This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json) Hash identifier: FOIWAuSQIsIsz0U62/LPiQNz2pUB7iXjS4n2gjXXYN0= Subject key identifier: 5B:59:43:A6:D0:02:BC:9D:9D:82:3E:62:34:24:EF:5B:F9:FD:10:F1 Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e Certificate serial: 019B2F678EDE618BD97E68E9161B50A63FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft Manifest number: 1492 Signing time: Thu 18 Dec 2025 03:01:14 +0000 Manifest this update: Thu 18 Dec 2025 03:01:14 +0000 Manifest next update: Fri 19 Dec 2025 03:01:14 +0000 Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: 9QlvosBIhoff0C+W+zMo8Omylv7WlyAzJkNkBBNqLe0=) 2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:8e:de:61:8b:d9:7e:68:e9:16:1b:50:a6:3f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e Validity Not Before: Dec 18 03:01:14 2025 GMT Not After : Dec 19 03:01:14 2025 GMT Subject: CN=5b5943a6d002bc9d9d823e623424ef5bf9fd10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:49:d9:b9:a0:ee:7c:d2:0e:5a:7f:9f:2f: 68:5d:43:2f:14:98:da:11:10:67:14:b8:8b:10:af: 73:6c:22:d9:bd:74:a2:7c:d0:61:49:55:27:57:79: 54:e6:1d:df:23:39:8a:c8:9c:6f:38:e7:70:a3:15: 0c:ca:ac:51:9b:ab:6e:90:b0:37:9c:c4:f1:b8:6e: f2:30:5c:79:3d:44:97:f2:92:ca:0d:50:c5:c2:dd: 14:da:29:67:45:e1:84:17:09:73:77:72:2e:49:ec: 0c:f5:f4:e0:7e:ed:41:cf:72:fe:90:cd:c4:3c:59: 4f:3e:ed:77:35:f6:ef:98:ca:04:ae:55:d7:68:c2: c3:19:85:95:d4:39:f6:f7:55:8c:d4:f6:65:16:a6: 5c:e7:d6:9f:09:1f:f4:6e:e7:23:28:39:cb:3c:b4: 1b:db:1d:9c:db:01:1d:ee:1c:24:64:3b:97:e0:ad: 54:39:29:8a:3d:fb:91:4e:9a:79:45:4c:7c:4d:0f: 36:b6:09:2c:f3:42:0c:52:9f:65:f2:9f:f6:31:eb: be:8f:08:8e:ff:0c:19:6c:d1:dc:ca:d9:1b:d2:4c: 2a:f0:12:71:87:d7:2a:ee:70:e2:a0:40:cb:04:8d: 80:2a:44:51:5b:f3:50:48:56:15:6a:07:53:39:2a: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:59:43:A6:D0:02:BC:9D:9D:82:3E:62:34:24:EF:5B:F9:FD:10:F1 X509v3 Authority Key Identifier: keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fc:ff:84:8e:3f:2b:7e:39:cf:30:d2:77:4e:5e:96:21:19: 03:49:0b:aa:26:5f:f3:9b:c5:5c:ad:0a:e9:42:ab:94:8d:74: 8d:c8:79:5a:f8:22:12:5b:7e:36:36:5f:62:03:0e:95:17:b9: 82:0e:0c:58:44:a6:83:30:3d:be:97:19:50:af:b6:16:b3:89: 40:3c:e4:b1:0d:7e:e5:2b:51:4f:82:dd:0a:ab:96:4d:98:e0: 80:3f:f2:1c:fd:81:13:37:22:2e:b1:14:ca:b9:2a:54:05:2a: 63:0e:a1:ec:90:6d:ef:6c:80:94:66:2a:aa:33:c3:39:79:5d: b9:87:1c:2f:ad:2e:1a:83:55:af:c3:36:84:ee:4f:29:66:7c: 4d:ac:4b:e2:b6:41:c2:50:9e:70:eb:0b:06:08:1a:be:9b:da: 96:dd:b5:51:da:20:72:7f:dc:1d:af:39:22:6c:1b:8f:f7:cb: 45:cf:f2:2a:53:1d:13:0c:6e:47:c5:ad:97:03:81:91:90:f1: ec:e9:81:4f:80:30:6d:a7:38:5e:28:33:cf:d5:3d:9c:2c:e2: 04:7e:80:ab:91:98:4a:05:63:29:ee:0f:d1:e3:ad:01:50:c9: 06:e3:01:80:a5:f1:36:21:20:f0:a4:65:61:5d:fa:f7:b6:32: c9:70:be:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ47eYYvZfmjpFhtQpj/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz Njk5MWUwHhcNMjUxMjE4MDMwMTE0WhcNMjUxMjE5MDMwMTE0WjAzMTEwLwYDVQQD Eyg1YjU5NDNhNmQwMDJiYzlkOWQ4MjNlNjIzNDI0ZWY1YmY5ZmQxMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeBJ2bmg7nzSDlp/ny9oXUMvFJja ERBnFLiLEK9zbCLZvXSifNBhSVUnV3lU5h3fIzmKyJxvOOdwoxUMyqxRm6tukLA3 nMTxuG7yMFx5PUSX8pLKDVDFwt0U2ilnReGEFwlzd3IuSewM9fTgfu1Bz3L+kM3E PFlPPu13NfbvmMoErlXXaMLDGYWV1Dn291WM1PZlFqZc59afCR/0bucjKDnLPLQb 2x2c2wEd7hwkZDuX4K1UOSmKPfuRTpp5RUx8TQ82tgks80IMUp9l8p/2Meu+jwiO /wwZbNHcytkb0kwq8BJxh9cq7nDioEDLBI2AKkRRW/NQSFYVagdTOSqYgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtZQ6bQArydnYI+YjQk71v5/RDxMB8GA1UdIwQY MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5 LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfz/hI4/ K345zzDSd05eliEZA0kLqiZf85vFXK0K6UKrlI10jch5WvgiElt+NjZfYgMOlRe5 gg4MWESmgzA9vpcZUK+2FrOJQDzksQ1+5StRT4LdCquWTZjggD/yHP2BEzciLrEU yrkqVAUqYw6h7JBt72yAlGYqqjPDOXlduYccL60uGoNVr8M2hO5PKWZ8TaxL4rZB wlCecOsLBggavpvalt21Udogcn/cHa85Imwbj/fLRc/yKlMdEwxuR8WtlwOBkZDx 7OmBT4Awbac4Xigzz9U9nCziBH6Aq5GYSgVjKe4P0eOtAVDJBuMBgKXxNiEg8KRl YV3697YyyXC+Sg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:54:02 2025 by rpki-client