This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json) Hash identifier: 2WsmFvZZcZyUHx3LoKLhnRf4PKjLNewN4LMKuOxEyPU= Subject key identifier: 33:5A:9F:A4:3A:F7:6D:4E:00:59:C5:EC:23:86:FC:74:68:FF:95:A4 Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e Certificate serial: 019B23D1AD0C3BFD0BDBC698CE742A294FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft Manifest number: 170D Signing time: Mon 15 Dec 2025 21:01:42 +0000 Manifest this update: Mon 15 Dec 2025 21:01:42 +0000 Manifest next update: Tue 16 Dec 2025 21:01:42 +0000 Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: cviV807yBrzxMt2e1b1EksgNZpCFWewDCSpIlQ0P5YE=) 2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:ad:0c:3b:fd:0b:db:c6:98:ce:74:2a:29:4f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e Validity Not Before: Dec 15 21:01:42 2025 GMT Not After : Dec 16 21:01:42 2025 GMT Subject: CN=335a9fa43af76d4e0059c5ec2386fc7468ff95a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:7b:cd:49:ee:c9:5d:60:ab:4c:b6:74:4e: a3:60:76:ba:39:e1:e6:1d:aa:71:97:8f:ec:b3:06: 83:e9:4c:cc:14:99:76:3c:ba:23:09:9b:41:86:e8: 0d:ac:fd:ce:ee:17:f0:9c:ad:05:05:a6:b9:23:f4: 6a:5f:7d:0c:7c:ef:ff:98:b5:1a:93:2d:9c:14:4c: 8d:b9:dc:5a:3a:48:c1:9e:82:2b:82:06:b8:27:c5: 71:03:07:fc:1e:82:a0:41:d5:25:48:4c:f2:8e:19: ad:1e:7a:8b:f7:42:36:22:1d:28:53:5f:32:fe:ad: 41:cb:df:ee:11:0d:c9:7b:88:b8:80:61:a5:1a:e9: c4:4f:44:bc:8c:ab:c6:9a:9d:c4:d8:a3:f8:91:e6: 22:f6:bf:c5:a8:98:cc:5c:5c:b0:a6:d3:da:02:eb: 62:14:79:a1:59:5f:2e:f5:26:70:15:38:88:81:e0: 3a:0a:69:39:da:d8:a8:d0:96:ba:e8:b2:51:f0:fe: 31:7e:9c:6a:6d:f0:e5:bc:9d:ed:b3:58:36:28:01: 17:dc:86:22:99:d0:94:ac:85:72:e7:00:60:fe:2e: 71:6c:2c:66:42:17:77:3b:54:17:5e:09:20:b7:9a: dd:a4:54:12:92:c2:a0:98:1b:27:20:4d:2b:b8:ba: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:9F:A4:3A:F7:6D:4E:00:59:C5:EC:23:86:FC:74:68:FF:95:A4 X509v3 Authority Key Identifier: keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b4:83:d6:22:9b:fd:59:d8:5b:67:ce:3b:1f:59:d0:71:e5: 45:cd:a2:45:06:25:1f:85:c6:2f:63:34:91:fe:88:40:7d:0f: 83:c3:c6:6e:fc:e0:bc:60:9a:1e:4a:5b:97:e8:39:5b:5c:ab: 35:5a:41:71:ab:8d:51:1e:2a:16:74:de:93:8a:98:59:56:21: 29:06:fc:90:82:22:fc:a0:82:f0:fc:03:4a:96:ce:87:f8:6b: 8f:63:b9:58:e4:fd:f5:d3:22:ab:59:b2:8c:c3:b5:90:be:a6: e9:40:7c:c8:28:71:c2:f0:cf:88:e5:4d:6d:c9:20:c4:36:08: 3a:f4:40:f8:7a:35:ff:e7:98:39:e7:b5:f7:b3:81:ae:d9:d2: 36:26:8a:29:16:86:76:a2:e3:0c:f1:10:4c:e5:a0:74:99:4a: 73:27:3d:ea:92:4a:cc:1d:e2:e6:72:2f:91:d7:2c:f9:f0:96: ab:e6:eb:d3:ce:93:c3:ba:06:17:bf:75:9b:84:7a:27:0b:68: 14:36:5e:15:28:44:5b:f7:24:1f:7f:51:6a:33:c2:fd:40:20: cd:58:32:03:0d:ef:3b:3d:8a:44:f3:8e:0e:73:06:de:e6:96: bb:59:b3:46:2e:8d:e0:5b:0f:fc:d4:e8:d5:a0:77:22:31:31: 45:69:4d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0a0MO/0L28aYznQqKU+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDRiZDQ5OWY1ODQ5NGFjMGU4MjI2M2I1NTIwYTJjNjRk NjQ3N2UwHhcNMjUxMjE1MjEwMTQyWhcNMjUxMjE2MjEwMTQyWjAzMTEwLwYDVQQD EygzMzVhOWZhNDNhZjc2ZDRlMDA1OWM1ZWMyMzg2ZmM3NDY4ZmY5NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqet7zUnuyV1gq0y2dE6jYHa6OeHm Hapxl4/sswaD6UzMFJl2PLojCZtBhugNrP3O7hfwnK0FBaa5I/RqX30MfO//mLUa ky2cFEyNudxaOkjBnoIrgga4J8VxAwf8HoKgQdUlSEzyjhmtHnqL90I2Ih0oU18y /q1By9/uEQ3Je4i4gGGlGunET0S8jKvGmp3E2KP4keYi9r/FqJjMXFywptPaAuti FHmhWV8u9SZwFTiIgeA6Cmk52tio0Ja66LJR8P4xfpxqbfDlvJ3ts1g2KAEX3IYi mdCUrIVy5wBg/i5xbCxmQhd3O1QXXgkgt5rdpFQSksKgmBsnIE0ruLozfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNan6Q6921OAFnF7COG/HRo/5WkMB8GA1UdIwQY MBaAFCDUvUmfWElKwOgiY7VSCixk1kd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzIt ZDJlZTE1Mzk5ZDA2LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzItZDJlZTE1Mzk5ZDA2 LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLSD1iKb /VnYW2fOOx9Z0HHlRc2iRQYlH4XGL2M0kf6IQH0Pg8PGbvzgvGCaHkpbl+g5W1yr NVpBcauNUR4qFnTek4qYWVYhKQb8kIIi/KCC8PwDSpbOh/hrj2O5WOT99dMiq1my jMO1kL6m6UB8yChxwvDPiOVNbckgxDYIOvRA+Ho1/+eYOee197OBrtnSNiaKKRaG dqLjDPEQTOWgdJlKcyc96pJKzB3i5nIvkdcs+fCWq+br086Tw7oGF791m4R6Jwto FDZeFShEW/ckH39RajPC/UAgzVgyAw3vOz2KRPOODnMG3uaWu1mzRi6N4FsP/NTo 1aB3IjExRWlN/g== -----END CERTIFICATE-----Generated at Tue Dec 16 00:02:07 2025 by rpki-client