This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json) Hash identifier: DdEuazjZE/Y736dlqPh3KacgSovuyIXSafhYh9HP6fw= Subject key identifier: AA:E1:A1:BE:21:83:47:40:1E:24:9D:38:6A:EE:50:32:CE:91:3A:EE Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd Certificate serial: 019BF76374F1E1090E305786FDE83957497E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft Manifest number: 0D98 Signing time: Sun 25 Jan 2026 23:00:48 +0000 Manifest this update: Sun 25 Jan 2026 23:00:48 +0000 Manifest next update: Mon 26 Jan 2026 23:00:48 +0000 Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=) 2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=) 3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: dgz4oBSLLf5qcqEBYp68BI3zTS0ctJTXlNUTIdhauk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:74:f1:e1:09:0e:30:57:86:fd:e8:39:57:49:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd Validity Not Before: Jan 25 23:00:48 2026 GMT Not After : Jan 26 23:00:48 2026 GMT Subject: CN=aae1a1be218347401e249d386aee5032ce913aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:b5:82:28:6e:54:a4:a0:1f:ba:12:fc:7f: f3:4a:98:0b:7a:d8:23:59:5c:64:c4:85:9e:94:3e: 36:5a:de:1c:b7:c7:51:53:ad:92:65:d8:b6:53:1c: 5d:37:25:d1:6b:e3:6e:f7:62:7f:4f:ae:3b:77:a1: 58:8d:c7:62:99:aa:2d:b1:3a:db:82:06:a5:1f:89: 39:55:17:b5:9e:ff:ff:2b:08:b5:e0:0f:52:e1:6b: 21:f2:f1:a2:7b:fd:e3:74:69:bd:91:93:ce:86:40: af:c7:c7:b5:e0:c5:14:f0:09:bd:48:e8:ce:be:63: 7a:0f:ab:5c:75:8e:0a:07:0e:a8:cf:6a:37:f6:81: 03:c2:0f:94:d9:89:06:21:73:b1:bd:76:90:d1:0d: 1c:ae:b6:e6:26:06:62:77:59:cb:4b:cb:84:88:bd: 80:0f:10:86:b8:02:a9:0c:b1:77:c0:b3:7c:ed:a3: 4b:ad:28:cb:08:f9:37:0b:94:3b:44:47:49:81:5d: 96:31:9c:fe:09:4a:88:6c:3d:86:44:f5:fa:58:19: e1:08:e3:1e:a9:a9:e2:49:9c:3c:a8:59:78:83:2b: 3a:17:0f:2f:07:8b:a5:da:1d:98:3d:ce:d5:34:14: 80:ee:2a:ad:46:b3:f4:ee:f4:5e:cc:19:b3:d1:2c: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E1:A1:BE:21:83:47:40:1E:24:9D:38:6A:EE:50:32:CE:91:3A:EE X509v3 Authority Key Identifier: keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:65:de:d6:e2:95:a9:a7:a2:5e:d7:9f:80:0c:b4:f2:fc:e0: 2f:a2:e7:1b:67:42:28:9a:a1:6d:aa:d1:e2:d8:70:10:f0:85: 3d:cd:e1:45:54:2b:4f:83:1e:57:83:de:da:47:b8:e3:12:84: 24:4e:71:b7:6f:76:f1:13:37:b2:0a:71:4c:5e:b7:e0:d7:eb: ea:58:0d:df:94:21:f0:9b:29:21:60:f4:98:dc:b3:aa:a1:ab: b2:1e:0b:e0:5f:3b:77:9a:78:a7:d3:6b:f6:66:35:a5:d2:b8: 47:f3:a1:9e:b3:09:1e:fb:08:0b:a8:11:86:98:21:3d:41:ed: 7a:cf:a1:bf:b5:94:bb:81:b1:cf:e4:e3:2b:c0:69:c4:88:c8: fb:ad:65:bf:b8:a7:52:99:cb:d6:70:ab:f6:01:f1:35:b5:ae: 37:b2:2c:aa:8c:b9:4a:75:14:04:d4:42:64:91:49:ca:97:d3: e6:d7:73:00:6b:42:3a:80:7b:00:d1:01:06:81:54:2c:21:c1: bd:cc:d7:bb:35:42:50:07:f7:a2:8a:7a:e4:78:70:6c:85:d6: c4:bc:22:98:fa:8d:9a:b0:57:10:18:18:71:84:25:f8:29:08: fc:bc:bc:18:5a:76:a3:46:7a:c7:27:d1:ca:42:da:7d:62:1a: 4e:ca:07:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3Tx4QkOMFeG/eg5V0l+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk ZmRkZmQwHhcNMjYwMTI1MjMwMDQ4WhcNMjYwMTI2MjMwMDQ4WjAzMTEwLwYDVQQD EyhhYWUxYTFiZTIxODM0NzQwMWUyNDlkMzg2YWVlNTAzMmNlOTEzYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnW1gihuVKSgH7oS/H/zSpgLetgj WVxkxIWelD42Wt4ct8dRU62SZdi2UxxdNyXRa+Nu92J/T647d6FYjcdimaotsTrb ggalH4k5VRe1nv//Kwi14A9S4Wsh8vGie/3jdGm9kZPOhkCvx8e14MUU8Am9SOjO vmN6D6tcdY4KBw6oz2o39oEDwg+U2YkGIXOxvXaQ0Q0crrbmJgZid1nLS8uEiL2A DxCGuAKpDLF3wLN87aNLrSjLCPk3C5Q7REdJgV2WMZz+CUqIbD2GRPX6WBnhCOMe qaniSZw8qFl4gys6Fw8vB4ul2h2YPc7VNBSA7iqtRrP07vRezBmz0SxSCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrhob4hg0dAHiSdOGruUDLOkTruMB8GA1UdIwQY MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWXe1uKV qaeiXtefgAy08vzgL6LnG2dCKJqhbarR4thwEPCFPc3hRVQrT4MeV4Pe2ke44xKE JE5xt2928RM3sgpxTF634Nfr6lgN35Qh8JspIWD0mNyzqqGrsh4L4F87d5p4p9Nr 9mY1pdK4R/OhnrMJHvsIC6gRhpghPUHtes+hv7WUu4Gxz+TjK8BpxIjI+61lv7in UpnL1nCr9gHxNbWuN7Isqoy5SnUUBNRCZJFJypfT5tdzAGtCOoB7ANEBBoFULCHB vczXuzVCUAf3oop65HhwbIXWxLwimPqNmrBXEBgYcYQl+CkI/Ly8GFp2o0Z6xyfR ykLafWIaTsoH0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:08 2026 by rpki-client