This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json) Hash identifier: Bpq4wHZ/y90PwR3kQAUlOoUAmYVU3k5C1qA/z4z5pLc= Subject key identifier: 28:C1:C2:89:C5:DC:76:DD:2F:CE:65:CB:A7:C4:AA:A9:CE:59:BF:E6 Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a Certificate serial: 019B243E9511046CD8C9F1E2C09008F5EF13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft Manifest number: 1022 Signing time: Mon 15 Dec 2025 23:00:39 +0000 Manifest this update: Mon 15 Dec 2025 23:00:39 +0000 Manifest next update: Tue 16 Dec 2025 23:00:39 +0000 Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: gyaCijKN620k1zi+1IReqKdQ74iI4OJfil1gc+V4BiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:95:11:04:6c:d8:c9:f1:e2:c0:90:08:f5:ef:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a Validity Not Before: Dec 15 23:00:39 2025 GMT Not After : Dec 16 23:00:39 2025 GMT Subject: CN=28c1c289c5dc76dd2fce65cba7c4aaa9ce59bfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:08:a0:2e:c3:28:e6:7c:d9:6b:fe:a5:d1: 02:f3:e0:b1:01:0a:5c:4d:32:ce:4b:cd:48:0e:a8: 28:03:9f:26:ea:5f:ff:1c:ae:e7:4d:b6:a2:9b:8d: 7a:9a:10:31:b6:e3:b2:48:b0:bf:5d:66:e4:22:fb: 9e:13:aa:79:ad:0a:22:fc:ad:1d:11:c3:1a:d4:0a: 1c:88:f6:7f:03:0a:04:a7:a9:5a:0c:6d:e4:59:d0: 35:7d:a6:17:f1:7e:57:b7:55:77:e6:30:ca:40:a4: ee:87:94:a4:40:5c:0d:e8:ad:47:3c:57:a9:f2:16: 32:81:79:b0:44:74:14:a0:7c:d0:f3:25:f6:4e:5a: 8a:98:b5:b0:dc:a3:10:2c:87:f5:52:32:70:5d:08: 27:5d:03:c2:0f:83:57:dc:ea:70:a4:cc:1c:78:84: 90:a3:58:fb:3a:97:4a:53:9c:84:36:2f:12:1c:e5: ba:f9:8e:4a:23:ca:3e:de:8f:f4:98:38:5f:14:7a: 4c:6d:c3:54:a7:a6:01:11:ef:46:bc:81:be:48:67: 87:05:50:e0:7c:24:c0:ea:ee:f3:4e:a8:4a:4e:f5: 0b:1e:fd:17:f2:2b:89:73:40:b0:3c:02:61:a5:b6: 9b:19:b6:d0:f6:c7:ac:c7:b9:dc:4f:cd:f8:af:98: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:C2:89:C5:DC:76:DD:2F:CE:65:CB:A7:C4:AA:A9:CE:59:BF:E6 X509v3 Authority Key Identifier: keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d6:d4:4e:eb:fa:24:c5:37:44:23:ae:d1:ea:b4:9e:10:b7: 90:ae:fb:90:48:b3:1a:9a:b3:1e:ad:94:cf:90:f9:75:8d:bc: bc:f6:37:28:ad:ba:6c:89:16:fa:ca:49:b0:8f:a2:83:ad:ad: 3d:ab:b7:9a:74:2c:c4:7f:be:7f:be:c4:9a:c1:12:df:b9:f8: 1e:39:e3:04:fc:ee:bf:d0:75:a3:c6:97:41:e7:21:51:da:df: c7:6e:5e:9d:a1:84:cd:b2:80:c0:a7:83:e3:c7:5b:38:25:56: be:43:db:58:d5:d4:7b:1b:f2:9a:fe:8d:b2:52:a0:35:b7:b1: 94:68:68:2b:44:78:3d:aa:15:a9:c3:bb:a7:de:c7:db:7d:6a: 81:33:69:d2:3c:f2:5f:50:60:e9:91:98:52:24:21:bf:86:ca: 4d:56:1a:d8:d1:12:58:7e:5d:15:ed:0e:4c:69:91:f4:ab:10: 57:73:44:8d:eb:5e:91:58:f1:80:70:f8:02:14:72:d0:d5:97: 96:bb:40:ed:37:db:1a:e7:eb:ac:21:c9:fd:a4:12:28:86:38: 9c:34:f9:71:38:c4:f3:9d:43:12:c1:ef:14:90:c4:e5:2d:12: 9a:23:26:92:4c:61:e6:19:6c:66:89:66:95:83:96:50:ea:80: 96:b8:a0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPpURBGzYyfHiwJAI9e8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzMwMDg2YTE0ZjMxYjI1NjQwYzE0MmVkZmQxN2JjOTMz MjBjNWEwHhcNMjUxMjE1MjMwMDM5WhcNMjUxMjE2MjMwMDM5WjAzMTEwLwYDVQQD EygyOGMxYzI4OWM1ZGM3NmRkMmZjZTY1Y2JhN2M0YWFhOWNlNTliZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyYIoC7DKOZ82Wv+pdEC8+CxAQpc TTLOS81IDqgoA58m6l//HK7nTbaim416mhAxtuOySLC/XWbkIvueE6p5rQoi/K0d EcMa1AociPZ/AwoEp6laDG3kWdA1faYX8X5Xt1V35jDKQKTuh5SkQFwN6K1HPFep 8hYygXmwRHQUoHzQ8yX2TlqKmLWw3KMQLIf1UjJwXQgnXQPCD4NX3OpwpMwceISQ o1j7OpdKU5yENi8SHOW6+Y5KI8o+3o/0mDhfFHpMbcNUp6YBEe9GvIG+SGeHBVDg fCTA6u7zTqhKTvULHv0X8iuJc0CwPAJhpbabGbbQ9sesx7ncT834r5hApQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjBwonF3HbdL85ly6fEqqnOWb/mMB8GA1UdIwQY MBaAFPNzAIahTzGyVkDBQu39F7yTMgxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQt NzlmMzJmZDRlMzNkLzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQtNzlmMzJmZDRlMzNk LzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddbUTuv6 JMU3RCOu0eq0nhC3kK77kEizGpqzHq2Uz5D5dY28vPY3KK26bIkW+spJsI+ig62t Pau3mnQsxH++f77EmsES37n4HjnjBPzuv9B1o8aXQechUdrfx25enaGEzbKAwKeD 48dbOCVWvkPbWNXUexvymv6NslKgNbexlGhoK0R4PaoVqcO7p97H231qgTNp0jzy X1Bg6ZGYUiQhv4bKTVYa2NESWH5dFe0OTGmR9KsQV3NEjetekVjxgHD4AhRy0NWX lrtA7TfbGufrrCHJ/aQSKIY4nDT5cTjE851DEsHvFJDE5S0SmiMmkkxh5hlsZolm lYOWUOqAlrigyA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:35:01 2025 by rpki-client