This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft File: 83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json) Hash identifier: Qo9uEpKo9IRjQJLj4FXXlTxOhEHLsozPVWUzyglfL0I= Subject key identifier: 80:11:95:97:73:83:A7:EA:45:65:17:C4:9E:7D:14:61:06:9A:4D:37 Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019AABA8989BD01734E6D0CAFD8DE73B0120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft Manifest number: 0A0D Signing time: Sat 22 Nov 2025 13:02:24 +0000 Manifest this update: Sat 22 Nov 2025 13:02:24 +0000 Manifest next update: Sun 23 Nov 2025 13:02:24 +0000 Files and hashes: 1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=) 2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: Ts1KOU/XnYP47svr50eQyMow6BWEudrPZwDREfG/+8E=) 3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=) 4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a8:98:9b:d0:17:34:e6:d0:ca:fd:8d:e7:3b:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Nov 22 13:02:24 2025 GMT Not After : Nov 23 13:02:24 2025 GMT Subject: CN=801195977383a7ea456517c49e7d1461069a4d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:de:0f:79:26:7e:4e:2a:3c:a7:16:37:40: f2:bd:23:6e:50:55:57:2e:54:11:ec:8f:55:df:59: bd:7c:a4:51:0c:ba:60:42:e1:6c:18:54:38:c6:96: 9d:97:f4:48:6f:e9:df:0b:0d:e3:ef:07:75:56:bf: db:c8:f4:2f:dd:be:39:c7:92:65:1c:49:0c:7f:7e: 17:c3:2f:e5:c1:e5:fd:bb:3b:eb:45:03:23:bc:81: 6c:cd:c0:4c:50:35:80:f4:f2:89:c5:ff:f0:f7:25: 47:61:66:41:93:b2:61:43:0e:c3:0e:51:58:42:bf: b5:49:bb:c2:f3:b3:f7:08:04:d3:13:52:f4:9f:44: c5:8e:f3:12:dd:9a:4d:e7:35:4c:08:8c:70:90:91: f7:40:00:38:e0:bc:8d:3c:56:64:da:40:fe:9b:4e: b9:02:07:2f:61:f5:ac:12:1c:bc:ae:c6:88:b8:e8: 16:d2:dc:03:e2:30:49:9a:46:74:0b:00:27:5c:03: 66:17:ae:9d:21:be:63:bd:5e:52:95:5f:bd:85:b5: 94:5f:61:b8:ce:05:04:7b:82:a8:c8:22:61:97:72: 80:17:ee:9b:41:1f:aa:3a:a9:28:50:f0:6e:ce:98: 74:1b:18:f3:f6:3a:b4:81:35:98:03:4a:8b:dc:c5: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:95:97:73:83:A7:EA:45:65:17:C4:9E:7D:14:61:06:9A:4D:37 X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6c:e8:2f:78:f5:08:e5:ee:08:7e:72:ac:b7:ec:ed:bb:81: 4c:5b:1b:32:84:81:2f:68:06:d7:2d:e6:55:a4:5c:ab:ea:a2: 80:06:91:35:06:ee:d0:ad:93:6a:4d:bd:95:c8:47:0c:05:78: 3c:d8:bf:22:b2:08:c9:04:b9:10:82:ad:c5:45:57:52:8e:28: 61:01:f1:87:22:a3:ac:cf:cb:1a:1e:3f:2b:c7:10:2a:bf:b1: a8:c8:43:fe:85:1e:80:36:38:9a:1a:70:90:c2:75:bd:15:00: 5e:ea:50:98:9f:c5:8d:cc:36:59:9a:31:f0:9b:fc:f8:b7:3f: 7c:6a:2c:95:05:50:7c:05:52:67:57:78:dd:76:08:59:3a:2b: 8b:1e:30:05:50:a2:8e:f5:8d:5c:ce:8f:7d:43:76:d3:6d:f2: f6:38:65:f5:67:81:82:d6:a7:83:4c:40:e9:83:0a:be:07:52: b0:58:96:05:c4:97:7f:08:31:ee:c1:3a:a2:83:b0:35:22:ab: 9f:79:04:64:68:df:d2:0b:d6:f2:cb:31:3c:96:19:8a:40:12: 75:b1:d6:43:a5:71:2e:42:ba:cd:7e:a4:06:bf:42:56:d4:d4: e0:1f:9b:be:5a:0e:d1:82:9e:b3:15:07:99:19:0d:0d:1e:a1: c6:c1:85:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrqJib0Bc05tDK/Y3nOwEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjUxMTIyMTMwMjI0WhcNMjUxMTIzMTMwMjI0WjAzMTEwLwYDVQQD Eyg4MDExOTU5NzczODNhN2VhNDU2NTE3YzQ5ZTdkMTQ2MTA2OWE0ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJTeD3kmfk4qPKcWN0DyvSNuUFVX LlQR7I9V31m9fKRRDLpgQuFsGFQ4xpadl/RIb+nfCw3j7wd1Vr/byPQv3b45x5Jl HEkMf34Xwy/lweX9uzvrRQMjvIFszcBMUDWA9PKJxf/w9yVHYWZBk7JhQw7DDlFY Qr+1SbvC87P3CATTE1L0n0TFjvMS3ZpN5zVMCIxwkJH3QAA44LyNPFZk2kD+m065 AgcvYfWsEhy8rsaIuOgW0twD4jBJmkZ0CwAnXANmF66dIb5jvV5SlV+9hbWUX2G4 zgUEe4KoyCJhl3KAF+6bQR+qOqkoUPBuzph0Gxjz9jq0gTWYA0qL3MUALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIARlZdzg6fqRWUXxJ59FGEGmk03MB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWzoL3j1 COXuCH5yrLfs7buBTFsbMoSBL2gG1y3mVaRcq+qigAaRNQbu0K2Tak29lchHDAV4 PNi/IrIIyQS5EIKtxUVXUo4oYQHxhyKjrM/LGh4/K8cQKr+xqMhD/oUegDY4mhpw kMJ1vRUAXupQmJ/Fjcw2WZox8Jv8+Lc/fGoslQVQfAVSZ1d43XYIWTorix4wBVCi jvWNXM6PfUN2023y9jhl9WeBgtang0xA6YMKvgdSsFiWBcSXfwgx7sE6ooOwNSKr n3kEZGjf0gvW8ssxPJYZikASdbHWQ6VxLkK6zX6kBr9CVtTU4B+bvloO0YKesxUH mRkNDR6hxsGFNg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:04 2025 by rpki-client