This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json) Hash identifier: MH4admoXn7ngOdDVmP1wPPDSjJLm4bOLh0WGPkaeU1w= Subject key identifier: 8A:67:B5:B7:B2:58:D4:6C:47:EC:57:47:DC:ED:9D:85:16:9B:50:97 Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e Certificate serial: 019AF19ABDDC975E1CAA91DD2820AFDA7957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft Manifest number: 1472 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: 9mHkZqX6LT6abrmkAiVl85Mt5SOZpnHHgiIfL95Nb+0=) 2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bd:dc:97:5e:1c:aa:91:dd:28:20:af:da:79:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=8a67b5b7b258d46c47ec5747dced9d85169b5097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:cc:bb:02:fe:8d:09:73:27:c9:80:0b:a9: 7a:ad:a0:14:80:3f:9d:d7:46:b3:fa:5a:bd:a8:a5: 75:5a:c3:99:5a:6f:76:e8:68:9a:50:21:a2:26:0c: 2e:26:d0:7d:ca:56:db:75:f5:32:0c:69:0e:db:5d: 4f:13:dc:97:54:27:32:64:bc:d2:56:94:38:89:76: 50:97:db:d2:84:16:7b:19:60:77:ea:d4:85:cc:31: 3f:76:d4:29:41:6f:50:59:33:94:1c:ba:0f:cb:30: 11:c5:11:c4:09:37:40:bb:25:9a:f0:b7:31:48:b7: c2:b2:f1:bf:7a:ee:6f:3e:7d:b9:10:9d:88:06:80: ae:b6:a7:3c:e3:66:56:37:86:8d:09:ee:b6:92:08: 49:60:33:21:5a:c5:15:fe:63:b9:24:d4:d7:d4:91: 3c:d6:e9:1d:60:e1:fd:57:6a:0b:cc:da:73:31:cc: e9:d4:b5:2d:6a:ae:f7:ce:2a:87:99:6a:41:bd:e6: 90:c9:cf:01:d5:69:67:3a:24:cc:3c:6b:ab:05:81: 86:8c:36:66:75:82:97:67:0d:56:2a:4c:39:61:64: d5:b6:ed:3f:c0:2c:e2:e6:c0:44:c4:ec:c9:b8:95: 38:d4:a8:d2:66:69:e4:60:7b:70:58:69:0a:a7:6c: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:67:B5:B7:B2:58:D4:6C:47:EC:57:47:DC:ED:9D:85:16:9B:50:97 X509v3 Authority Key Identifier: keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:2a:11:b9:33:d7:de:43:66:74:ea:01:f3:96:e2:62:d4:9b: 7b:21:6e:bb:4a:b6:b6:a8:bb:e3:6d:97:0b:04:1b:99:36:b9: cf:d9:76:15:45:f0:50:4e:2d:b2:f0:77:a0:29:ae:32:08:5b: f9:9b:87:36:9a:63:36:2c:c0:63:26:12:18:04:fb:1c:3e:6d: c4:f1:f3:00:f7:c8:ad:13:ea:9c:fb:20:eb:e8:6d:76:10:70: 1f:15:7f:31:32:2f:c3:b3:6d:a4:90:9d:47:83:71:4d:d5:0a: 57:ce:f2:f4:7e:ea:a6:de:6b:f1:84:1d:6d:42:c2:c0:8b:0b: 7b:b0:9f:2d:9c:8f:af:6b:f5:89:93:4b:d7:a7:13:c9:23:8d: ff:7d:38:f9:9f:9e:cb:90:94:a1:8e:00:c0:34:a0:3c:b9:3d: 4c:d5:89:c6:c4:ed:c8:83:cc:37:c7:f8:89:7f:95:f0:94:55: 19:92:9c:29:59:48:e9:84:45:fd:8b:55:65:34:55:53:dc:ba: bc:84:be:f4:39:43:96:0f:b5:11:84:61:bb:85:15:27:a5:8b: 76:91:22:f8:ad:e9:bb:76:63:7a:66:4b:70:27:bd:8a:22:80: c1:d7:b4:bb:2a:92:f0:d2:cd:d4:0f:87:06:a8:67:57:4b:f2: 64:b5:b0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr3cl14cqpHdKCCv2nlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz Njk5MWUwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD Eyg4YTY3YjViN2IyNThkNDZjNDdlYzU3NDdkY2VkOWQ4NTE2OWI1MDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnDMuwL+jQlzJ8mAC6l6raAUgD+d 10az+lq9qKV1WsOZWm926GiaUCGiJgwuJtB9ylbbdfUyDGkO211PE9yXVCcyZLzS VpQ4iXZQl9vShBZ7GWB36tSFzDE/dtQpQW9QWTOUHLoPyzARxRHECTdAuyWa8Lcx SLfCsvG/eu5vPn25EJ2IBoCutqc842ZWN4aNCe62kghJYDMhWsUV/mO5JNTX1JE8 1ukdYOH9V2oLzNpzMczp1LUtaq73ziqHmWpBveaQyc8B1WlnOiTMPGurBYGGjDZm dYKXZw1WKkw5YWTVtu0/wCzi5sBExOzJuJU41KjSZmnkYHtwWGkKp2xUfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpntbeyWNRsR+xXR9ztnYUWm1CXMB8GA1UdIwQY MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5 LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4SoRuTPX 3kNmdOoB85biYtSbeyFuu0q2tqi7422XCwQbmTa5z9l2FUXwUE4tsvB3oCmuMghb +ZuHNppjNizAYyYSGAT7HD5txPHzAPfIrRPqnPsg6+htdhBwHxV/MTIvw7NtpJCd R4NxTdUKV87y9H7qpt5r8YQdbULCwIsLe7CfLZyPr2v1iZNL16cTySON/304+Z+e y5CUoY4AwDSgPLk9TNWJxsTtyIPMN8f4iX+V8JRVGZKcKVlI6YRF/YtVZTRVU9y6 vIS+9DlDlg+1EYRhu4UVJ6WLdpEi+K3pu3ZjemZLcCe9iiKAwde0uyqS8NLN1A+H BqhnV0vyZLWwfw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:41 2025 by rpki-client