This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft File: 83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json) Hash identifier: aDvTzRSsebwMu+ofr06c8+5BGQgvcibmpJumGRyqA7s= Subject key identifier: 50:B3:E4:C6:F7:BB:90:92:E6:21:94:7C:8C:02:C2:97:26:8B:BB:32 Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019B38A2C0034960EFE6068DA7229EF314BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft Manifest number: 0A56 Signing time: Fri 19 Dec 2025 22:02:28 +0000 Manifest this update: Fri 19 Dec 2025 22:02:28 +0000 Manifest next update: Sat 20 Dec 2025 22:02:28 +0000 Files and hashes: 1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=) 2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: Sipll68FIofvCOqp9i0HTgVfsT56Vjo3d0T1HwaczaA=) 3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=) 4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:c0:03:49:60:ef:e6:06:8d:a7:22:9e:f3:14:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Dec 19 22:02:28 2025 GMT Not After : Dec 20 22:02:28 2025 GMT Subject: CN=50b3e4c6f7bb9092e621947c8c02c297268bbb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:90:c7:01:59:42:cd:a7:14:b0:7b:2c:39: dd:12:3d:bf:78:15:e3:94:55:6b:a7:e2:68:bb:bf: e6:12:0e:6d:41:db:2b:62:6c:13:b8:d2:e6:7a:0e: 5a:d4:17:39:a4:7a:4e:d5:85:6f:5c:42:db:07:61: 46:07:a0:d5:4a:7c:bd:8d:88:82:12:81:f8:20:59: 45:c3:c8:de:77:c3:7f:cf:dc:fd:68:fc:03:8f:0c: 1b:ca:9f:a3:d9:6d:ed:d5:49:a1:9c:14:24:9c:6f: 27:a8:27:33:d7:d8:6a:6d:17:9e:e5:48:91:6a:37: 8c:3a:4e:10:52:73:94:02:66:0c:22:95:f6:40:f3: 22:eb:fa:7f:72:25:69:7e:9d:9b:aa:a0:e7:82:e2: fc:17:b7:66:52:22:43:f4:c6:37:d9:99:7e:97:7d: 0a:dc:f9:c1:8d:7f:e5:6a:9e:11:29:9e:c5:47:69: bd:9f:26:dd:33:68:66:93:9c:b8:23:d2:5a:e9:e8: f3:cc:d8:95:ca:8f:ad:73:d6:f0:cd:51:db:af:99: 30:67:3f:2e:d3:99:df:c3:b8:57:9e:09:c0:d1:d9: da:44:5f:a9:ec:02:05:46:c9:5f:c2:9a:bc:04:fd: 3a:9a:3f:42:05:c1:7a:59:01:ba:68:6d:58:d2:a9: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:E4:C6:F7:BB:90:92:E6:21:94:7C:8C:02:C2:97:26:8B:BB:32 X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:65:42:98:fe:56:91:6e:8d:78:33:f9:57:53:bd:f4:6d:dd: eb:cf:fb:0b:7e:b6:da:c4:b3:12:66:d4:ea:b6:1e:f8:71:53: c1:cc:28:6a:f0:c7:54:b6:f6:a3:14:f8:45:0f:e3:c3:fd:20: 65:cb:bb:b6:7d:0f:a6:72:1a:25:9d:37:d2:b6:d8:ce:43:fb: 1e:be:f9:af:e4:ca:0e:47:63:e5:c7:04:f7:6f:d9:2f:f9:4d: 8d:45:e3:2e:59:0e:aa:2a:cf:27:67:48:cd:c0:d2:08:08:ce: 35:0a:97:c1:d7:92:12:76:bf:a2:96:d8:7f:69:ca:3e:44:82: 4d:48:a7:03:ba:6e:84:fe:73:50:09:97:d9:0e:8c:1e:b0:08: 5e:58:8d:b6:74:f7:73:3b:cb:3e:2f:33:ad:a6:4a:8a:fd:bd: 77:1f:4c:a5:a3:ad:00:ab:94:71:eb:c6:4a:d9:c0:01:e4:05: b3:9e:78:4d:50:97:be:b4:1d:bd:d3:25:9b:ac:db:50:09:68: a4:52:fe:3f:1c:dc:e3:0f:06:38:2e:c1:ae:65:c2:73:31:26: f9:46:76:70:fe:c8:ef:a3:0e:c4:74:72:0b:3c:77:49:11:4a: 6d:b3:89:10:63:13:45:00:b0:18:58:2e:4f:23:54:8b:d9:c6: 40:e7:09:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4osADSWDv5gaNpyKe8xS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjUxMjE5MjIwMjI4WhcNMjUxMjIwMjIwMjI4WjAzMTEwLwYDVQQD Eyg1MGIzZTRjNmY3YmI5MDkyZTYyMTk0N2M4YzAyYzI5NzI2OGJiYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PmQxwFZQs2nFLB7LDndEj2/eBXj lFVrp+Jou7/mEg5tQdsrYmwTuNLmeg5a1Bc5pHpO1YVvXELbB2FGB6DVSny9jYiC EoH4IFlFw8jed8N/z9z9aPwDjwwbyp+j2W3t1UmhnBQknG8nqCcz19hqbRee5UiR ajeMOk4QUnOUAmYMIpX2QPMi6/p/ciVpfp2bqqDnguL8F7dmUiJD9MY32Zl+l30K 3PnBjX/lap4RKZ7FR2m9nybdM2hmk5y4I9Ja6ejzzNiVyo+tc9bwzVHbr5kwZz8u 05nfw7hXngnA0dnaRF+p7AIFRslfwpq8BP06mj9CBcF6WQG6aG1Y0qm8wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCz5Mb3u5CS5iGUfIwCwpcmi7syMB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGVCmP5W kW6NeDP5V1O99G3d68/7C3622sSzEmbU6rYe+HFTwcwoavDHVLb2oxT4RQ/jw/0g Zcu7tn0PpnIaJZ030rbYzkP7Hr75r+TKDkdj5ccE92/ZL/lNjUXjLlkOqirPJ2dI zcDSCAjONQqXwdeSEna/opbYf2nKPkSCTUinA7puhP5zUAmX2Q6MHrAIXliNtnT3 czvLPi8zraZKiv29dx9MpaOtAKuUcevGStnAAeQFs554TVCXvrQdvdMlm6zbUAlo pFL+Pxzc4w8GOC7BrmXCczEm+UZ2cP7I76MOxHRyCzx3SRFKbbOJEGMTRQCwGFgu TyNUi9nGQOcJag== -----END CERTIFICATE-----Generated at Sat Dec 20 04:42:18 2025 by rpki-client