This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json) Hash identifier: NRtKYQxaAsyhn0osFbxDomX43IFv3KattB1NSz7Hgg4= Subject key identifier: 07:32:E1:BE:0D:32:4F:88:DF:7F:0B:7C:75:BC:FF:18:C8:9C:5F:0C Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a Certificate serial: 019AF208A56558A541055D788B108C553736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft Manifest number: 1008 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: GemIBau7tpDYaulJyiJCff77uyOPPVqAvFju6wkl3kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a5:65:58:a5:41:05:5d:78:8b:10:8c:55:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=0732e1be0d324f88df7f0b7c75bcff18c89c5f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:07:b2:6a:4c:a9:b7:47:e3:e9:32:a8:40: 1c:88:4a:33:8d:37:53:9d:2b:ed:d9:ec:5e:9a:51: e8:51:e3:45:54:28:80:c6:db:e3:1e:a1:ba:23:26: 1c:ef:50:a6:96:db:0c:bb:7c:61:74:ad:bb:21:09: 15:f1:64:54:ef:3b:41:44:5b:f9:49:e7:9a:6f:3a: 0b:1a:e2:4c:cc:a0:f0:90:ec:76:d0:33:b4:47:19: d8:74:8e:46:26:be:cc:d9:50:ed:b2:70:87:8d:85: 2f:0b:df:9e:c2:dd:87:4a:55:fc:33:e0:29:e9:44: df:c7:3a:8c:ec:43:9e:0e:b1:1d:c4:75:c7:f7:7b: e3:93:06:1a:18:87:25:4a:e8:79:4f:ee:87:79:5f: 94:83:db:c7:e3:4a:5d:f3:20:1a:12:bb:30:5f:5c: 5e:a1:e1:30:3a:29:65:b0:83:a4:4c:a8:23:36:55: 63:09:c7:81:06:15:89:09:7d:a9:93:0e:87:f4:3e: d3:a7:2f:54:9e:cb:47:02:9c:8a:59:f5:42:65:c6: 17:43:84:ab:45:07:95:73:2e:32:10:ba:2a:ec:e5: bb:13:18:94:c4:e1:34:72:31:9a:73:eb:ab:8b:24: c1:65:7d:19:ff:6a:af:c5:83:3f:3f:4a:3b:3d:80: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:E1:BE:0D:32:4F:88:DF:7F:0B:7C:75:BC:FF:18:C8:9C:5F:0C X509v3 Authority Key Identifier: keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:62:d8:7c:f1:90:05:df:89:bb:22:b1:20:cf:7a:75:28:30: 88:00:db:ad:3f:d2:ba:87:2d:b3:bf:5f:44:fc:6d:4e:43:a3: 46:ad:47:ee:fb:ab:ff:fc:58:da:1e:a2:ee:3f:c3:2b:3f:50: 0c:9b:d2:f7:89:65:db:6d:7e:12:cf:25:5b:ac:b9:b3:67:7d: ae:3e:f9:1c:88:b2:ee:b1:be:89:8a:fb:f7:67:4d:78:aa:f2: a7:7b:3e:49:1d:53:0c:2f:52:09:d9:62:d6:3e:a9:75:15:c6: f7:6d:a6:b7:0c:5d:e8:3f:79:ae:0d:c8:f4:b0:d8:81:37:71: 9a:f0:e7:10:2f:f6:97:14:33:4c:49:70:56:37:94:02:2c:f0: 37:98:81:6c:ff:3f:1c:f9:46:d4:80:e0:53:78:71:b0:aa:76: fe:2a:27:5b:0d:03:9d:41:3b:e8:31:66:bd:45:af:74:38:0d: 38:c3:30:9a:8c:67:f7:8c:21:bd:6c:db:22:f9:79:35:b9:3e: 46:7f:a8:9f:03:49:34:f7:1b:5e:28:44:8c:72:fa:e8:3e:04: 72:3c:67:4e:c3:8d:bf:b9:b7:72:ac:d9:dd:c3:81:b6:df:d7: 59:ad:4e:d5:25:12:52:89:cc:ec:22:f2:81:b9:72:17:af:d1: f6:54:3c:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKVlWKVBBV14ixCMVTc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzMwMDg2YTE0ZjMxYjI1NjQwYzE0MmVkZmQxN2JjOTMz MjBjNWEwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EygwNzMyZTFiZTBkMzI0Zjg4ZGY3ZjBiN2M3NWJjZmYxOGM4OWM1ZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCEHsmpMqbdH4+kyqEAciEozjTdT nSvt2exemlHoUeNFVCiAxtvjHqG6IyYc71CmltsMu3xhdK27IQkV8WRU7ztBRFv5 SeeabzoLGuJMzKDwkOx20DO0RxnYdI5GJr7M2VDtsnCHjYUvC9+ewt2HSlX8M+Ap 6UTfxzqM7EOeDrEdxHXH93vjkwYaGIclSuh5T+6HeV+Ug9vH40pd8yAaErswX1xe oeEwOillsIOkTKgjNlVjCceBBhWJCX2pkw6H9D7Tpy9UnstHApyKWfVCZcYXQ4Sr RQeVcy4yELoq7OW7ExiUxOE0cjGac+uriyTBZX0Z/2qvxYM/P0o7PYBimQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcy4b4NMk+I338LfHW8/xjInF8MMB8GA1UdIwQY MBaAFPNzAIahTzGyVkDBQu39F7yTMgxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQt NzlmMzJmZDRlMzNkLzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQtNzlmMzJmZDRlMzNk LzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2LYfPGQ Bd+JuyKxIM96dSgwiADbrT/Suocts79fRPxtTkOjRq1H7vur//xY2h6i7j/DKz9Q DJvS94ll221+Es8lW6y5s2d9rj75HIiy7rG+iYr792dNeKryp3s+SR1TDC9SCdli 1j6pdRXG922mtwxd6D95rg3I9LDYgTdxmvDnEC/2lxQzTElwVjeUAizwN5iBbP8/ HPlG1IDgU3hxsKp2/ionWw0DnUE76DFmvUWvdDgNOMMwmoxn94whvWzbIvl5Nbk+ Rn+onwNJNPcbXihEjHL66D4EcjxnTsONv7m3cqzZ3cOBtt/XWa1O1SUSUonM7CLy gblyF6/R9lQ8sA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:52 2025 by rpki-client