This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json) Hash identifier: 42C4r4THWncfGuG2CVfmfmSGZImAcSUtz6CtRFGOBSk= Subject key identifier: CD:EC:08:4D:AC:9E:15:39:09:6C:7E:1A:6A:91:4B:A4:7F:40:C0:EC Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Certificate serial: 019AF1D204EC8B6C601FF686C6BFC63D391C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft Manifest number: 083E Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: H77nywdA+S70MqAguiwLwSKkL6/10uES+KHyPNjCrX4=) 2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:04:ec:8b:6c:60:1f:f6:86:c6:bf:c6:3d:39:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=cdec084dac9e1539096c7e1a6a914ba47f40c0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:f7:8c:db:26:eb:73:14:16:b8:3d:a6:5e: 2e:0b:4e:95:9e:76:70:9b:45:58:0b:43:5e:76:f2: e0:c5:bb:40:dd:70:d5:fd:a6:35:5a:f9:11:23:98: 14:09:d9:43:f1:c6:35:91:c9:c4:37:8c:91:d0:40: ef:da:35:6b:8b:ac:a2:6d:ac:c1:2d:03:46:bf:b3: a0:60:f2:ab:45:dd:61:b1:0d:cf:95:5e:58:4b:ef: 11:93:47:f2:76:85:47:9c:29:a1:8e:36:0f:3b:a4: 33:4a:18:25:eb:f8:0f:c7:7b:ae:10:8d:0d:fe:f4: cc:95:71:b8:c0:d8:0d:09:dd:13:20:91:33:2a:23: 95:da:9e:66:0f:50:d6:d7:f5:45:01:7c:11:65:04: 49:ab:ca:ae:f7:25:9e:84:65:29:64:84:c1:2f:c8: b7:52:3b:7e:4e:26:5b:c4:50:42:5a:5d:6b:70:e0: 81:56:b0:53:ac:56:2b:36:45:5e:a4:df:62:00:2d: 99:83:ac:c6:54:cd:ef:ea:bf:14:79:00:b4:aa:a3: d7:6d:ca:1e:bc:4f:fe:eb:3d:ea:c2:0d:f2:94:04: 18:7a:e2:49:d1:11:25:03:b1:62:cd:fd:96:4a:f5: 10:c5:57:b7:0f:f2:3e:2b:61:f8:25:dd:ef:7b:a3: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EC:08:4D:AC:9E:15:39:09:6C:7E:1A:6A:91:4B:A4:7F:40:C0:EC X509v3 Authority Key Identifier: keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:74:82:b8:8d:0c:3f:01:3a:75:af:1e:c4:ed:b7:9b:12:9e: 96:4a:ed:3d:aa:e9:13:67:64:4c:df:a6:c2:60:61:11:4b:c8: e0:f0:d0:86:bf:f2:5b:e5:83:ec:ab:f0:01:8a:dd:ca:83:bf: 15:b8:28:25:41:79:d3:b1:02:96:2c:30:e0:b3:3b:9d:c8:b4: 03:37:4f:88:2c:82:ca:38:ad:ea:7e:a6:2f:d7:d6:a9:0e:8f: 46:c5:cf:06:a0:f7:f0:c8:e6:5b:cb:49:12:0d:9c:9a:16:60: 43:9f:06:65:0b:91:12:83:cf:fe:d8:8f:b8:4b:ef:d9:cf:8d: b6:0c:5a:a7:0c:75:f6:ea:a1:d1:ca:f4:57:a2:27:25:1a:49: 84:62:55:d5:e8:f2:6b:ed:df:15:d3:ce:1b:00:4d:63:f6:46: 3c:21:77:35:4b:c4:ee:36:fa:a2:45:82:c7:28:64:69:7d:27: 9c:3f:81:30:76:18:0f:49:81:4a:17:56:82:f2:19:85:a4:5b: d0:b0:ed:68:55:26:f5:46:08:02:de:5e:f0:95:65:1f:65:5e: 74:9d:99:9a:55:6f:aa:2d:17:05:f2:8f:ba:5d:85:0b:a4:49: ff:a5:fe:49:c9:b6:11:dc:77:15:f9:88:fc:01:fd:12:93:9c: f2:ec:b0:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gTsi2xgH/aGxr/GPTkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4 YWNiZTIwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EyhjZGVjMDg0ZGFjOWUxNTM5MDk2YzdlMWE2YTkxNGJhNDdmNDBjMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbj3jNsm63MUFrg9pl4uC06VnnZw m0VYC0NedvLgxbtA3XDV/aY1WvkRI5gUCdlD8cY1kcnEN4yR0EDv2jVri6yibazB LQNGv7OgYPKrRd1hsQ3PlV5YS+8Rk0fydoVHnCmhjjYPO6QzShgl6/gPx3uuEI0N /vTMlXG4wNgNCd0TIJEzKiOV2p5mD1DW1/VFAXwRZQRJq8qu9yWehGUpZITBL8i3 Ujt+TiZbxFBCWl1rcOCBVrBTrFYrNkVepN9iAC2Zg6zGVM3v6r8UeQC0qqPXbcoe vE/+6z3qwg3ylAQYeuJJ0RElA7Fizf2WSvUQxVe3D/I+K2H4Jd3ve6N1xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3sCE2snhU5CWx+GmqRS6R/QMDsMB8GA1UdIwQY MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHSCuI0M PwE6da8exO23mxKelkrtParpE2dkTN+mwmBhEUvI4PDQhr/yW+WD7KvwAYrdyoO/ FbgoJUF507ECliww4LM7nci0AzdPiCyCyjit6n6mL9fWqQ6PRsXPBqD38MjmW8tJ Eg2cmhZgQ58GZQuREoPP/tiPuEvv2c+Ntgxapwx19uqh0cr0V6InJRpJhGJV1ejy a+3fFdPOGwBNY/ZGPCF3NUvE7jb6okWCxyhkaX0nnD+BMHYYD0mBShdWgvIZhaRb 0LDtaFUm9UYIAt5e8JVlH2VedJ2ZmlVvqi0XBfKPul2FC6RJ/6X+Scm2Edx3FfmI /AH9EpOc8uywtA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:01 2025 by rpki-client