This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json) Hash identifier: Y7tl/cdCUc3scAzuuIeV4+rNpFTDVUBtBW8jcqBH9zg= Subject key identifier: 0D:D3:BA:C3:49:69:BD:D3:2C:C9:B1:39:DC:99:E7:8D:07:DB:DB:71 Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e Certificate serial: 019B1A28C977C904E357D71E23CBA7996CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft Manifest number: 1487 Signing time: Sun 14 Dec 2025 00:00:39 +0000 Manifest this update: Sun 14 Dec 2025 00:00:39 +0000 Manifest next update: Mon 15 Dec 2025 00:00:39 +0000 Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: PYq9Il9mKNwY1OvlyndwW7hUNxlRARtlBl+gTiA+hZg=) 2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:c9:77:c9:04:e3:57:d7:1e:23:cb:a7:99:6c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e Validity Not Before: Dec 14 00:00:39 2025 GMT Not After : Dec 15 00:00:39 2025 GMT Subject: CN=0dd3bac34969bdd32cc9b139dc99e78d07dbdb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:7a:78:e4:58:b7:bd:1f:d1:a7:53:c4:b3: 01:d7:2c:6f:c7:c7:db:e5:31:46:f7:89:0c:56:e7: 8c:27:8c:be:ca:23:8a:47:43:ba:f1:96:cd:ca:c7: b9:c5:11:53:68:93:54:0a:05:4e:f5:4f:a8:ad:b9: be:f7:fc:95:d3:a4:70:65:96:88:8e:25:81:5c:2f: 7b:4b:40:21:71:cc:a7:74:93:77:f4:cd:21:d5:48: be:d2:52:bc:24:f4:27:da:14:62:47:c2:61:96:02: 25:c8:af:c9:06:66:d2:65:66:e1:22:77:4c:a7:8e: e2:78:d3:58:4c:09:f9:4a:4a:85:d0:c2:39:94:d5: 5c:ff:91:5e:3e:0c:4d:a1:a2:a3:92:26:ce:17:d3: 15:6a:13:f1:a9:32:36:db:a4:9f:b2:9f:ef:b9:f1: da:83:51:c8:58:a9:9a:bf:4a:2b:a4:aa:1c:4a:9e: 2a:c8:44:7a:51:06:1f:b9:d2:a8:50:af:c3:6c:3a: f1:6d:a9:84:8d:c2:6c:1d:bd:74:77:c0:74:9a:4a: d3:05:64:7c:12:15:ca:50:bb:b4:5e:9b:f2:8c:66: d4:04:46:d8:29:15:ca:df:6b:0a:06:b5:9f:98:c5: 33:ac:76:ff:9b:f2:77:37:c0:c8:ec:95:b9:c4:8d: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D3:BA:C3:49:69:BD:D3:2C:C9:B1:39:DC:99:E7:8D:07:DB:DB:71 X509v3 Authority Key Identifier: keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:77:29:7d:57:c7:f3:50:59:fb:64:97:93:ce:7b:a8:dc:c4: e9:52:65:15:f4:7f:40:29:9a:04:9b:50:bf:a8:6a:5c:18:dd: 30:b0:4a:20:75:66:db:d9:75:96:6b:da:6f:43:c7:66:54:73: f5:92:3f:b3:e7:ea:93:a3:f8:61:fb:ac:13:05:a2:cc:5f:9f: 84:66:6b:32:e8:e7:5d:61:d9:7c:4d:92:51:1b:dd:dc:48:99: f9:90:23:27:ca:71:82:1e:62:59:07:d5:52:70:9b:28:57:27: 38:13:77:8b:1d:0f:92:b9:6a:d0:aa:85:ff:e2:a1:27:a8:43: 8a:32:70:29:06:9a:16:90:01:f7:4e:4b:b1:1e:0b:9f:48:69: 6f:ee:9c:5a:cc:c2:db:17:cc:bc:e7:6a:84:00:62:e7:7f:8d: 15:e0:52:8a:8e:49:b7:61:08:9e:06:69:d6:a8:0c:b8:ea:9d: c0:af:92:09:0a:3f:a2:47:ec:95:c2:4a:ca:a2:ed:9f:24:81: 4a:ca:46:e0:b5:70:71:bb:29:ca:dd:b6:ae:cc:19:83:14:e2: f4:ae:b1:52:0e:a3:0c:c3:19:67:fd:76:c1:b5:47:5d:f9:81: 86:64:57:03:4c:aa:20:ae:96:ac:36:dc:6b:ea:80:36:fe:75: f3:df:59:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKMl3yQTjV9ceI8unmWzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz Njk5MWUwHhcNMjUxMjE0MDAwMDM5WhcNMjUxMjE1MDAwMDM5WjAzMTEwLwYDVQQD EygwZGQzYmFjMzQ5NjliZGQzMmNjOWIxMzlkYzk5ZTc4ZDA3ZGJkYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8x6eORYt70f0adTxLMB1yxvx8fb 5TFG94kMVueMJ4y+yiOKR0O68ZbNyse5xRFTaJNUCgVO9U+orbm+9/yV06RwZZaI jiWBXC97S0AhccyndJN39M0h1Ui+0lK8JPQn2hRiR8JhlgIlyK/JBmbSZWbhIndM p47ieNNYTAn5SkqF0MI5lNVc/5FePgxNoaKjkibOF9MVahPxqTI226Sfsp/vufHa g1HIWKmav0orpKocSp4qyER6UQYfudKoUK/DbDrxbamEjcJsHb10d8B0mkrTBWR8 EhXKULu0XpvyjGbUBEbYKRXK32sKBrWfmMUzrHb/m/J3N8DI7JW5xI287QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3TusNJab3TLMmxOdyZ540H29txMB8GA1UdIwQY MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5 LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3cpfVfH 81BZ+2SXk857qNzE6VJlFfR/QCmaBJtQv6hqXBjdMLBKIHVm29l1lmvab0PHZlRz 9ZI/s+fqk6P4YfusEwWizF+fhGZrMujnXWHZfE2SURvd3EiZ+ZAjJ8pxgh5iWQfV UnCbKFcnOBN3ix0Pkrlq0KqF/+KhJ6hDijJwKQaaFpAB905LsR4Ln0hpb+6cWszC 2xfMvOdqhABi53+NFeBSio5Jt2EIngZp1qgMuOqdwK+SCQo/okfslcJKyqLtnySB SspG4LVwcbspyt22rswZgxTi9K6xUg6jDMMZZ/12wbVHXfmBhmRXA0yqIK6WrDbc a+qANv51899ZuA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:45 2025 by rpki-client