This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json) Hash identifier: pRfrFVi0tR1B8v8PCy3h9E6TAtC90RQiRwACXsuSx74= Subject key identifier: 2B:DE:C6:63:17:85:49:1A:34:98:8B:C7:5D:1E:2A:20:B0:09:1D:FD Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e Certificate serial: 019AF42DDD9C65A4A1BB7C0F7D5535D4658D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:00:37 +0000 Manifest this update: Sat 06 Dec 2025 15:00:37 +0000 Manifest next update: Sun 07 Dec 2025 15:00:37 +0000 Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=) 2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=) 3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: SAmf532acB3ENSBfh1nP2ldSZeC9QJv9/efr2XXn/PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:dd:9c:65:a4:a1:bb:7c:0f:7d:55:35:d4:65:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e Validity Not Before: Dec 6 15:00:37 2025 GMT Not After : Dec 7 15:00:37 2025 GMT Subject: CN=2bdec6631785491a34988bc75d1e2a20b0091dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:96:16:20:e1:d4:d1:a7:0f:62:24:3c:ed: 09:1e:c1:b0:6f:c0:65:5a:c0:20:47:14:b2:79:6c: ca:34:6b:0c:13:9b:c0:4e:6e:c8:74:2f:d3:98:60: ab:c1:b4:0a:73:cc:c3:2a:12:56:df:0d:1a:44:9b: e5:0f:93:82:9f:e2:fb:d0:14:e2:dd:80:2a:bb:b8: 1b:04:d4:7a:d8:42:b8:1e:02:c2:19:71:5d:72:79: d7:02:c0:b8:fb:dc:e9:be:e0:47:96:65:d1:7f:33: 6b:a0:77:df:31:12:ad:24:d8:5d:02:67:06:d4:4d: e5:b1:f4:28:56:a4:d6:42:bf:6b:73:ba:e8:0e:80: 50:29:97:7e:a2:ce:22:53:35:16:5a:b9:e5:c5:ab: fa:86:a9:89:da:fc:93:07:b8:b8:a0:90:70:8e:d6: d1:6d:a5:fb:0b:d5:94:28:5f:d9:04:dc:50:70:0e: c6:0b:07:34:1a:2a:96:5b:ba:a2:3f:c8:17:72:0b: 4d:76:57:48:ad:49:13:39:f7:19:64:a8:b5:58:5e: 0d:9b:81:33:07:20:32:92:5c:bd:70:1d:38:01:61: 6b:87:2d:e3:a8:3f:09:46:2e:f8:38:24:f6:84:fb: d3:4a:63:e5:10:71:4a:02:7d:55:6b:58:b5:0b:d2: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:C6:63:17:85:49:1A:34:98:8B:C7:5D:1E:2A:20:B0:09:1D:FD X509v3 Authority Key Identifier: keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:04:dd:bd:97:52:cb:21:eb:9c:13:73:a5:b0:ab:dc:c6:84: 99:f7:94:a3:46:14:18:57:de:cb:4c:0c:e7:4f:04:05:4f:c4: 83:16:6a:ab:16:45:92:1d:51:02:ed:b5:0f:b9:67:f7:f5:3a: b2:12:1c:dd:69:eb:a8:d2:f7:03:4d:25:7e:23:d1:12:eb:9b: a1:f7:37:97:9e:b1:f9:37:82:89:9b:91:4c:66:61:76:93:e8: 6b:54:4d:91:5a:89:18:d4:49:7f:f8:f6:20:06:ab:c4:5b:38: ed:16:bd:18:c9:57:17:d0:5b:1f:c7:4e:ee:a4:80:a5:06:a0: ac:ef:79:1f:40:02:23:e2:52:2c:cc:b3:87:3e:22:d0:69:78: 79:c6:ba:cc:ec:58:cf:08:6d:18:ab:ab:eb:8e:65:6a:5b:41: de:f8:f7:dd:6a:38:e9:25:d2:db:33:7c:89:56:71:87:8c:2e: a4:86:f9:2e:59:88:94:40:82:87:9e:1a:9f:f2:51:8c:ac:34: 57:a8:05:30:02:20:25:e8:a0:bb:cb:17:d5:48:b5:0e:7c:bc: 75:2a:b8:37:f0:30:b2:64:f1:a6:50:fa:3c:65:bb:19:ab:b0: ff:81:47:56:96:d8:c0:26:0e:2c:d0:6c:5f:b3:0e:5b:fd:e1: 1a:0c:be:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ld2cZaShu3wPfVU11GWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx M2U5M2UwHhcNMjUxMjA2MTUwMDM3WhcNMjUxMjA3MTUwMDM3WjAzMTEwLwYDVQQD EygyYmRlYzY2MzE3ODU0OTFhMzQ5ODhiYzc1ZDFlMmEyMGIwMDkxZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11SWFiDh1NGnD2IkPO0JHsGwb8Bl WsAgRxSyeWzKNGsME5vATm7IdC/TmGCrwbQKc8zDKhJW3w0aRJvlD5OCn+L70BTi 3YAqu7gbBNR62EK4HgLCGXFdcnnXAsC4+9zpvuBHlmXRfzNroHffMRKtJNhdAmcG 1E3lsfQoVqTWQr9rc7roDoBQKZd+os4iUzUWWrnlxav6hqmJ2vyTB7i4oJBwjtbR baX7C9WUKF/ZBNxQcA7GCwc0GiqWW7qiP8gXcgtNdldIrUkTOfcZZKi1WF4Nm4Ez ByAykly9cB04AWFrhy3jqD8JRi74OCT2hPvTSmPlEHFKAn1Va1i1C9Jj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvexmMXhUkaNJiLx10eKiCwCR39MB8GA1UdIwQY MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwTdvZdS yyHrnBNzpbCr3MaEmfeUo0YUGFfey0wM508EBU/EgxZqqxZFkh1RAu21D7ln9/U6 shIc3WnrqNL3A00lfiPREuubofc3l56x+TeCiZuRTGZhdpPoa1RNkVqJGNRJf/j2 IAarxFs47Ra9GMlXF9BbH8dO7qSApQagrO95H0ACI+JSLMyzhz4i0Gl4eca6zOxY zwhtGKur645laltB3vj33Wo46SXS2zN8iVZxh4wupIb5LlmIlECCh54an/JRjKw0 V6gFMAIgJeigu8sX1Ui1Dny8dSq4N/AwsmTxplD6PGW7Gauw/4FHVpbYwCYOLNBs X7MOW/3hGgy+qA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:28 2025 by rpki-client