This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json) Hash identifier: gP3LIa/FtwFoiZoaf1QpQagKmpjvvNDTA3guZBZZSCg= Subject key identifier: 63:6E:0D:53:39:FB:BE:D9:15:79:36:62:2D:1B:19:49:6A:CB:EC:58 Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Certificate serial: 019AF12DF87625C02FE2C9E14D3F5CDE98FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=) 2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: 3NyvwO07OuXKwE4noWKxFjhRVi5Bl1KjZuqZSA/j8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f8:76:25:c0:2f:e2:c9:e1:4d:3f:5c:de:98:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=636e0d5339fbbed9157936622d1b19496acbec58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:eb:dc:44:85:bf:bc:81:0e:b8:a6:bc:bf: e9:29:76:54:68:d6:97:2b:83:a7:59:95:1c:e2:66: ec:73:78:96:c0:fb:5c:20:60:b2:f0:c8:79:9a:d8: 5b:35:09:96:69:2b:2a:63:6f:3b:3b:34:dc:36:d6: 39:53:2b:b6:3c:c4:81:05:d8:1c:af:e3:82:bb:9e: 8d:8a:58:54:6e:f7:64:86:26:8c:5d:6e:00:0c:b7: 01:d0:b3:68:11:72:71:43:6e:30:79:50:f6:3c:59: 9f:51:7d:8d:66:ae:6a:37:dc:fa:05:d1:4d:34:a6: 24:09:c5:75:92:3b:63:06:7d:57:21:0c:4a:d0:9c: 89:51:0f:d6:64:fe:73:7a:ef:3a:1f:89:99:32:a4: 04:d9:55:7c:b1:d4:d7:91:06:c5:ec:a8:f3:e3:89: c7:9a:57:4d:1f:3e:f8:bc:00:ab:99:6e:e5:6e:cc: ab:ce:92:7b:21:93:57:15:fc:4c:52:ef:66:83:30: 09:7e:b2:df:dd:93:53:fb:70:0b:0a:a1:41:90:8d: 0f:f8:1f:01:17:8b:1b:68:e9:7e:e3:c5:de:fa:4e: ab:a9:be:c5:af:ac:f5:40:e8:70:5d:f9:7e:3e:52: db:1b:f3:70:a2:fc:0f:be:f3:79:1c:dd:d8:13:59: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6E:0D:53:39:FB:BE:D9:15:79:36:62:2D:1B:19:49:6A:CB:EC:58 X509v3 Authority Key Identifier: keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:8b:e2:83:3e:61:81:53:92:23:5d:3c:fd:60:5c:ae:87: 36:9b:43:31:b8:ed:d4:3e:ba:05:b0:5d:98:c7:f5:94:88:4f: c0:cf:a9:a5:4f:6a:6b:ea:68:4f:a1:d3:48:09:05:7b:f7:d3: 68:3a:fc:01:8f:25:4a:08:e9:b1:40:85:90:f1:06:71:52:63: e1:60:fd:38:87:82:fe:76:e1:7d:b6:ff:98:00:da:52:8a:fb: 4e:37:18:e2:94:ca:ec:9d:45:44:ce:61:78:e2:14:f2:cb:6d: 42:76:6e:b5:85:1c:3d:aa:d2:ed:9d:4b:1d:08:e1:36:2f:c3: a6:7c:0f:02:6b:95:8e:a7:87:df:74:1a:60:8c:fc:47:5c:f0: 7d:e1:04:03:d4:2c:9b:94:d0:74:17:3b:c5:d6:d0:1d:d7:64: e1:6a:eb:db:f1:0a:c1:9d:5a:59:44:fd:d7:13:6f:bc:c9:a1: 01:7d:3c:e1:2d:22:e1:ed:17:1f:b4:06:6c:e7:91:2d:3b:3d: 2d:77:59:40:2c:be:18:0e:63:64:91:4e:3e:23:97:5b:0f:8d: 7a:44:c0:52:7a:c1:4e:56:a9:56:a9:23:3c:98:fc:aa:17:f2: 75:97:34:cd:92:bf:97:63:40:c8:aa:ce:ea:60:cd:33:a1:ea: 8b:55:0d:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfh2JcAv4snhTT9c3pj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz YmVhMWQwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD Eyg2MzZlMGQ1MzM5ZmJiZWQ5MTU3OTM2NjIyZDFiMTk0OTZhY2JlYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVTr3ESFv7yBDrimvL/pKXZUaNaX K4OnWZUc4mbsc3iWwPtcIGCy8Mh5mthbNQmWaSsqY287OzTcNtY5Uyu2PMSBBdgc r+OCu56NilhUbvdkhiaMXW4ADLcB0LNoEXJxQ24weVD2PFmfUX2NZq5qN9z6BdFN NKYkCcV1kjtjBn1XIQxK0JyJUQ/WZP5zeu86H4mZMqQE2VV8sdTXkQbF7Kjz44nH mldNHz74vACrmW7lbsyrzpJ7IZNXFfxMUu9mgzAJfrLf3ZNT+3ALCqFBkI0P+B8B F4sbaOl+48Xe+k6rqb7Fr6z1QOhwXfl+PlLbG/NwovwPvvN5HN3YE1ndsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNuDVM5+77ZFXk2Yi0bGUlqy+xYMB8GA1UdIwQY MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3 LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTCL4oM+ YYFTkiNdPP1gXK6HNptDMbjt1D66BbBdmMf1lIhPwM+ppU9qa+poT6HTSAkFe/fT aDr8AY8lSgjpsUCFkPEGcVJj4WD9OIeC/nbhfbb/mADaUor7TjcY4pTK7J1FRM5h eOIU8sttQnZutYUcParS7Z1LHQjhNi/DpnwPAmuVjqeH33QaYIz8R1zwfeEEA9Qs m5TQdBc7xdbQHddk4Wrr2/EKwZ1aWUT91xNvvMmhAX084S0i4e0XH7QGbOeRLTs9 LXdZQCy+GA5jZJFOPiOXWw+NekTAUnrBTlapVqkjPJj8qhfydZc0zZK/l2NAyKrO 6mDNM6Hqi1UNmg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:00 2025 by rpki-client