This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json) Hash identifier: pfz6wdEPKjX0qwWK0e5lHeZ4PFEaXt/+Ugb3XGXZ3EU= Subject key identifier: B1:75:53:B6:59:C1:66:77:9D:3F:EC:ED:79:40:E7:C3:09:0F:4C:29 Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e Certificate serial: 019AF57806830D5C95156B70E71CDCC49605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 21:01:15 +0000 Manifest this update: Sat 06 Dec 2025 21:01:15 +0000 Manifest next update: Sun 07 Dec 2025 21:01:15 +0000 Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: Vkj/4Lg9E5fFY0zcP6xehRfbzB0EocSsst/rFdG8g/Q=) 2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:06:83:0d:5c:95:15:6b:70:e7:1c:dc:c4:96:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e Validity Not Before: Dec 6 21:01:15 2025 GMT Not After : Dec 7 21:01:15 2025 GMT Subject: CN=b17553b659c166779d3feced7940e7c3090f4c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:6c:89:dc:f9:13:ab:3c:14:a3:96:57:8f: 14:b0:00:d9:03:17:a2:af:43:d0:2f:a8:ec:be:80: 1f:a6:4f:c8:6b:98:90:ad:d6:0b:ea:14:60:ff:71: 4c:38:fb:9a:f5:c7:a4:5c:22:2a:02:32:cb:ed:3e: d1:34:8a:ee:37:95:c5:dc:f0:e0:c5:83:dc:23:8b: 65:2e:6d:b0:a1:a8:3b:12:2e:5f:a5:19:72:09:6a: 51:5c:5d:3e:f7:73:8f:c1:9d:ec:20:1e:e2:3e:81: 6d:74:7e:fb:ee:ec:32:d7:4e:b9:87:5d:e7:46:a5: 2d:17:2a:45:65:e4:6b:04:53:dc:9d:86:c0:f2:9e: 49:38:b4:1d:0b:0b:7d:28:e5:04:a3:41:99:ef:cc: 97:e6:7a:4f:44:5d:a1:ea:be:b9:69:74:f3:e9:60: db:d4:76:a1:6a:9c:59:8b:95:d9:55:66:ef:a5:66: c6:06:b0:c5:ac:72:03:cc:99:8d:28:b8:8f:e7:81: 14:25:dd:2b:f3:0e:35:d6:c8:e1:f0:7e:ae:ef:d0: c5:1e:57:fd:d2:46:cc:75:0b:d1:53:ef:0c:e7:26: 96:8c:2b:82:ef:94:eb:78:21:c9:ab:69:7a:74:e0: 6d:9f:05:94:8d:c1:6a:f6:98:5e:a9:50:72:81:b4: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:75:53:B6:59:C1:66:77:9D:3F:EC:ED:79:40:E7:C3:09:0F:4C:29 X509v3 Authority Key Identifier: keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ab:04:74:38:2b:95:ce:1e:76:92:84:32:62:81:34:75:18: ea:5c:9a:3b:1b:69:b4:4f:76:a6:0e:ec:5c:6e:95:b7:28:40: 1a:14:63:d1:85:dd:37:63:eb:28:d5:0c:fe:71:ed:65:18:82: cf:d2:df:5a:71:3a:f0:75:41:ad:f1:ee:00:9e:c0:ba:68:b6: 55:37:34:ec:9e:f8:65:6c:45:67:63:ab:1f:89:3e:75:79:87: c9:2f:ff:c1:5c:18:b3:b1:b8:16:d3:f5:9e:a8:6e:f8:d9:d0: eb:b3:a4:52:2a:65:6e:5b:73:c2:b8:48:58:83:56:2b:3a:21: 62:1a:71:86:36:a4:f0:3a:28:a2:08:3d:e8:e4:14:b7:fa:05: 57:ae:c3:70:da:c8:69:67:48:77:1b:49:d2:ef:58:4a:0b:ae: a4:aa:0d:3b:2d:92:4c:fd:1c:18:14:93:96:ab:e0:3b:ac:98: 2c:88:42:0a:d0:f6:78:60:7b:03:79:7d:c9:d0:a5:bb:c7:aa: 57:99:94:3e:db:a6:28:12:c9:81:8d:d2:16:92:72:45:33:ec: 9a:39:06:99:2c:52:ae:88:33:ab:e2:bb:2d:cc:db:b0:da:b3: 6d:b0:a5:48:05:43:cb:70:03:b9:ed:f0:0a:bd:73:8a:92:dc: 26:56:f1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eAaDDVyVFWtw5xzcxJYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDRiZDQ5OWY1ODQ5NGFjMGU4MjI2M2I1NTIwYTJjNjRk NjQ3N2UwHhcNMjUxMjA2MjEwMTE1WhcNMjUxMjA3MjEwMTE1WjAzMTEwLwYDVQQD EyhiMTc1NTNiNjU5YzE2Njc3OWQzZmVjZWQ3OTQwZTdjMzA5MGY0YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p5sidz5E6s8FKOWV48UsADZAxei r0PQL6jsvoAfpk/Ia5iQrdYL6hRg/3FMOPua9cekXCIqAjLL7T7RNIruN5XF3PDg xYPcI4tlLm2woag7Ei5fpRlyCWpRXF0+93OPwZ3sIB7iPoFtdH777uwy1065h13n RqUtFypFZeRrBFPcnYbA8p5JOLQdCwt9KOUEo0GZ78yX5npPRF2h6r65aXTz6WDb 1HahapxZi5XZVWbvpWbGBrDFrHIDzJmNKLiP54EUJd0r8w411sjh8H6u79DFHlf9 0kbMdQvRU+8M5yaWjCuC75TreCHJq2l6dOBtnwWUjcFq9pheqVBygbSN1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF1U7ZZwWZ3nT/s7XlA58MJD0wpMB8GA1UdIwQY MBaAFCDUvUmfWElKwOgiY7VSCixk1kd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzIt ZDJlZTE1Mzk5ZDA2LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzItZDJlZTE1Mzk5ZDA2 LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqsEdDgr lc4edpKEMmKBNHUY6lyaOxtptE92pg7sXG6VtyhAGhRj0YXdN2PrKNUM/nHtZRiC z9LfWnE68HVBrfHuAJ7Aumi2VTc07J74ZWxFZ2OrH4k+dXmHyS//wVwYs7G4FtP1 nqhu+NnQ67OkUiplbltzwrhIWINWKzohYhpxhjak8Dooogg96OQUt/oFV67DcNrI aWdIdxtJ0u9YSguupKoNOy2STP0cGBSTlqvgO6yYLIhCCtD2eGB7A3l9ydClu8eq V5mUPtumKBLJgY3SFpJyRTPsmjkGmSxSrogzq+K7LczbsNqzbbClSAVDy3ADue3w Cr1zipLcJlbxLA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:59 2025 by rpki-client