This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft File: 83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json) Hash identifier: oVY2IhJCgu6eCjI9ufEbWtO568BxZtCVpHeCJtS2BR0= Subject key identifier: 41:2D:19:8B:35:25:8C:B0:1A:BC:9F:9B:A1:43:02:E0:90:04:8F:77 Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019BA4FE34D15E029EE68ABDB423F6461769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft Manifest number: 0A8F Signing time: Fri 09 Jan 2026 23:01:21 +0000 Manifest this update: Fri 09 Jan 2026 23:01:21 +0000 Manifest next update: Sat 10 Jan 2026 23:01:21 +0000 Files and hashes: 1: 0zzNK_dip5D-vbdS46pdPM0bWmY.roa (hash: +Q7jclQp9h+mglscOOjepjoQV01QfX45LZ55s+yRBPA=) 2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: At0ucQzlvvoj25woy4i6LzETXtSR8rsixcTFmX9XkuA=) 3: TOdssmECwVP8bGD2vmk5VV7S5q8.roa (hash: i0+RAc65INiM3wP9huvJS9AUFFUa8IJxYIWJTeUW7tI=) 4: XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa (hash: WZz5fH/inmisjDgfduYv271FfaeCoOytDiztCH+AR90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:fe:34:d1:5e:02:9e:e6:8a:bd:b4:23:f6:46:17:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Jan 9 23:01:21 2026 GMT Not After : Jan 10 23:01:21 2026 GMT Subject: CN=412d198b35258cb01abc9f9ba14302e090048f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:06:25:97:2f:03:29:b8:3d:9b:5c:58:17: 90:c0:c7:31:4e:cd:6f:06:53:3f:10:72:b7:31:16: e2:80:24:dd:46:c0:36:eb:93:66:67:73:78:f5:20: 0c:f1:eb:73:64:d0:36:3c:be:b7:8c:83:eb:92:6a: 6a:ce:7a:81:88:ad:f3:7a:34:80:b5:b8:22:28:5c: e0:dd:ab:de:0e:90:93:67:50:9b:48:23:88:a5:d5: d5:b0:a0:ce:65:5d:b8:50:70:91:50:55:89:d4:f5: 58:19:9c:89:b5:9f:a6:4b:85:b9:c9:92:1b:f4:48: 11:37:de:f7:65:75:32:1a:23:bf:c9:c5:8c:1a:e1: 3a:0a:e2:08:e9:1d:7e:7c:b4:f6:72:50:0b:08:ea: 9d:78:82:7b:63:98:ce:d1:40:74:a3:17:a9:b7:cc: 78:03:cc:c7:aa:d6:3e:85:1d:9b:3a:f9:a3:12:7d: 09:ee:c0:c2:63:6e:e0:aa:83:1f:95:7f:21:6c:90: 4e:c9:10:53:37:e9:8e:c2:09:54:e7:4e:dc:f5:f1: 14:dd:4c:c0:5e:9e:92:b2:3c:31:b5:4d:be:ce:4d: a1:09:b4:92:a3:23:d4:b1:8e:36:47:43:bc:58:a6: b2:2f:86:a4:29:74:2c:8b:ec:33:98:0c:e9:db:21: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2D:19:8B:35:25:8C:B0:1A:BC:9F:9B:A1:43:02:E0:90:04:8F:77 X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:a3:05:2d:6f:a7:2f:49:39:d2:c3:1b:fb:4a:d2:fa:50: 61:1d:9a:66:c5:f4:ab:29:c1:8f:d2:ad:a7:cd:98:04:13:63: 4e:4b:63:19:b7:9f:1f:f8:0d:5f:19:68:68:c5:e4:27:78:4f: ee:9d:98:56:dd:5a:02:bb:a2:e5:ed:7e:b7:13:7b:c8:4b:33: e6:1a:5f:36:5e:6b:69:2d:05:63:f3:6d:d1:97:8b:3e:dd:90: 70:31:70:ba:18:0d:2c:64:13:b2:50:12:db:b2:21:ff:4b:64: 5a:ab:5a:67:d2:04:a4:68:e3:6e:00:10:5c:4a:03:66:a5:2c: d7:aa:8a:d0:11:7e:fc:2c:3a:f3:d1:6d:95:d9:d5:6c:56:d4: da:c9:2b:c4:92:cf:a6:73:c2:3b:6a:c3:4b:57:e7:5d:ec:d7: 82:14:4d:14:3e:1a:84:25:3d:8c:d6:5d:41:b3:a9:e3:ed:57: 8e:2c:4f:c1:cd:35:2f:44:b9:18:d2:37:64:0d:ae:d4:37:6f: 7a:fc:9b:e8:14:61:53:26:f8:e4:07:45:2b:72:89:35:16:b0: bb:22:a5:ef:d9:9a:0c:5b:f4:e7:e7:ab:e3:cc:43:28:ad:4d: f1:67:62:85:ea:2f:28:a4:68:7a:b3:6f:99:b4:72:29:26:b1: a6:8e:12:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuk/jTRXgKe5oq9tCP2RhdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjYwMTA5MjMwMTIxWhcNMjYwMTEwMjMwMTIxWjAzMTEwLwYDVQQD Eyg0MTJkMTk4YjM1MjU4Y2IwMWFiYzlmOWJhMTQzMDJlMDkwMDQ4Zjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+IGJZcvAym4PZtcWBeQwMcxTs1v BlM/EHK3MRbigCTdRsA265NmZ3N49SAM8etzZNA2PL63jIPrkmpqznqBiK3zejSA tbgiKFzg3aveDpCTZ1CbSCOIpdXVsKDOZV24UHCRUFWJ1PVYGZyJtZ+mS4W5yZIb 9EgRN973ZXUyGiO/ycWMGuE6CuII6R1+fLT2clALCOqdeIJ7Y5jO0UB0oxept8x4 A8zHqtY+hR2bOvmjEn0J7sDCY27gqoMflX8hbJBOyRBTN+mOwglU507c9fEU3UzA Xp6SsjwxtU2+zk2hCbSSoyPUsY42R0O8WKayL4akKXQsi+wzmAzp2yGJowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEtGYs1JYywGryfm6FDAuCQBI93MB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGyjBS1v py9JOdLDG/tK0vpQYR2aZsX0qynBj9Ktp82YBBNjTktjGbefH/gNXxloaMXkJ3hP 7p2YVt1aArui5e1+txN7yEsz5hpfNl5raS0FY/Nt0ZeLPt2QcDFwuhgNLGQTslAS 27Ih/0tkWqtaZ9IEpGjjbgAQXEoDZqUs16qK0BF+/Cw689FtldnVbFbU2skrxJLP pnPCO2rDS1fnXezXghRNFD4ahCU9jNZdQbOp4+1XjixPwc01L0S5GNI3ZA2u1Ddv evyb6BRhUyb45AdFK3KJNRawuyKl79maDFv05+er48xDKK1N8WdiheovKKRoerNv mbRyKSaxpo4S0w== -----END CERTIFICATE-----Generated at Sat Jan 10 06:02:39 2026 by rpki-client