This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json) Hash identifier: UzoZtQmapQ9AAK3cjNWxSNQ6POE9JyOfmgnQfF8T9Sk= Subject key identifier: 6C:F0:C2:77:42:CB:D5:8C:68:09:4A:05:B3:FF:5D:53:81:5F:05:60 Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd Certificate serial: 019B0F6ECB72B0417F2E12B21EA6BCB4EC38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft Manifest number: 0D1F Signing time: Thu 11 Dec 2025 22:01:17 +0000 Manifest this update: Thu 11 Dec 2025 22:01:17 +0000 Manifest next update: Fri 12 Dec 2025 22:01:17 +0000 Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=) 2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: tOkip1uY5x7awh0MWBB3RilpLwK8/ogZLSE5IoWHsi4=) 3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:cb:72:b0:41:7f:2e:12:b2:1e:a6:bc:b4:ec:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd Validity Not Before: Dec 11 22:01:17 2025 GMT Not After : Dec 12 22:01:17 2025 GMT Subject: CN=6cf0c27742cbd58c68094a05b3ff5d53815f0560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:cb:d9:6a:c3:18:c7:fe:5a:69:2b:45:36: 2a:2b:a9:f4:e5:e0:6e:c4:fd:7a:4f:05:3c:bf:08: e7:c7:e5:5c:57:54:e8:d0:47:85:16:c0:10:a5:a2: b7:84:c3:64:0b:19:6c:18:6f:3b:c9:45:5c:97:41: b5:34:0c:aa:95:7c:65:45:e9:89:3a:3c:9e:1b:6f: 08:60:9d:b4:61:0a:ee:c3:54:9e:92:09:51:99:85: 33:a7:6c:fa:f8:85:82:61:ec:d2:ba:0a:82:27:72: 5a:a7:b0:83:f2:6a:e6:59:67:28:8c:63:7b:db:f9: 3a:31:df:da:fb:d7:4a:7d:60:79:8f:c3:8c:e1:48: e2:88:98:27:c2:1c:00:c4:09:65:5e:fa:76:a3:33: a1:69:48:07:74:82:79:a4:81:99:16:b8:33:2e:21: 47:92:e8:f9:a2:5f:6f:1c:8e:a9:17:72:df:ce:2a: 49:53:19:5d:e6:8b:03:3e:e3:2a:55:b5:01:27:ab: 66:03:f1:5f:96:59:7d:3f:b0:d2:df:d5:23:9a:43: f7:3a:d7:de:ff:b2:ac:3b:4c:c5:79:41:78:aa:57: 2b:1a:50:63:ec:6e:bf:0d:6b:09:1e:4b:7a:ea:b3: 36:e3:d1:5c:66:d7:fb:55:4e:e8:f6:50:35:bd:cd: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:C2:77:42:CB:D5:8C:68:09:4A:05:B3:FF:5D:53:81:5F:05:60 X509v3 Authority Key Identifier: keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:86:93:3a:bb:41:89:4a:26:92:2f:12:fe:10:e9:fc:ba: db:3b:94:bc:20:de:d7:e3:c4:8e:d8:57:69:6c:19:92:e2:53: 89:f3:81:a1:01:05:ba:4a:42:23:d3:6a:6d:b7:8c:2c:1c:07: 6f:dc:66:ef:e3:3d:10:86:a0:30:14:96:42:8a:e7:52:1c:c7: e1:14:39:64:1e:d6:43:27:ce:53:56:94:7d:8f:99:e7:96:03: 67:22:39:fa:9e:54:ed:21:8c:a0:48:aa:77:6e:c7:25:7f:aa: 2a:74:fc:f3:d4:cc:5b:02:80:41:dc:f0:b0:fb:80:c7:b3:1a: 46:14:f5:33:ca:38:b5:a7:11:ef:5c:04:88:9c:f3:ef:46:a5: 6c:ef:1a:f8:bd:2f:70:fc:52:93:9c:f6:06:47:ac:48:20:fd: 6f:d3:30:5b:96:8a:45:04:c4:5a:cf:95:c4:e7:c1:42:1f:82: 7f:6e:1f:8f:d7:db:93:b8:bd:19:d0:61:5f:fe:fb:55:4f:ed: d2:f0:3e:d6:85:e5:95:1d:f2:cf:b2:0e:78:09:bf:df:d9:7d: 0d:37:ed:2e:c9:aa:da:5a:2b:64:da:17:d2:05:13:b5:24:d5: 40:f4:11:c0:03:01:10:1c:84:32:98:8b:c8:5f:df:e4:b9:5d: a0:92:ba:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbstysEF/LhKyHqa8tOw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk ZmRkZmQwHhcNMjUxMjExMjIwMTE3WhcNMjUxMjEyMjIwMTE3WjAzMTEwLwYDVQQD Eyg2Y2YwYzI3NzQyY2JkNThjNjgwOTRhMDViM2ZmNWQ1MzgxNWYwNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPXL2WrDGMf+WmkrRTYqK6n05eBu xP16TwU8vwjnx+VcV1To0EeFFsAQpaK3hMNkCxlsGG87yUVcl0G1NAyqlXxlRemJ OjyeG28IYJ20YQruw1SekglRmYUzp2z6+IWCYezSugqCJ3Jap7CD8mrmWWcojGN7 2/k6Md/a+9dKfWB5j8OM4UjiiJgnwhwAxAllXvp2ozOhaUgHdIJ5pIGZFrgzLiFH kuj5ol9vHI6pF3LfzipJUxld5osDPuMqVbUBJ6tmA/Fflll9P7DS39UjmkP3Otfe /7KsO0zFeUF4qlcrGlBj7G6/DWsJHkt66rM249FcZtf7VU7o9lA1vc3rEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzwwndCy9WMaAlKBbP/XVOBXwVgMB8GA1UdIwQY MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqCGkzq7 QYlKJpIvEv4Q6fy62zuUvCDe1+PEjthXaWwZkuJTifOBoQEFukpCI9NqbbeMLBwH b9xm7+M9EIagMBSWQornUhzH4RQ5ZB7WQyfOU1aUfY+Z55YDZyI5+p5U7SGMoEiq d27HJX+qKnT889TMWwKAQdzwsPuAx7MaRhT1M8o4tacR71wEiJzz70albO8a+L0v cPxSk5z2BkesSCD9b9MwW5aKRQTEWs+VxOfBQh+Cf24fj9fbk7i9GdBhX/77VU/t 0vA+1oXllR3yz7IOeAm/39l9DTftLsmq2lorZNoX0gUTtSTVQPQRwAMBEByEMpiL yF/f5LldoJK6ng== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:49 2025 by rpki-client