This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json) Hash identifier: mdfzCIx4RrO5HUkhZ40ALUuxp3PEM7EReCWv1OSEQsU= Subject key identifier: 73:80:66:99:6D:C8:BF:66:64:4B:88:8E:81:40:33:B5:79:3C:9C:93 Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6 Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6 Certificate serial: 019B4E4E0A98FDFFB2CCAE25BB9519684B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft Manifest number: 12CB Signing time: Wed 24 Dec 2025 03:01:35 +0000 Manifest this update: Wed 24 Dec 2025 03:01:35 +0000 Manifest next update: Thu 25 Dec 2025 03:01:35 +0000 Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=) 2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: flnQjmI6mMQlx83aBeTAVN1RNyGkOcwcz/uncU3+C4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:0a:98:fd:ff:b2:cc:ae:25:bb:95:19:68:4b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6 Validity Not Before: Dec 24 03:01:35 2025 GMT Not After : Dec 25 03:01:35 2025 GMT Subject: CN=738066996dc8bf66644b888e814033b5793c9c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:20:20:68:4e:e7:d5:55:26:3f:a3:a1:ef: 98:75:29:d0:21:c9:e8:48:d0:9c:bc:f7:77:29:63: 06:13:5d:db:85:6f:14:c3:e5:a4:98:14:71:60:de: 26:f1:ec:10:ec:33:03:06:f6:4f:b4:e5:ce:be:34: ef:cd:79:ce:13:cf:dc:39:70:58:ee:dc:3d:40:cf: b8:7a:40:63:29:2e:b3:7b:e2:04:7c:2d:2e:9c:91: af:9d:26:a5:9a:82:40:c7:15:73:fe:8d:e0:cb:9d: e7:87:46:28:0c:36:22:40:d0:3b:3b:fe:42:45:ea: 87:87:3b:e2:56:d9:b2:e9:61:b4:f5:e5:d4:8a:a0: 86:c2:f5:77:80:c0:81:55:b2:55:d2:a9:ec:7e:08: 97:3a:3e:60:c6:89:87:81:75:db:60:57:04:3c:ff: d3:46:74:6f:bb:73:70:8f:dd:d9:64:b0:8d:31:e7: 10:12:ae:8d:28:4c:43:29:58:77:f3:a0:01:55:5b: 61:7c:ea:7a:33:fe:9c:d9:f1:41:25:c6:cd:bc:4e: 5e:2d:be:68:87:c1:7c:a2:9f:04:ac:0b:7b:2e:d1: db:c2:4d:94:20:df:6f:14:24:38:79:00:4d:dd:4a: 5d:c5:26:22:2f:60:fe:d9:27:d6:74:b5:5d:a3:8c: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:66:99:6D:C8:BF:66:64:4B:88:8E:81:40:33:B5:79:3C:9C:93 X509v3 Authority Key Identifier: keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:67:1f:9d:83:e5:80:3c:e0:31:13:04:e6:e5:5f:09:00:cb: 69:11:4e:dd:57:1c:89:3a:4e:b8:4d:73:b3:5c:98:84:c6:3b: 62:0f:e0:18:c5:f8:68:ff:a7:4f:ac:c7:90:66:ac:7a:0c:a5: 5a:7a:39:d7:2b:88:bc:b8:80:f5:aa:d4:5c:70:eb:fb:4e:ed: ac:0b:e5:d5:36:78:59:d0:e1:ad:d7:af:01:42:b6:31:f2:d7: 2f:7d:de:bd:50:6d:22:6b:5a:e8:15:53:81:22:88:ca:da:42: 9b:50:5f:3a:fe:42:58:e5:b4:9d:11:ca:b1:ea:7e:53:71:e6: 71:b2:9c:8d:f8:92:81:28:39:cf:d0:17:e9:bb:55:9b:6a:61: a7:f0:f4:df:ea:24:77:da:34:99:5d:27:cd:1f:f7:07:8a:37: b0:37:86:d3:0c:07:38:b6:19:be:ea:c3:59:87:b9:60:cd:62: ef:38:73:31:c7:20:b6:37:d4:e7:54:7f:1e:60:11:79:15:a4: d1:ea:03:4b:0a:21:f3:1c:e7:40:28:72:1f:02:26:60:41:36: 4e:26:e7:b3:f5:06:93:e0:01:e0:dd:d2:56:3a:4e:88:6a:88: 14:df:c0:b4:29:1e:e2:95:e6:c5:58:23:ab:d8:af:6f:06:a4: 4a:d1:98:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTgqY/f+yzK4lu5UZaEsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzA2M2E4NTQ0NTAxOWFiODQ1YTViN2U1NDM5NWNkZDM5 OTI3ZjYwHhcNMjUxMjI0MDMwMTM1WhcNMjUxMjI1MDMwMTM1WjAzMTEwLwYDVQQD Eyg3MzgwNjY5OTZkYzhiZjY2NjQ0Yjg4OGU4MTQwMzNiNTc5M2M5YzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMgIGhO59VVJj+joe+YdSnQIcno SNCcvPd3KWMGE13bhW8Uw+WkmBRxYN4m8ewQ7DMDBvZPtOXOvjTvzXnOE8/cOXBY 7tw9QM+4ekBjKS6ze+IEfC0unJGvnSalmoJAxxVz/o3gy53nh0YoDDYiQNA7O/5C ReqHhzviVtmy6WG09eXUiqCGwvV3gMCBVbJV0qnsfgiXOj5gxomHgXXbYFcEPP/T RnRvu3Nwj93ZZLCNMecQEq6NKExDKVh386ABVVthfOp6M/6c2fFBJcbNvE5eLb5o h8F8op8ErAt7LtHbwk2UIN9vFCQ4eQBN3UpdxSYiL2D+2SfWdLVdo4wuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOAZpltyL9mZEuIjoFAM7V5PJyTMB8GA1UdIwQY MBaAFPNwY6hURQGauEWlt+VDlc3TmSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgt YzM5NDdlNzZiZTc1LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgtYzM5NDdlNzZiZTc1 LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGcfnYPl gDzgMRME5uVfCQDLaRFO3VcciTpOuE1zs1yYhMY7Yg/gGMX4aP+nT6zHkGasegyl Wno51yuIvLiA9arUXHDr+07trAvl1TZ4WdDhrdevAUK2MfLXL33evVBtImta6BVT gSKIytpCm1BfOv5CWOW0nRHKsep+U3HmcbKcjfiSgSg5z9AX6btVm2php/D03+ok d9o0mV0nzR/3B4o3sDeG0wwHOLYZvurDWYe5YM1i7zhzMccgtjfU51R/HmAReRWk 0eoDSwoh8xznQChyHwImYEE2Tibns/UGk+AB4N3SVjpOiGqIFN/AtCke4pXmxVgj q9ivbwakStGYpw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:50 2025 by rpki-client