This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json) Hash identifier: Ir6IEIw84vH5q1QtwuQmwxp4yg1/OmtSr0HxdqRYan8= Subject key identifier: BA:25:6A:47:83:60:BE:3F:92:0E:C4:D8:DE:63:9E:60:EA:B3:4F:81 Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Certificate serial: 019AF49BD19D870ED010E968B5DB6E842ED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft Manifest number: 157F Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: RbfZTd7Iet4Oaq0KfTTRceVBTixx1hq+r/WGoODgJgQ=) 2: onKOWpSCd5nknY7qIE0OTy6r59M.roa (hash: G3Ru50iFN69OvlMFP21x46QieknWj+cj2RPOdgx4g78=) 3: vWMQ8KKH8gz6XYyYFwLQ1kCO9dI.roa (hash: joOcTEe4VMAeerKDSxu9+eE3V+lz+piT6nn7yrfv2ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d1:9d:87:0e:d0:10:e9:68:b5:db:6e:84:2e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=ba256a478360be3f920ec4d8de639e60eab34f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:5f:21:b1:12:8b:9e:84:84:22:19:05:47: d4:32:d1:eb:b2:ec:50:97:38:e5:11:bb:29:fe:02: e8:8d:e2:03:11:e8:f4:d0:f8:1b:66:f3:09:f5:13: 5b:c4:d2:eb:4d:c1:09:06:42:3a:00:61:45:23:ec: 75:b9:4a:b3:d9:db:8a:ac:2a:17:1c:b2:f0:97:21: d3:b2:63:79:c6:a6:09:42:bc:32:f1:9d:9c:d8:c2: ce:93:13:a0:5c:f3:1b:d7:e9:b6:c0:89:7e:2a:f8: 10:44:2a:e5:8c:f0:be:8b:f0:00:c2:ab:3f:12:ac: 73:08:96:0e:d4:ea:3b:6b:af:2d:45:12:63:66:7f: 1a:fd:96:6c:e5:22:d0:bd:a0:84:70:5d:21:70:04: da:6e:d1:2f:a7:8b:e8:87:bb:de:13:e4:8b:4d:5e: 99:6c:1d:73:3c:ed:87:11:a1:96:e0:fb:25:49:11: 48:63:6e:b2:a0:52:bc:08:d5:eb:ec:3b:16:ab:fe: d5:2c:ee:4d:ec:25:39:e2:df:a5:e2:1b:cd:5b:ba: 2c:6b:30:ef:9d:cf:cb:bf:08:30:0f:79:bc:4b:44: aa:ca:4e:77:07:4b:0e:bb:18:c8:cd:c5:71:e9:55: bc:f9:e2:34:7a:42:a3:ca:1d:8b:1c:79:48:03:1e: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:25:6A:47:83:60:BE:3F:92:0E:C4:D8:DE:63:9E:60:EA:B3:4F:81 X509v3 Authority Key Identifier: keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:88:b1:5b:0f:6a:6d:f3:2e:99:bf:4b:ca:71:52:29:9c:36: 75:3c:62:87:40:85:b4:39:d1:58:fe:03:17:4c:c9:8f:de:9b: ef:c7:1a:e7:51:97:40:40:60:71:fc:24:fb:7b:9e:34:49:12: db:bd:1b:f8:b2:5c:c1:5f:66:d4:a6:c3:4e:8c:c6:11:6e:e2: 62:c1:6c:9f:52:19:aa:b3:fd:08:34:4a:a8:5c:8e:6b:b1:94: ac:2f:32:95:2e:f7:6f:0c:3a:0a:9d:3b:6e:b8:f7:fd:1f:b0: bd:c1:43:69:3c:ca:98:f0:c5:bc:c4:f3:d8:fe:05:76:77:15: ec:68:26:bb:44:59:f9:b0:ae:c5:f0:e7:57:e3:65:8c:d6:4a: dd:14:d2:44:81:1b:ee:f9:75:7c:62:6f:ac:2f:67:58:dd:68: 35:fb:f4:50:72:28:41:ea:8a:7a:e5:bd:9d:6c:a8:e9:13:87: ce:c8:4f:08:09:ca:fa:e0:35:0b:80:14:95:81:c1:78:77:39: 56:71:3b:8c:82:4f:cd:d6:c2:58:21:75:e6:8a:a4:bc:f7:d4: 9d:be:43:ec:6b:72:9c:00:e6:9d:61:71:42:ef:67:f7:b2:cc: 2d:1e:84:83:04:ab:bb:5e:63:5a:fb:88:aa:65:9e:3d:5e:13: 1a:97:98:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0m9Gdhw7QEOlotdtuhC7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2RkMTE3ZWFjNzU3YjZmOGYzOTQyODY1M2FlMTI1MDhj YzY5ODkwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD EyhiYTI1NmE0NzgzNjBiZTNmOTIwZWM0ZDhkZTYzOWU2MGVhYjM0ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIdfIbESi56EhCIZBUfUMtHrsuxQ lzjlEbsp/gLojeIDEej00PgbZvMJ9RNbxNLrTcEJBkI6AGFFI+x1uUqz2duKrCoX HLLwlyHTsmN5xqYJQrwy8Z2c2MLOkxOgXPMb1+m2wIl+KvgQRCrljPC+i/AAwqs/ EqxzCJYO1Oo7a68tRRJjZn8a/ZZs5SLQvaCEcF0hcATabtEvp4voh7veE+SLTV6Z bB1zPO2HEaGW4PslSRFIY26yoFK8CNXr7DsWq/7VLO5N7CU54t+l4hvNW7osazDv nc/LvwgwD3m8S0Sqyk53B0sOuxjIzcVx6VW8+eI0ekKjyh2LHHlIAx4H7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLolakeDYL4/kg7E2N5jnmDqs0+BMB8GA1UdIwQY MBaAFPvN0Rfqx1e2+POUKGU64SUIzGmJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04M1JGLXJIVjdiNDg1UW9aVHJoSlFqTWFZay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5 LTk2NDQyNWMxOGM2Zi8xLzEtODNSRi1ySFY3YjQ4NVFvWlRyaEpRak1hWWsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzliLzlhYTk5ZC1iZTQzLTRkNzQtYWZjOS05NjQ0MjVjMThj NmYvMS8xLTgzUkYtckhWN2I0ODVRb1pUcmhKUWpNYVlrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4ix Ww9qbfMumb9LynFSKZw2dTxih0CFtDnRWP4DF0zJj96b78ca51GXQEBgcfwk+3ue NEkS270b+LJcwV9m1KbDTozGEW7iYsFsn1IZqrP9CDRKqFyOa7GUrC8ylS73bww6 Cp07brj3/R+wvcFDaTzKmPDFvMTz2P4FdncV7Ggmu0RZ+bCuxfDnV+NljNZK3RTS RIEb7vl1fGJvrC9nWN1oNfv0UHIoQeqKeuW9nWyo6ROHzshPCAnK+uA1C4AUlYHB eHc5VnE7jIJPzdbCWCF15oqkvPfUnb5D7GtynADmnWFxQu9n97LMLR6EgwSru15j WvuIqmWePV4TGpeYVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:32 2025 by rpki-client