This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json) Hash identifier: 37qw87mfLQxYQcI2xTxN4HyYoQP9fUGbp075iO5cAto= Subject key identifier: 3C:75:D4:D3:08:61:9A:3A:DD:F0:B8:09:5A:38:B4:E3:13:8D:06:77 Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019C42EAE57C680D7123BE369242D01DC94B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 15:00:16 +0000 Manifest this update: Mon 09 Feb 2026 15:00:16 +0000 Manifest next update: Tue 10 Feb 2026 15:00:16 +0000 Files and hashes: 1: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (hash: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE=) 2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: kmT+qUynri7M9MYyyw6Itw8zU7e8lfQLC1ZbL3jmrdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e5:7c:68:0d:71:23:be:36:92:42:d0:1d:c9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Feb 9 15:00:16 2026 GMT Not After : Feb 10 15:00:16 2026 GMT Subject: CN=3c75d4d308619a3addf0b8095a38b4e3138d0677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:bf:35:dc:66:3d:c1:c1:81:23:30:39:a5: 8b:a7:36:f5:5c:56:c4:7c:44:f6:26:00:a7:59:20: ff:b7:ad:e1:4a:bc:86:6e:2b:71:89:37:73:6b:bf: 7c:10:39:3b:a0:92:d3:73:15:5c:64:27:2b:48:1f: 16:21:3c:23:8b:f0:14:21:e2:26:f3:65:5a:24:bd: 6e:76:70:17:97:04:0d:85:42:ff:09:71:25:fe:bb: a2:d4:77:04:76:48:94:6e:56:85:96:2d:b3:8d:8a: 43:9b:15:46:4d:93:d7:20:d9:28:12:a4:c6:e3:86: 2a:e9:98:27:3c:be:c0:45:cd:db:50:33:48:28:27: e0:2b:ab:e6:00:16:16:02:bb:6c:63:a1:72:97:23: 6c:aa:49:4b:47:5e:bd:7c:24:31:40:97:f5:36:12: e3:b6:b1:9d:87:54:9d:ae:2c:bf:bb:ef:66:0b:05: 36:62:4b:b5:21:4d:b3:75:68:ab:16:70:96:25:51: ee:04:d2:1e:5a:27:77:40:e7:f3:94:1d:17:a9:2d: 5d:4e:1f:0a:ae:3e:be:46:f8:ca:85:08:c4:cf:0c: 5e:2d:89:50:58:c8:fa:ea:9b:02:12:24:54:8e:83: ce:cb:fc:d0:27:6f:4b:e1:db:41:ad:d1:85:b6:5c: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:75:D4:D3:08:61:9A:3A:DD:F0:B8:09:5A:38:B4:E3:13:8D:06:77 X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:d4:ca:09:31:f5:c9:1c:81:5f:d8:53:e9:30:eb:a2:a2: d8:a8:4c:66:c2:3f:7d:89:25:81:90:e5:bf:9d:82:77:1c:29: c7:ad:32:81:63:95:46:d3:aa:38:28:f2:a7:10:82:ba:5a:dc: 69:f9:3d:e0:1f:4d:f3:f9:15:08:00:0b:8f:03:f2:85:49:28: 39:71:c1:2d:56:ba:37:43:03:6e:15:33:97:ba:06:b1:d7:a2: ae:d4:fe:ee:19:01:0b:a9:1b:82:b2:0c:e7:5e:7a:60:e7:68: d2:ef:0e:1c:75:e9:bd:ef:db:03:2e:9a:fa:16:c2:45:21:c9: 97:d8:45:38:e8:c9:e3:59:06:56:a2:b0:81:0a:40:83:30:5d: d0:57:44:4c:16:fa:17:68:e3:fe:29:ae:28:6e:3c:51:05:ea: c0:89:5f:40:90:28:ee:4a:41:c0:73:e4:64:ac:f2:94:d6:0c: 08:95:bc:83:a9:20:0c:1b:12:86:11:94:a8:72:0f:27:0d:c5: 72:71:08:63:e3:fd:88:75:e6:11:f8:76:ac:45:43:d7:8b:8a: 8e:46:b0:fb:f8:3d:82:c3:3a:95:c8:9a:2d:c4:75:46:7b:71: 79:8d:32:e2:26:66:f3:e3:7b:6d:bc:5d:17:eb:2d:9e:bf:72: 62:4e:b8:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uV8aA1xI742kkLQHclLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjYwMjA5MTUwMDE2WhcNMjYwMjEwMTUwMDE2WjAzMTEwLwYDVQQD EygzYzc1ZDRkMzA4NjE5YTNhZGRmMGI4MDk1YTM4YjRlMzEzOGQwNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuia/NdxmPcHBgSMwOaWLpzb1XFbE fET2JgCnWSD/t63hSryGbitxiTdza798EDk7oJLTcxVcZCcrSB8WITwji/AUIeIm 82VaJL1udnAXlwQNhUL/CXEl/rui1HcEdkiUblaFli2zjYpDmxVGTZPXINkoEqTG 44Yq6ZgnPL7ARc3bUDNIKCfgK6vmABYWArtsY6FylyNsqklLR169fCQxQJf1NhLj trGdh1Sdriy/u+9mCwU2Yku1IU2zdWirFnCWJVHuBNIeWid3QOfzlB0XqS1dTh8K rj6+RvjKhQjEzwxeLYlQWMj66psCEiRUjoPOy/zQJ29L4dtBrdGFtlx1IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDx11NMIYZo63fC4CVo4tOMTjQZ3MB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJPUygkx 9ckcgV/YU+kw66Ki2KhMZsI/fYklgZDlv52Cdxwpx60ygWOVRtOqOCjypxCCulrc afk94B9N8/kVCAALjwPyhUkoOXHBLVa6N0MDbhUzl7oGsdeirtT+7hkBC6kbgrIM 5156YOdo0u8OHHXpve/bAy6a+hbCRSHJl9hFOOjJ41kGVqKwgQpAgzBd0FdETBb6 F2jj/imuKG48UQXqwIlfQJAo7kpBwHPkZKzylNYMCJW8g6kgDBsShhGUqHIPJw3F cnEIY+P9iHXmEfh2rEVD14uKjkaw+/g9gsM6lciaLcR1RntxeY0y4iZm8+N7bbxd F+stnr9yYk64YA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:33 2026 by rpki-client