This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft File: 83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json) Hash identifier: nrNVCGFji7Sti8pdKD+/qyGebBoSfXctnAlz5zLAEtc= Subject key identifier: A0:D2:1E:ED:5D:5F:A1:6D:A9:99:FB:F1:6A:5F:C5:31:EF:32:B6:CA Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019B4DE07B7793127B2B0F8DED045E2DC50F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft Manifest number: 0A61 Signing time: Wed 24 Dec 2025 01:01:55 +0000 Manifest this update: Wed 24 Dec 2025 01:01:55 +0000 Manifest next update: Thu 25 Dec 2025 01:01:55 +0000 Files and hashes: 1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=) 2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: xfJDIzTJVZvzsO5ASgn9x9zxcszYoCtc1seyHWlxV14=) 3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=) 4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:7b:77:93:12:7b:2b:0f:8d:ed:04:5e:2d:c5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Dec 24 01:01:55 2025 GMT Not After : Dec 25 01:01:55 2025 GMT Subject: CN=a0d21eed5d5fa16da999fbf16a5fc531ef32b6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c0:9f:44:3c:06:0d:8d:05:0e:d9:5a:ba:cb: 1e:e5:47:0f:c8:18:59:68:5c:da:2a:97:65:49:25: db:9c:19:06:9c:9b:f2:73:c5:c0:64:a3:4f:b2:b7: a2:86:5c:ce:9f:c9:c8:5d:c1:4a:41:8c:50:50:4d: 5c:db:d2:d3:1a:df:b1:4f:e1:5f:3d:9f:37:34:c8: ae:46:63:e7:ff:ac:34:a5:bc:de:09:d3:e8:4a:7c: f1:a8:a9:84:68:ad:8e:78:1b:de:8c:b9:41:53:b3: e9:11:3b:73:3b:7b:42:d5:7e:fe:32:f3:1c:b9:bf: 80:aa:19:27:1b:0d:9e:b0:67:09:58:8c:20:7e:bc: 1e:f4:4b:30:3f:3c:d9:c8:cd:67:4b:24:3f:79:56: ce:4d:de:81:fb:fd:cb:b2:ba:5e:91:82:4c:54:51: 7e:6e:1c:82:55:55:ff:63:64:68:0c:a9:bd:fc:20: 3f:3b:8e:aa:53:b9:0c:47:13:d7:3e:4d:da:bb:9b: 4c:d4:83:d7:36:2d:78:7a:d2:64:05:da:38:88:82: d1:7e:0f:5c:5f:c6:01:27:01:13:ef:20:d2:7e:e8: d8:3d:4a:63:d5:ae:b7:b7:e6:8c:d2:c9:f3:ac:38: 5e:be:02:41:6f:77:44:7a:a6:e5:82:0a:95:4c:1f: e3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D2:1E:ED:5D:5F:A1:6D:A9:99:FB:F1:6A:5F:C5:31:EF:32:B6:CA X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2d:07:91:e9:97:c1:dd:08:0d:3c:bc:77:15:c8:77:df:91: 0a:75:07:be:9c:1f:66:81:e8:8d:86:ba:a8:72:86:2e:1f:b5: a6:71:dc:8a:a4:15:9b:f3:d2:79:1c:48:56:03:37:ac:92:ed: 06:3d:2f:99:35:e5:e9:a8:93:6b:79:ca:da:d2:20:2a:88:12: 6f:b1:78:ea:6c:ea:b5:2c:f0:34:b3:3c:db:8a:50:a3:e0:5a: 0e:c6:80:d6:29:0d:de:24:9f:d4:64:ab:84:ba:e1:80:70:84: fd:ea:a3:e3:6b:54:a5:7f:47:ed:1e:df:25:49:f6:a6:69:d5: 8b:89:2a:f3:56:cb:4b:2e:83:19:de:a5:e5:37:12:5d:6a:82: 88:4c:92:93:56:2d:19:fc:9d:ae:50:25:ae:61:d7:c3:0a:bc: 5f:c7:18:6a:ac:c1:84:63:d8:53:7b:be:d9:29:32:ba:a4:e8: 8c:a4:37:da:4a:b0:45:d4:a5:bf:aa:7b:48:42:f5:9e:e8:1d: cd:e5:60:a0:da:eb:aa:04:21:5c:14:55:77:dc:4b:b6:6d:fa: 51:be:47:9c:88:e6:95:84:85:05:e3:8d:90:49:47:df:bb:32: 51:16:70:e4:02:93:dd:3a:56:6c:fd:41:ad:f2:23:fd:45:27: d1:e1:83:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Ht3kxJ7Kw+N7QReLcUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjUxMjI0MDEwMTU1WhcNMjUxMjI1MDEwMTU1WjAzMTEwLwYDVQQD EyhhMGQyMWVlZDVkNWZhMTZkYTk5OWZiZjE2YTVmYzUzMWVmMzJiNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MCfRDwGDY0FDtlausse5UcPyBhZ aFzaKpdlSSXbnBkGnJvyc8XAZKNPsreihlzOn8nIXcFKQYxQUE1c29LTGt+xT+Ff PZ83NMiuRmPn/6w0pbzeCdPoSnzxqKmEaK2OeBvejLlBU7PpETtzO3tC1X7+MvMc ub+AqhknGw2esGcJWIwgfrwe9EswPzzZyM1nSyQ/eVbOTd6B+/3LsrpekYJMVFF+ bhyCVVX/Y2RoDKm9/CA/O46qU7kMRxPXPk3au5tM1IPXNi14etJkBdo4iILRfg9c X8YBJwET7yDSfujYPUpj1a63t+aM0snzrDhevgJBb3dEeqblggqVTB/jpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDSHu1dX6FtqZn78WpfxTHvMrbKMB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS0HkemX wd0IDTy8dxXId9+RCnUHvpwfZoHojYa6qHKGLh+1pnHciqQVm/PSeRxIVgM3rJLt Bj0vmTXl6aiTa3nK2tIgKogSb7F46mzqtSzwNLM824pQo+BaDsaA1ikN3iSf1GSr hLrhgHCE/eqj42tUpX9H7R7fJUn2pmnVi4kq81bLSy6DGd6l5TcSXWqCiEySk1Yt GfydrlAlrmHXwwq8X8cYaqzBhGPYU3u+2SkyuqTojKQ32kqwRdSlv6p7SEL1nugd zeVgoNrrqgQhXBRVd9xLtm36Ub5HnIjmlYSFBeONkElH37syURZw5AKT3TpWbP1B rfIj/UUn0eGD+A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:30 2025 by rpki-client