This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json) Hash identifier: ykhlICrQNtmZmBxxObk5CAvG43plo6Nq8P7HMf2CWSc= Subject key identifier: F2:BA:64:E0:30:EF:5F:56:F8:DA:C8:B0:1C:C3:6E:E4:3C:A0:25:0F Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6 Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6 Certificate serial: 019B3343CFE65C837E333DB94E98D4337B68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft Manifest number: 12BD Signing time: Thu 18 Dec 2025 21:00:40 +0000 Manifest this update: Thu 18 Dec 2025 21:00:40 +0000 Manifest next update: Fri 19 Dec 2025 21:00:40 +0000 Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=) 2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: qsFWsJotAN+zyyMExD1FOK+odRB9NVJ6HiR4KM2Hn5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:cf:e6:5c:83:7e:33:3d:b9:4e:98:d4:33:7b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6 Validity Not Before: Dec 18 21:00:40 2025 GMT Not After : Dec 19 21:00:40 2025 GMT Subject: CN=f2ba64e030ef5f56f8dac8b01cc36ee43ca0250f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:96:e4:91:73:7e:45:3b:e3:0e:b0:36:79: 27:49:d4:4a:f2:7c:d7:1b:67:c2:78:79:ba:1e:ac: 07:93:be:32:7e:f5:d0:7a:0e:d3:fd:99:2c:b7:f3: f7:2b:50:15:00:14:f2:94:af:90:55:af:5d:6a:ae: 21:7e:1a:d4:0a:b4:65:93:e4:8e:b7:d6:2e:3e:f6: 03:11:87:e8:69:00:34:d2:de:c7:13:ea:e5:b3:8e: b5:d2:ae:d5:04:f4:92:7b:68:11:cf:e7:a9:fd:f0: 96:6c:de:d7:ba:61:d3:ab:d2:ff:be:3f:0e:c9:88: 3c:2b:0d:21:6e:dc:29:2e:0e:97:db:02:ee:54:84: 93:61:76:3b:04:73:57:97:1e:03:c2:c9:30:38:10: 48:82:bb:b3:06:01:76:e0:47:5b:11:c4:16:6f:8f: 25:be:8d:9d:32:90:a6:17:93:21:08:5b:10:cc:2c: 78:d6:b4:74:b1:1e:f4:27:86:80:a8:8a:78:72:1f: c1:4a:b0:8b:f8:7f:10:d4:5c:64:4f:5d:d1:71:6a: 74:e2:a1:41:08:73:bb:9b:6c:6e:4e:d7:57:fd:c5: 5e:ba:e4:f6:13:32:34:b7:48:d5:81:89:48:28:0e: 47:ad:37:c5:75:5e:46:ba:6b:6c:7f:2a:6c:ce:b8: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:64:E0:30:EF:5F:56:F8:DA:C8:B0:1C:C3:6E:E4:3C:A0:25:0F X509v3 Authority Key Identifier: keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:70:4d:d1:db:17:6d:34:ce:01:8b:d9:76:fb:27:2f:53:e6: 92:06:f2:79:e5:b6:c6:59:b7:81:c9:77:dd:86:53:20:c9:d8: 89:c6:14:fc:93:d3:76:a8:a4:76:e7:c3:5a:b5:c4:88:49:cd: 27:a5:b8:4c:89:c8:d6:a5:da:17:70:cb:f9:49:ac:62:28:77: 8f:0a:5a:c3:1c:49:9f:a9:f3:f2:3a:44:7e:2f:32:1c:f9:63: 2e:e1:00:62:e3:b3:59:a8:a7:67:f4:6f:b3:e2:42:25:f9:b6: 22:d3:bc:e3:d9:44:40:c8:a4:48:30:12:46:81:91:5c:3b:63: 38:38:1b:69:49:27:76:e7:0d:da:1f:3a:73:c8:22:87:90:63: 36:53:68:73:ae:64:c0:ce:c8:92:be:7b:6e:d9:ef:4e:43:bd: f4:78:e0:d9:49:7e:0e:b8:99:76:64:25:b1:31:1e:6c:e5:3c: 38:80:72:be:08:d0:eb:e7:9d:b4:e5:4c:09:f4:ca:0d:12:d7: 21:8c:16:b8:c2:c8:1b:19:f8:37:f1:1f:8d:e9:af:00:89:9b: 89:95:e7:2a:c6:f4:90:fb:d1:e1:2e:1d:5f:d3:23:dd:ae:86: 2c:fa:bf:eb:f6:8b:a9:90:62:08:6f:24:57:8e:3a:e2:68:f9: 18:02:e0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ8/mXIN+Mz25TpjUM3toMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzA2M2E4NTQ0NTAxOWFiODQ1YTViN2U1NDM5NWNkZDM5 OTI3ZjYwHhcNMjUxMjE4MjEwMDQwWhcNMjUxMjE5MjEwMDQwWjAzMTEwLwYDVQQD EyhmMmJhNjRlMDMwZWY1ZjU2ZjhkYWM4YjAxY2MzNmVlNDNjYTAyNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zqW5JFzfkU74w6wNnknSdRK8nzX G2fCeHm6HqwHk74yfvXQeg7T/Zkst/P3K1AVABTylK+QVa9daq4hfhrUCrRlk+SO t9YuPvYDEYfoaQA00t7HE+rls4610q7VBPSSe2gRz+ep/fCWbN7XumHTq9L/vj8O yYg8Kw0hbtwpLg6X2wLuVISTYXY7BHNXlx4DwskwOBBIgruzBgF24EdbEcQWb48l vo2dMpCmF5MhCFsQzCx41rR0sR70J4aAqIp4ch/BSrCL+H8Q1FxkT13RcWp04qFB CHO7m2xuTtdX/cVeuuT2EzI0t0jVgYlIKA5HrTfFdV5GumtsfypszrhqmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK6ZOAw719W+NrIsBzDbuQ8oCUPMB8GA1UdIwQY MBaAFPNwY6hURQGauEWlt+VDlc3TmSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgt YzM5NDdlNzZiZTc1LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgtYzM5NDdlNzZiZTc1 LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnBN0dsX bTTOAYvZdvsnL1PmkgbyeeW2xlm3gcl33YZTIMnYicYU/JPTdqikdufDWrXEiEnN J6W4TInI1qXaF3DL+UmsYih3jwpawxxJn6nz8jpEfi8yHPljLuEAYuOzWainZ/Rv s+JCJfm2ItO849lEQMikSDASRoGRXDtjODgbaUknducN2h86c8gih5BjNlNoc65k wM7Ikr57btnvTkO99Hjg2Ul+DriZdmQlsTEebOU8OIByvgjQ6+edtOVMCfTKDRLX IYwWuMLIGxn4N/EfjemvAImbiZXnKsb0kPvR4S4dX9Mj3a6GLPq/6/aLqZBiCG8k V4464mj5GALg6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:46:28 2025 by rpki-client