec:ab:ef:51:37:34:2f: de:cd:f1:ae:b7:d0:d2:3e:25:36:02:d4:78:02:91: 90:74:17:91:1c:34:94:ae:4a:30:d0:02:91:94:4f: 52:f2:4e:ca:7e:ba:07:b5:f3:b4:5d:bf:9b:65:dd: 33:a4:1c:d0:d1:ce:ee:af:38:31:ae:20:71:75:b7: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:B5:40:69:2D:EA:52:8C:10:93:A2:04:BA:93:8F:98:C2:F0:EE X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:97:be:c0:27:1a:45:6c:72:6d:2c:28:51:03:49:64:9a:dd: 3c:74:21:97:1d:cb:35:1f:84:44:51:27:06:6e:09:e9:9b:ce: 55:a9:ea:bc:6b:ad:66:a9:b5:60:78:ce:f8:8d:ca:45:6d:f2: 8a:d6:5b:54:55:f5:60:a4:b0:e8:78:77:a6:8e:04:f3:e2:80: 31:b0:9d:38:7c:8d:29:5a:8b:0c:fa:51:5d:6b:4d:f4:9e:cf: 6a:58:6b:45:3f:62:70:2b:e0:60:ed:6a:e1:66:97:7c:7a:9b: ef:b8:40:93:f6:3d:23:74:e8:52:f7:d5:4e:f5:e2:4c:5f:7d: e9:65:13:60:c1:da:b9:07:4d:8e:a6:f0:64:7c:89:48:37:d5: 6b:ba:02:1d:5a:7a:83:3a:7c:46:88:7b:77:b2:fd:a1:f6:e8: 4a:74:ba:b5:04:45:68:79:6b:01:33:fb:61:ab:d3:78:c3:ac: a7:8c:37:7f:b4:bc:9a:6d:3a:76:dd:93:c9:f9:7a:e3:11:e2: 26:e7:ad:c6:74:cc:e7:b7:7a:b7:56:fc:d3:28:1c:b9:2f:49: e9:bd:d6:09:a1:27:80:72:ea:82:83:46:c2:2b:ea:09:24:da: 30:0a:cf:06:67:1c:94:9f:3d:75:f8:40:a5:1c:2e:5e:21:92: e3:dd:58:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG63vSjU7oDiS+uv5QNLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjUxMjA2MTAwMTA4WhcNMjUxMjA3MTAwMTA4WjAzMTEwLwYDVQQD EyhhODNhYjU0MDY5MmRlYTUyOGMxMDkzYTIwNGJhOTM4Zjk4YzJmMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0csy1ZrVsdICNBH4uDP7pm1KFiq+ JATHEdMMBYuhUzoUKmb6wAtCQIktWgRWq/eu6zRU2FhYKBNjm22myCP55g1GkIVb t1+RUKbt6PMEJo2cvX6g4cK6fKN+OOdLzrdgy5n+DRiQADjAXlCoUPu+IKdgW7oR uEWFcv0vHrQCXxcuqHGQK3c5YYAARz67pxXaw5khvtYGcouhOz5J2+nFy5kZQuvu VgQG+JaTjB8MMmzpwvr/t29g6bfQTuyr71E3NC/ezfGut9DSPiU2AtR4ApGQdBeR HDSUrkow0AKRlE9S8k7KfroHtfO0Xb+bZd0zpBzQ0c7urzgxriBxdbfzowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg6tUBpLepSjBCTogS6k4+YwvDuMB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApe+wCca RWxybSwoUQNJZJrdPHQhlx3LNR+ERFEnBm4J6ZvOVanqvGutZqm1YHjO+I3KRW3y itZbVFX1YKSw6Hh3po4E8+KAMbCdOHyNKVqLDPpRXWtN9J7PalhrRT9icCvgYO1q 4WaXfHqb77hAk/Y9I3ToUvfVTvXiTF996WUTYMHauQdNjqbwZHyJSDfVa7oCHVp6 gzp8Roh7d7L9ofboSnS6tQRFaHlrATP7YavTeMOsp4w3f7S8mm06dt2Tyfl64xHi JuetxnTM57d6t1b80ygcuS9J6b3WCaEngHLqgoNGwivqCSTaMArPBmcclJ89dfhA pRwuXiGS491YZg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:56 2025 by rpki-client