This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json) Hash identifier: gLm3HUgc6bW3JJQrdmew7o8ZQCiG9HfR5EIhmtBOIbM= Subject key identifier: D8:77:74:FD:29:77:87:23:AE:87:11:B4:DA:44:BD:55:4C:EF:E5:44 Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e Certificate serial: 019B2B8AFCA7EAA438D6B9B048A4EA953980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft Manifest number: 1490 Signing time: Wed 17 Dec 2025 09:01:27 +0000 Manifest this update: Wed 17 Dec 2025 09:01:27 +0000 Manifest next update: Thu 18 Dec 2025 09:01:27 +0000 Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: P2ZPPZDXRONmvkb7o9GLuq4Ov0i2PTXotszVdt+jfX4=) 2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:fc:a7:ea:a4:38:d6:b9:b0:48:a4:ea:95:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e Validity Not Before: Dec 17 09:01:27 2025 GMT Not After : Dec 18 09:01:27 2025 GMT Subject: CN=d87774fd29778723ae8711b4da44bd554cefe544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:ea:9c:5e:57:d0:78:44:40:a0:6a:fa:ff: 79:03:27:99:0d:bc:9e:61:d6:b1:44:e9:b9:92:90: 44:f0:b2:f4:e5:d6:ad:dc:b2:c7:fc:16:cb:4f:31: d2:f8:dd:99:cc:bb:2c:10:11:f9:e0:5f:a0:0d:ec: 8d:e4:c2:a3:d5:83:7a:91:e1:de:43:10:16:68:59: 92:30:d5:0b:52:f1:78:59:b4:9f:26:f3:c3:36:8a: b6:8c:86:d5:dd:1c:47:6c:74:51:89:47:43:81:ba: db:4f:a8:be:d1:e8:f6:0e:a7:70:b8:ec:18:00:d6: 66:89:56:39:4c:ae:80:fc:89:7e:f9:c4:87:b1:3f: b3:95:6c:42:e0:b7:93:be:e7:a4:4a:78:50:86:0f: 02:25:23:d2:39:97:77:72:df:6a:28:23:42:d4:d1: 3f:06:5a:a0:cc:26:9c:12:a1:34:53:83:ca:02:71: 6a:34:9a:b0:31:c4:0b:34:64:a5:6f:61:50:a8:a0: d8:1b:42:c7:f8:b9:d7:05:cb:fc:25:47:5d:75:ac: 1a:7c:a7:e1:84:51:75:23:11:45:fc:a0:97:9f:59: 14:bc:e4:3d:93:19:4e:39:77:12:ad:46:2f:fb:eb: 78:a9:9b:89:e4:28:c6:70:48:52:78:52:88:30:d2: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:77:74:FD:29:77:87:23:AE:87:11:B4:DA:44:BD:55:4C:EF:E5:44 X509v3 Authority Key Identifier: keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:7c:f5:60:1d:1e:9a:38:a9:66:76:b5:87:79:da:db:68:8b: 3b:fc:95:86:36:71:8a:4a:5c:23:c0:28:bf:6a:aa:96:5b:3a: 8e:3e:e5:f9:c0:7e:9f:5b:32:89:6e:b9:85:f7:96:17:64:b3: 77:9e:85:3a:01:4c:c1:0e:b3:55:8a:6b:e7:fc:aa:55:7c:a7: 2e:68:ec:08:e4:83:09:36:08:c6:ef:f1:07:23:41:4a:54:08: 3f:a3:ec:c0:46:36:ee:59:65:36:02:cb:0d:bd:78:b1:7c:c3: 75:b9:bc:09:bd:18:c8:51:b0:5f:5c:23:c5:c5:ce:82:1f:46: e3:a2:c3:a5:d8:9f:e6:12:5b:1f:73:34:e7:a4:26:d4:cd:ef: bd:7d:99:85:a1:f9:f7:c6:93:d2:c9:c4:78:8f:59:5b:ff:8b: bc:e0:d8:a5:a6:0e:34:b8:14:63:be:06:93:6f:3a:2a:c6:77: 9a:c1:9b:58:0f:0d:bb:ef:75:8b:b7:ba:b9:43:9c:72:1d:b1: 42:89:6e:9e:c5:9c:ab:d7:5c:7b:30:48:2a:a1:26:d1:6e:69: 19:3b:74:ea:b0:cd:5f:db:4e:d2:0f:af:d4:53:85:e5:42:3f: 34:a9:26:11:82:ec:6f:63:3f:56:0a:5c:34:d8:db:66:a0:10: 35:9e:f1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrivyn6qQ41rmwSKTqlTmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz Njk5MWUwHhcNMjUxMjE3MDkwMTI3WhcNMjUxMjE4MDkwMTI3WjAzMTEwLwYDVQQD EyhkODc3NzRmZDI5Nzc4NzIzYWU4NzExYjRkYTQ0YmQ1NTRjZWZlNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46nqnF5X0HhEQKBq+v95AyeZDbye YdaxROm5kpBE8LL05dat3LLH/BbLTzHS+N2ZzLssEBH54F+gDeyN5MKj1YN6keHe QxAWaFmSMNULUvF4WbSfJvPDNoq2jIbV3RxHbHRRiUdDgbrbT6i+0ej2DqdwuOwY ANZmiVY5TK6A/Il++cSHsT+zlWxC4LeTvuekSnhQhg8CJSPSOZd3ct9qKCNC1NE/ BlqgzCacEqE0U4PKAnFqNJqwMcQLNGSlb2FQqKDYG0LH+LnXBcv8JUdddawafKfh hFF1IxFF/KCXn1kUvOQ9kxlOOXcSrUYv++t4qZuJ5CjGcEhSeFKIMNLhwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNh3dP0pd4cjrocRtNpEvVVM7+VEMB8GA1UdIwQY MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5 LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA13z1YB0e mjipZna1h3na22iLO/yVhjZxikpcI8Aov2qqlls6jj7l+cB+n1syiW65hfeWF2Sz d56FOgFMwQ6zVYpr5/yqVXynLmjsCOSDCTYIxu/xByNBSlQIP6PswEY27lllNgLL Db14sXzDdbm8Cb0YyFGwX1wjxcXOgh9G46LDpdif5hJbH3M056Qm1M3vvX2ZhaH5 98aT0snEeI9ZW/+LvODYpaYONLgUY74Gk286KsZ3msGbWA8Nu+91i7e6uUOcch2x QolunsWcq9dcezBIKqEm0W5pGTt06rDNX9tO0g+v1FOF5UI/NKkmEYLsb2M/Vgpc NNjbZqAQNZ7xuA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:06 2025 by rpki-client