This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json) Hash identifier: UgyENZfjLJ0igHOPGNqyJQhSKRkQNRJ4VT5OSS5hBIw= Subject key identifier: 53:88:50:F3:E1:69:9A:3A:61:4E:6E:9B:B6:11:64:D2:ED:A5:81:EC Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5 Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5 Certificate serial: 019AF208DD96FBA889BA738E5179253357E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft Manifest number: 12F9 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=) 2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: Eq0xhB7SQw+kmSblxsCoQxgz1Gf3YlvAnwRfepw/M1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dd:96:fb:a8:89:ba:73:8e:51:79:25:33:57:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=538850f3e1699a3a614e6e9bb61164d2eda581ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:01:be:e4:2d:96:59:d3:32:76:81:ee:63: 26:d5:fd:58:ce:72:79:89:14:f3:bf:f5:98:ee:9c: 73:05:a6:d6:da:d7:91:00:8e:d9:f7:08:a7:e9:af: 00:c9:1a:55:5d:7b:f6:42:d1:7b:13:d1:57:0a:f0: 82:36:a1:57:69:3e:38:68:fa:fb:45:7b:4e:06:c1: 61:22:6d:6b:b7:ef:1b:6c:97:71:16:14:c1:27:0d: 3a:e1:fb:2c:e2:6b:82:b3:75:73:a1:31:ce:d3:8f: e8:20:8c:91:c7:b2:20:2d:8e:90:2b:9e:07:d9:69: 3f:dd:77:a8:f3:f5:b8:68:ea:1c:81:0b:92:77:a9: e2:6a:27:0b:ea:89:57:59:6a:b6:77:e4:a8:8b:bf: 53:28:f4:3e:a9:57:1e:15:16:46:fb:f7:61:f6:33: 59:9f:4b:bf:93:37:c8:05:8c:bb:9e:2b:64:29:61: 02:5b:16:ef:cd:e2:1b:b8:38:10:44:e1:de:b5:64: 45:3b:d9:53:7d:68:93:68:f9:50:44:62:fe:33:57: d8:dd:1b:ce:0c:48:6e:14:65:2a:1f:af:26:1e:7b: 9c:20:21:52:11:c8:81:b6:8d:cb:41:c8:a7:50:22: 4d:5a:04:bf:aa:e7:87:6f:f1:3e:61:17:1e:df:2d: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:88:50:F3:E1:69:9A:3A:61:4E:6E:9B:B6:11:64:D2:ED:A5:81:EC X509v3 Authority Key Identifier: keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:08:31:ba:45:3a:23:51:bd:23:1b:66:fa:f0:ab:f3:98:88: 68:07:ae:cd:dd:cb:77:25:44:ab:15:cd:75:ae:75:41:ab:d4: 41:34:6a:a4:25:27:03:2a:8b:5a:5d:71:37:d6:c8:6d:3f:45: 83:48:d9:7b:2f:60:e2:9d:03:5f:fc:94:d7:bc:9f:70:c6:43: fa:39:bf:9a:c7:db:9a:34:6c:67:50:23:82:04:17:d2:ee:37: de:45:c4:d3:2f:7c:c6:04:bd:e8:4f:42:c2:b5:29:94:61:a2: c4:95:7c:04:23:67:a4:5a:e3:65:bf:77:61:d8:29:fb:63:b1: fd:c2:2f:57:6d:5a:93:2f:1d:e0:81:b3:a9:0c:fc:61:5c:ef: d2:69:ac:99:bd:47:06:ca:b4:de:a6:c4:c6:bb:71:26:f2:06: fe:8c:b3:f2:6f:9b:8b:32:02:19:fa:29:e6:5c:2b:6d:6a:7b: 12:31:f0:a9:f5:cd:2d:e8:b5:ee:7b:d9:73:1f:7f:9c:51:4b: 0c:c2:de:51:a8:db:3e:05:8e:bc:a5:bc:a5:61:7a:be:81:46: db:7b:ae:93:b0:04:b2:22:ca:7d:5c:c9:54:2d:c5:97:45:82: 8a:2e:50:cd:18:d3:69:6d:5c:a0:18:c8:24:bb:b2:79:36:16: fa:28:21:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN2W+6iJunOOUXklM1fnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDM5ZDk0MjQyNmZjNjczYjI3OWNjOThhYjM1ZmRiZDdl YTk3ZjUwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD Eyg1Mzg4NTBmM2UxNjk5YTNhNjE0ZTZlOWJiNjExNjRkMmVkYTU4MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqcBvuQtllnTMnaB7mMm1f1YznJ5 iRTzv/WY7pxzBabW2teRAI7Z9win6a8AyRpVXXv2QtF7E9FXCvCCNqFXaT44aPr7 RXtOBsFhIm1rt+8bbJdxFhTBJw064fss4muCs3VzoTHO04/oIIyRx7IgLY6QK54H 2Wk/3Xeo8/W4aOocgQuSd6niaicL6olXWWq2d+Soi79TKPQ+qVceFRZG+/dh9jNZ n0u/kzfIBYy7nitkKWECWxbvzeIbuDgQROHetWRFO9lTfWiTaPlQRGL+M1fY3RvO DEhuFGUqH68mHnucICFSEciBto3LQcinUCJNWgS/queHb/E+YRce3y2+EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOIUPPhaZo6YU5um7YRZNLtpYHsMB8GA1UdIwQY MBaAFH9DnZQkJvxnOyecyYqzX9vX6pf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUt MTQ2ZjI1NGFjMTMxLzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUtMTQ2ZjI1NGFjMTMx LzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAgxukU6 I1G9Ixtm+vCr85iIaAeuzd3LdyVEqxXNda51QavUQTRqpCUnAyqLWl1xN9bIbT9F g0jZey9g4p0DX/yU17yfcMZD+jm/msfbmjRsZ1AjggQX0u433kXE0y98xgS96E9C wrUplGGixJV8BCNnpFrjZb93Ydgp+2Ox/cIvV21aky8d4IGzqQz8YVzv0mmsmb1H Bsq03qbExrtxJvIG/oyz8m+bizICGfop5lwrbWp7EjHwqfXNLei17nvZcx9/nFFL DMLeUajbPgWOvKW8pWF6voFG23uuk7AEsiLKfVzJVC3Fl0WCii5QzRjTaW1coBjI JLuyeTYW+ighDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:18 2025 by rpki-client