This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json) Hash identifier: nyZiqv7cj9oLbkwIKS7oS84p2CHHplDh0VhBmbwKlQw= Subject key identifier: 31:27:2B:85:C1:1A:23:DC:B9:AB:25:A4:06:54:0B:39:23:49:72:91 Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd Certificate serial: 019B3FB6941A09A442F79A790FB18D9726F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft Manifest number: 0D38 Signing time: Sun 21 Dec 2025 07:01:28 +0000 Manifest this update: Sun 21 Dec 2025 07:01:28 +0000 Manifest next update: Mon 22 Dec 2025 07:01:28 +0000 Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=) 2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: AYUjTSHB4jIz3zgB7BNfssFFbp7r8HhcxwDZffqej3E=) 3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:94:1a:09:a4:42:f7:9a:79:0f:b1:8d:97:26:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd Validity Not Before: Dec 21 07:01:28 2025 GMT Not After : Dec 22 07:01:28 2025 GMT Subject: CN=31272b85c11a23dcb9ab25a406540b3923497291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:85:c0:d7:11:63:34:2c:e2:21:73:dc:3c: 83:11:5b:cc:96:bb:67:9f:9e:55:94:88:08:d9:f6: ec:8a:77:b0:22:df:98:ce:3d:cd:6a:bc:73:20:09: 5a:73:eb:63:20:6f:e6:86:03:bb:c4:6c:27:ce:34: 1f:89:65:a6:5d:5e:81:1c:bc:c7:7e:29:a8:a5:cc: c3:2b:aa:c6:1a:9a:25:34:4c:58:e8:e9:7d:88:9b: a9:ec:3d:fe:94:8a:5f:14:7f:08:7f:15:1d:5c:57: e0:02:e1:a8:d6:2c:e7:95:bc:c8:f7:41:1a:15:2a: b4:4a:d5:df:c3:4a:f0:15:74:b3:6b:16:dc:97:cc: d0:26:0c:7b:91:4c:7f:7e:27:1d:53:50:df:9f:18: 48:de:e8:ef:7d:3a:66:f2:89:b4:33:cf:a2:a9:a7: 69:36:a7:14:b6:92:aa:99:8c:e5:1c:dd:73:18:a4: 43:a5:0f:d5:40:d7:ec:eb:f1:b6:cf:28:d4:82:7b: 06:ae:8a:ca:c0:e4:6d:f9:8c:15:85:2e:7a:89:08: a8:cc:19:aa:d7:7a:7c:1e:8a:0c:3d:a6:b0:0e:52: 29:0a:ae:d7:7c:d5:e4:e8:e5:bb:37:78:d1:1f:25: 09:77:57:52:48:20:61:37:f6:e9:3a:b4:6d:c3:30: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:2B:85:C1:1A:23:DC:B9:AB:25:A4:06:54:0B:39:23:49:72:91 X509v3 Authority Key Identifier: keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:67:b6:e3:ae:b9:46:61:85:c2:e0:2e:2a:ea:70:be:c4: 79:76:33:5e:55:61:d0:3e:af:4f:46:0a:c0:fd:c6:19:8d:c2: 2e:b7:bc:85:8e:cd:8f:17:a5:63:c6:22:eb:8a:8a:70:03:7f: 86:a4:c2:c4:47:5f:bf:76:3a:f6:43:c1:48:32:70:2c:dc:a4: a9:7b:bb:8a:26:70:cc:b0:7a:4e:3a:b6:c6:f9:7b:70:31:08: ee:63:72:f2:ca:30:6f:4b:1c:a7:fb:9b:80:76:30:73:1b:59: 44:28:92:62:cb:e4:e2:4f:8d:85:7e:2a:ce:0c:24:48:79:a4: bb:ea:45:7b:3c:1c:c0:3e:53:10:f4:86:0f:43:5b:17:0c:2a: ec:43:07:ec:9d:e4:4d:3c:02:ef:e1:ff:d4:db:56:80:31:19: 3c:bb:9e:56:a1:09:9d:c1:5c:81:1f:6d:50:62:6e:85:fa:11: 95:d8:90:f7:f4:d0:05:6e:42:5f:f8:b0:fc:20:9c:94:c3:18: 65:3c:e1:01:c0:5c:9d:c6:c1:dc:16:3a:9f:ca:8d:25:80:46: d7:6f:e0:a8:91:13:5f:76:65:1a:7c:53:73:46:19:5e:29:60: 25:6e:d6:33:f9:77:29:af:f2:7f:91:90:9d:ef:ca:13:2b:67: a4:73:8a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tpQaCaRC95p5D7GNlyb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk ZmRkZmQwHhcNMjUxMjIxMDcwMTI4WhcNMjUxMjIyMDcwMTI4WjAzMTEwLwYDVQQD EygzMTI3MmI4NWMxMWEyM2RjYjlhYjI1YTQwNjU0MGIzOTIzNDk3MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PaFwNcRYzQs4iFz3DyDEVvMlrtn n55VlIgI2fbsinewIt+Yzj3NarxzIAlac+tjIG/mhgO7xGwnzjQfiWWmXV6BHLzH fimopczDK6rGGpolNExY6Ol9iJup7D3+lIpfFH8IfxUdXFfgAuGo1iznlbzI90Ea FSq0StXfw0rwFXSzaxbcl8zQJgx7kUx/ficdU1DfnxhI3ujvfTpm8om0M8+iqadp NqcUtpKqmYzlHN1zGKRDpQ/VQNfs6/G2zyjUgnsGrorKwORt+YwVhS56iQiozBmq 13p8HooMPaawDlIpCq7XfNXk6OW7N3jRHyUJd1dSSCBhN/bpOrRtwzCxhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEnK4XBGiPcuaslpAZUCzkjSXKRMB8GA1UdIwQY MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY9ntuOu uUZhhcLgLirqcL7EeXYzXlVh0D6vT0YKwP3GGY3CLre8hY7NjxelY8Yi64qKcAN/ hqTCxEdfv3Y69kPBSDJwLNykqXu7iiZwzLB6Tjq2xvl7cDEI7mNy8sowb0scp/ub gHYwcxtZRCiSYsvk4k+NhX4qzgwkSHmku+pFezwcwD5TEPSGD0NbFwwq7EMH7J3k TTwC7+H/1NtWgDEZPLueVqEJncFcgR9tUGJuhfoRldiQ9/TQBW5CX/iw/CCclMMY ZTzhAcBcncbB3BY6n8qNJYBG12/gqJETX3ZlGnxTc0YZXilgJW7WM/l3Ka/yf5GQ ne/KEytnpHOKvg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:05 2025 by rpki-client