This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json) Hash identifier: XAtmIXLnySdcJVps94Y4Sver6JOaUGSpM+1lGP7oGz8= Subject key identifier: 67:32:15:29:50:D9:7C:FE:91:DF:C6:0B:D0:83:52:A8:AD:51:E8:9E Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a Certificate serial: 019B18A83DE7CBEE85D8FFD7669DBB4261D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft Manifest number: 101C Signing time: Sat 13 Dec 2025 17:00:37 +0000 Manifest this update: Sat 13 Dec 2025 17:00:37 +0000 Manifest next update: Sun 14 Dec 2025 17:00:37 +0000 Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: uKlE8vE4BWeO/M7I3UXTiJq9E/fHFlpS8bGczveU7mQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:3d:e7:cb:ee:85:d8:ff:d7:66:9d:bb:42:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a Validity Not Before: Dec 13 17:00:37 2025 GMT Not After : Dec 14 17:00:37 2025 GMT Subject: CN=6732152950d97cfe91dfc60bd08352a8ad51e89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:9f:14:b9:7e:29:2d:4c:72:e3:60:7b:b0: 1f:09:4c:52:d5:f6:89:d5:da:f2:96:59:e1:24:b6: ea:3c:27:7a:8f:46:d8:51:a4:dd:5d:90:eb:ef:db: a4:b6:25:eb:97:cf:ac:12:26:55:38:65:89:ce:61: 5c:9b:ac:8f:a3:26:f6:d9:14:da:90:fe:68:60:b1: 6a:86:93:26:f2:01:0f:19:bf:5e:56:1f:d9:a3:22: ed:82:8e:ac:97:13:ec:46:c3:40:57:77:08:0b:0e: 6d:48:3c:db:bc:ec:64:81:8f:aa:26:2a:0b:29:f0: 6d:19:96:1c:2e:cc:b0:76:8b:a6:c6:15:d4:d4:04: 1a:51:77:c8:6e:97:54:20:c2:7d:a3:24:d8:09:50: 4c:06:54:62:f9:89:0c:34:60:c3:c6:4e:97:f0:92: b2:ce:4f:ce:df:b4:fb:65:af:e4:e4:f1:23:24:11: f2:25:9a:27:a0:99:1d:05:2a:45:76:3f:09:43:5b: f7:2d:5b:0c:4f:70:fe:0a:86:cb:fb:a2:71:65:de: 8c:07:97:2f:41:f6:d6:c1:6c:9a:4b:53:11:56:e8: e9:0e:25:ce:51:61:4f:91:d2:c5:fa:f3:bf:2a:7e: d1:ac:d6:db:a0:58:42:4f:5b:ec:d4:c5:c9:2d:51: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:15:29:50:D9:7C:FE:91:DF:C6:0B:D0:83:52:A8:AD:51:E8:9E X509v3 Authority Key Identifier: keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:33:06:4e:35:a4:52:ce:f2:39:8c:2d:df:66:98:53:28:e8: 20:17:6f:3d:d2:0f:f3:64:30:99:b8:36:49:39:71:aa:7e:c9: 97:a1:f0:b7:db:12:fd:91:bf:97:16:be:54:bf:b7:28:fb:a4: 5a:6b:b6:b5:ec:a5:36:8d:19:c2:32:03:da:43:82:9b:b3:ca: 18:97:0e:5b:2a:d9:44:83:09:fd:c5:cc:80:6b:6b:b0:52:5f: d2:7e:d5:ce:8a:1c:4a:78:bc:fd:97:39:31:5d:3e:e5:13:a3: 05:d7:a3:38:bf:8c:63:d8:d1:ac:c1:82:b3:6a:c3:18:66:a8: 22:2a:a6:46:a2:2b:0d:63:70:32:30:a8:ae:b4:18:5c:33:05: 83:0c:d1:cd:2e:17:05:93:d8:46:2b:70:dc:05:82:4b:51:41: 3c:4c:2a:dd:4e:2a:37:e3:53:25:14:27:a3:03:17:40:3c:4d: 03:97:e1:40:c7:e0:1e:9c:f7:17:0d:5b:fb:5e:8b:49:a9:10: 80:c1:ae:1c:b0:39:69:c2:1e:7d:5b:c6:c4:47:83:56:16:a3: c2:e0:89:0c:b0:9b:9f:47:19:08:f4:de:82:00:5f:ef:1d:36: e7:f8:b1:77:a9:52:f5:32:8d:07:dc:12:2d:9d:ca:8f:ce:63: 75:1e:6d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqD3ny+6F2P/XZp27QmHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzMwMDg2YTE0ZjMxYjI1NjQwYzE0MmVkZmQxN2JjOTMz MjBjNWEwHhcNMjUxMjEzMTcwMDM3WhcNMjUxMjE0MTcwMDM3WjAzMTEwLwYDVQQD Eyg2NzMyMTUyOTUwZDk3Y2ZlOTFkZmM2MGJkMDgzNTJhOGFkNTFlODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOmfFLl+KS1McuNge7AfCUxS1faJ 1dryllnhJLbqPCd6j0bYUaTdXZDr79uktiXrl8+sEiZVOGWJzmFcm6yPoyb22RTa kP5oYLFqhpMm8gEPGb9eVh/ZoyLtgo6slxPsRsNAV3cICw5tSDzbvOxkgY+qJioL KfBtGZYcLsywdoumxhXU1AQaUXfIbpdUIMJ9oyTYCVBMBlRi+YkMNGDDxk6X8JKy zk/O37T7Za/k5PEjJBHyJZonoJkdBSpFdj8JQ1v3LVsMT3D+CobL+6JxZd6MB5cv QfbWwWyaS1MRVujpDiXOUWFPkdLF+vO/Kn7RrNbboFhCT1vs1MXJLVFdpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcyFSlQ2Xz+kd/GC9CDUqitUeieMB8GA1UdIwQY MBaAFPNzAIahTzGyVkDBQu39F7yTMgxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQt NzlmMzJmZDRlMzNkLzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQtNzlmMzJmZDRlMzNk LzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTMGTjWk Us7yOYwt32aYUyjoIBdvPdIP82Qwmbg2STlxqn7Jl6Hwt9sS/ZG/lxa+VL+3KPuk Wmu2teylNo0ZwjID2kOCm7PKGJcOWyrZRIMJ/cXMgGtrsFJf0n7VzoocSni8/Zc5 MV0+5ROjBdejOL+MY9jRrMGCs2rDGGaoIiqmRqIrDWNwMjCorrQYXDMFgwzRzS4X BZPYRitw3AWCS1FBPEwq3U4qN+NTJRQnowMXQDxNA5fhQMfgHpz3Fw1b+16LSakQ gMGuHLA5acIefVvGxEeDVhajwuCJDLCbn0cZCPTeggBf7x025/ixd6lS9TKNB9wS LZ3Kj85jdR5tTA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:29 2025 by rpki-client