This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft File: 83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json) Hash identifier: FGVWkmD6gYFeAdKAJ3B0oidxBYYCVHgr+wbdksc6GV8= Subject key identifier: BC:BD:98:4B:5D:ED:AB:BA:C7:68:4B:9D:73:09:85:F3:A0:0F:7E:A5 Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47 Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47 Certificate serial: 019B0E2560E401FCA4ED1B58843F4E2A4BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft Manifest number: 0AAB Signing time: Thu 11 Dec 2025 16:01:29 +0000 Manifest this update: Thu 11 Dec 2025 16:01:29 +0000 Manifest next update: Fri 12 Dec 2025 16:01:29 +0000 Files and hashes: 1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: +/6kl1w7WJ4gITxAMh+hIJQ/fmdnI+WxNut1tYdb2Yw=) 2: kDhp1dHjDBAXX9BsUPItX2dtNTc.roa (hash: PynDqUC0SP3COf4tmeohMx6MacUGS0U4TVEP+3iExHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:60:e4:01:fc:a4:ed:1b:58:84:3f:4e:2a:4b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47 Validity Not Before: Dec 11 16:01:29 2025 GMT Not After : Dec 12 16:01:29 2025 GMT Subject: CN=bcbd984b5dedabbac7684b9d730985f3a00f7ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b2:58:e6:e3:a7:69:5e:b3:b3:da:7e:a6:5b: 19:02:87:a5:d6:9f:5b:af:37:b7:45:f9:f1:8b:23: f5:27:48:4d:4e:2f:0c:bb:6c:db:1c:b4:72:ec:2b: 4b:c8:30:46:8f:16:f2:cc:a8:ae:57:f0:2d:da:c5: a8:7b:85:41:a6:f3:78:83:1d:e3:15:4e:ef:c1:1b: 10:b7:f9:cc:e9:65:7c:e7:9b:ff:db:09:b8:e5:b8: 3d:8b:5b:53:9e:30:cb:dc:9d:96:1e:bb:1e:92:f3: 07:de:99:c0:d9:8d:70:c4:10:0a:ad:66:0a:ad:7f: 23:e0:44:46:b7:63:41:d9:c7:7e:8c:be:8f:50:29: 61:c0:6b:05:9d:e1:7e:22:dd:03:90:2c:19:f5:ea: 6d:3f:d1:d2:f1:58:28:b8:66:cd:84:73:e3:e9:d3: 9c:69:a7:20:bf:cf:58:3a:2e:81:4a:b3:52:49:49: 8f:ea:94:e1:1c:a1:86:24:7d:89:03:f7:81:8c:b3: be:ff:1d:97:b6:e0:30:83:e6:79:a3:d1:1d:90:36: 34:76:3f:93:5b:4b:61:56:a9:df:fd:88:c5:25:a0: a1:75:99:ab:0d:88:17:ee:f3:18:39:12:c5:42:e4: 2d:bb:43:34:43:9f:cf:f3:69:d0:3a:49:a7:0d:13: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BD:98:4B:5D:ED:AB:BA:C7:68:4B:9D:73:09:85:F3:A0:0F:7E:A5 X509v3 Authority Key Identifier: keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:46:a4:7c:af:9b:31:1a:dc:4b:d1:09:93:9a:ed:4b:4f:59: d8:57:53:94:6d:90:60:0f:51:87:67:70:9c:77:2a:c2:ef:87: 72:58:23:0f:f1:bf:8d:42:e7:e1:94:a9:81:d6:c3:e6:37:a3: e5:56:78:6f:14:c9:7f:34:23:96:10:fb:ff:df:98:b8:b5:39: 04:be:1e:10:d2:12:74:1a:56:4e:27:5f:d8:c8:ce:5e:d9:5c: 10:3f:83:ba:5d:d1:68:f9:6a:8b:ef:e5:10:e0:36:d6:dd:a0: 41:e4:36:68:79:57:c5:d4:56:b6:fd:4d:eb:0e:d8:aa:c4:c9: df:a7:73:3b:0b:29:16:5c:e9:92:3b:91:8e:bf:37:80:fd:56: be:2c:7c:06:29:a1:e8:b7:41:b7:15:2b:e8:a2:14:f1:ea:73: 77:a6:ff:e6:c3:f2:db:bc:e8:e6:cb:19:a6:b8:20:db:d0:d2: 19:4d:4b:f1:95:d4:30:9f:a6:d7:f1:0f:0c:2b:39:39:ed:e7: f9:d0:4e:b8:e3:64:38:19:4a:cc:96:d6:f1:60:d6:ec:27:59: 3c:71:9a:91:c7:31:c5:64:28:c7:97:09:bd:7e:2a:74:32:19: b3:ac:27:ac:eb:43:9b:ae:68:37:ae:eb:8f:d9:57:7e:96:6e: 8f:c7:bc:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJWDkAfyk7RtYhD9OKkuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzUyYzEwZjFiMGQwN2I1ZjQ4ZTU3OWRmZDE0ZTM3Mjcx M2ZiNDcwHhcNMjUxMjExMTYwMTI5WhcNMjUxMjEyMTYwMTI5WjAzMTEwLwYDVQQD EyhiY2JkOTg0YjVkZWRhYmJhYzc2ODRiOWQ3MzA5ODVmM2EwMGY3ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7JY5uOnaV6zs9p+plsZAoel1p9b rze3RfnxiyP1J0hNTi8Mu2zbHLRy7CtLyDBGjxbyzKiuV/At2sWoe4VBpvN4gx3j FU7vwRsQt/nM6WV855v/2wm45bg9i1tTnjDL3J2WHrsekvMH3pnA2Y1wxBAKrWYK rX8j4ERGt2NB2cd+jL6PUClhwGsFneF+It0DkCwZ9eptP9HS8VgouGbNhHPj6dOc aacgv89YOi6BSrNSSUmP6pThHKGGJH2JA/eBjLO+/x2XtuAwg+Z5o9EdkDY0dj+T W0thVqnf/YjFJaChdZmrDYgX7vMYORLFQuQtu0M0Q5/P82nQOkmnDROUUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy9mEtd7au6x2hLnXMJhfOgD36lMB8GA1UdIwQY MBaAFPN1LBDxsNB7X0jled/RTjcnE/tHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmMyYWYtNGY2ZC00NWJkLWFhMTAt ZTg3MDJlYTU5MDE2LzEvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmMyYWYtNGY2ZC00NWJkLWFhMTAtZTg3MDJlYTU5MDE2 LzEvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0akfK+b MRrcS9EJk5rtS09Z2FdTlG2QYA9Rh2dwnHcqwu+HclgjD/G/jULn4ZSpgdbD5jej 5VZ4bxTJfzQjlhD7/9+YuLU5BL4eENISdBpWTidf2MjOXtlcED+Dul3RaPlqi+/l EOA21t2gQeQ2aHlXxdRWtv1N6w7YqsTJ36dzOwspFlzpkjuRjr83gP1Wvix8Bimh 6LdBtxUr6KIU8epzd6b/5sPy27zo5ssZprgg29DSGU1L8ZXUMJ+m1/EPDCs5Oe3n +dBOuONkOBlKzJbW8WDW7CdZPHGakccxxWQox5cJvX4qdDIZs6wnrOtDm65oN67r j9lXfpZuj8e84A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:36:52 2025 by rpki-client