This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json) Hash identifier: aseMTn4U+UhIWbyEvz9E/6/38UT6yTCZfnJ7f65BHe0= Subject key identifier: B1:1C:40:D0:17:8F:EF:B2:F8:2C:13:6F:24:6B:28:5D:48:EE:0C:EA Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e Certificate serial: 019B0B5ACA0BC082B79D0393998FA66D81DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 03:00:57 +0000 Manifest this update: Thu 11 Dec 2025 03:00:57 +0000 Manifest next update: Fri 12 Dec 2025 03:00:57 +0000 Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=) 2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=) 3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: S8mSCn1by2En64uf4hjgBVyv35LvyUj4o5UX6/rTDjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:5a:ca:0b:c0:82:b7:9d:03:93:99:8f:a6:6d:81:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e Validity Not Before: Dec 11 03:00:57 2025 GMT Not After : Dec 12 03:00:57 2025 GMT Subject: CN=b11c40d0178fefb2f82c136f246b285d48ee0cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:4c:c6:bd:f6:29:0c:5a:d3:e4:2d:2a:5c: 34:fb:62:ea:45:e8:24:95:25:48:84:31:56:b1:47: b2:0d:74:5e:31:58:99:00:98:2e:a7:8e:a4:bb:6f: 6b:51:dc:c3:1d:49:14:c5:37:34:96:65:17:65:aa: bd:ba:39:52:50:e2:91:63:82:89:12:f4:41:88:37: e2:d9:cc:74:df:70:bd:56:9b:a1:34:4c:ae:e9:69: ec:7f:ee:d1:3b:05:31:73:d0:eb:89:b0:3d:61:47: 25:b4:52:3a:ca:7a:10:29:0b:42:89:36:7e:b7:a8: c7:b0:b5:b0:4c:b9:ac:c7:22:fd:82:01:d8:c7:fd: 34:7b:73:f8:a9:93:55:8e:9d:ac:2b:cd:b1:a7:13: 0e:f9:6d:11:6e:19:50:eb:75:62:0e:d0:9f:50:7b: 7f:87:61:00:22:be:8a:6c:f7:92:26:63:f1:c1:1a: 03:37:1b:e0:a4:61:7e:48:d0:d3:3e:dd:20:3f:2e: 26:5e:5a:46:85:17:e9:51:b3:05:e8:89:be:89:b1: 10:ab:77:1a:93:ba:37:c2:ab:de:b3:c8:b6:8d:51: a9:a0:59:a6:f7:57:26:2f:43:c5:6f:ec:39:12:69: 45:b2:2c:fa:ea:35:c0:15:c0:22:79:18:3d:25:73: ec:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1C:40:D0:17:8F:EF:B2:F8:2C:13:6F:24:6B:28:5D:48:EE:0C:EA X509v3 Authority Key Identifier: keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:65:d8:37:a7:10:39:be:aa:d5:b5:ab:23:12:ff:c8:d4:05: c0:b9:b5:ef:60:c9:c4:3f:b2:c9:f6:eb:19:e0:73:08:8b:3c: 67:57:c0:c2:de:72:91:a0:29:e3:ac:dd:fe:0c:dc:10:da:85: e7:40:4d:c8:86:23:71:ae:b2:28:65:a4:1f:5f:e8:ed:53:da: a0:ae:ff:4f:d0:87:6a:f2:16:5f:71:44:1c:bd:01:1c:cf:23: 95:14:77:2a:b2:d4:77:cc:ee:55:72:80:e7:ce:28:ba:43:af: 28:1e:1d:ed:94:59:10:0e:3d:cc:cb:37:ea:3c:de:40:e2:41: 51:14:f2:3b:c6:38:05:74:8b:18:63:4b:71:41:2c:11:19:fd: d3:7a:67:96:aa:f9:6b:40:f5:e1:30:2d:a7:dd:9f:e6:23:3c: 31:fe:6b:ee:8a:b4:8f:f7:50:a5:4c:83:93:8f:89:2a:c6:24: f1:41:d8:42:32:79:56:91:6c:ac:2c:f4:07:05:20:86:63:71: dd:a8:05:3d:f8:e7:3f:f2:09:ef:a6:e3:ba:d8:af:78:d3:10: cd:db:4b:cb:c8:e9:be:be:aa:9c:db:41:bc:8a:d3:43:74:db: c1:9c:9c:f3:07:d6:cd:e4:e8:7a:c1:43:30:23:3e:9a:4f:fd: 91:d1:53:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLWsoLwIK3nQOTmY+mbYHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx M2U5M2UwHhcNMjUxMjExMDMwMDU3WhcNMjUxMjEyMDMwMDU3WjAzMTEwLwYDVQQD EyhiMTFjNDBkMDE3OGZlZmIyZjgyYzEzNmYyNDZiMjg1ZDQ4ZWUwY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwtMxr32KQxa0+QtKlw0+2LqRegk lSVIhDFWsUeyDXReMViZAJgup46ku29rUdzDHUkUxTc0lmUXZaq9ujlSUOKRY4KJ EvRBiDfi2cx033C9VpuhNEyu6Wnsf+7ROwUxc9DribA9YUcltFI6ynoQKQtCiTZ+ t6jHsLWwTLmsxyL9ggHYx/00e3P4qZNVjp2sK82xpxMO+W0RbhlQ63ViDtCfUHt/ h2EAIr6KbPeSJmPxwRoDNxvgpGF+SNDTPt0gPy4mXlpGhRfpUbMF6Im+ibEQq3ca k7o3wqves8i2jVGpoFmm91cmL0PFb+w5EmlFsiz66jXAFcAieRg9JXPsCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEcQNAXj++y+CwTbyRrKF1I7gzqMB8GA1UdIwQY MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmXYN6cQ Ob6q1bWrIxL/yNQFwLm172DJxD+yyfbrGeBzCIs8Z1fAwt5ykaAp46zd/gzcENqF 50BNyIYjca6yKGWkH1/o7VPaoK7/T9CHavIWX3FEHL0BHM8jlRR3KrLUd8zuVXKA 584oukOvKB4d7ZRZEA49zMs36jzeQOJBURTyO8Y4BXSLGGNLcUEsERn903pnlqr5 a0D14TAtp92f5iM8Mf5r7oq0j/dQpUyDk4+JKsYk8UHYQjJ5VpFsrCz0BwUghmNx 3agFPfjnP/IJ76bjutiveNMQzdtLy8jpvr6qnNtBvIrTQ3TbwZyc8wfWzeToesFD MCM+mk/9kdFTkg== -----END CERTIFICATE-----Generated at Thu Dec 11 06:46:48 2025 by rpki-client