This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json) Hash identifier: Hh7s4OvbeOW0x7vCZqnCyuXij94E02+RrZW9Xddnkfo= Subject key identifier: 22:E1:7F:06:13:85:F9:56:1B:8B:70:B5:CC:92:B5:64:AC:BE:D0:89 Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019AF12D8765C2C0565447E9EC35EBFD4C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft Manifest number: 1445 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (hash: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=) 2: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=) 3: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=) 4: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=) 5: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=) 6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=) 7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: 0+ZdPA3NGS4ACO6KZfJ7pvx/gMe+9KyBeQ8PNb/C5kQ=) 8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=) 9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:65:c2:c0:56:54:47:e9:ec:35:eb:fd:4c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=22e17f061385f9561b8b70b5cc92b564acbed089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:cb:bc:c4:95:e6:62:76:3a:3c:0e:c5:76: 64:15:2a:e4:cf:81:bf:c8:b1:0c:06:19:bf:ac:f2: 1c:0d:ac:c9:17:cf:fb:84:f2:6a:66:21:eb:00:d9: 60:ff:7f:7d:48:9d:18:0d:f3:7c:00:dd:e4:5a:e9: 20:e2:e9:df:e6:7b:ec:8e:9d:31:7a:5b:90:2b:fb: 5f:44:c0:1c:8c:0a:b5:83:3c:4a:8d:43:17:ab:63: 00:fc:e3:40:0f:3b:17:1e:62:ee:3d:28:a1:4b:fe: f4:3e:a9:19:02:1e:fd:50:f7:40:80:34:8f:53:8f: 17:c5:0b:4e:70:c1:7a:ae:6a:a0:b2:dd:db:ae:c5: 9c:d9:2e:72:8d:17:ae:e7:29:b9:65:f9:61:86:25: c4:cc:54:f0:69:29:94:e7:40:f0:52:64:d5:ee:7d: 83:1e:67:2f:f5:ec:b0:54:5c:46:90:0e:57:bc:fa: a2:e1:7a:a6:9c:b1:54:00:56:57:71:0b:21:f8:6c: bb:82:ef:23:3a:88:89:4a:25:55:be:2c:74:86:17: 9e:b5:0f:38:a0:d6:72:ea:88:8c:e2:a9:1c:df:4b: 7e:af:02:c6:51:07:36:39:a8:93:6c:81:24:78:13: 45:bc:ec:be:aa:76:1c:1f:99:3a:c6:f6:3f:7e:ae: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:7F:06:13:85:F9:56:1B:8B:70:B5:CC:92:B5:64:AC:BE:D0:89 X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b0:f2:3e:9d:1c:8e:22:47:35:62:65:f7:44:cd:60:8d:84: 14:1b:6e:5b:45:66:4d:94:c8:31:6e:22:13:f8:f0:96:56:72: f4:c1:d4:57:58:27:ec:2b:8b:6f:37:3f:49:d4:18:7b:21:1c: c0:a3:86:c0:fd:e0:f5:7f:e0:bb:f9:2f:d1:e6:c8:7e:6d:37: bf:9a:fd:53:bf:67:0c:7f:46:28:f8:c3:cf:65:9d:56:27:a4: d4:ad:07:09:6a:0e:7c:1f:43:e6:71:b3:66:dd:3d:60:b5:e7: da:6f:ba:c4:f5:1c:7d:69:86:a5:9a:02:99:6c:e5:3e:05:1c: 2e:af:f4:e0:9d:c3:21:0d:33:1a:b2:e2:00:b5:db:69:81:73: b6:95:8f:ad:78:80:c7:00:b9:a8:66:77:70:7e:89:56:37:03: 8d:e0:85:22:1d:0c:8a:d3:23:0e:23:bd:ee:3e:b7:de:33:7f: 6f:48:e9:19:08:ae:cc:a3:61:24:c4:2a:43:c6:75:8a:10:0d: 8c:d3:10:fb:0e:ab:3d:74:00:f6:9f:97:da:54:44:8d:f8:65: 2d:41:6f:d4:e5:0f:08:b3:2e:b8:a2:bf:71:21:a0:40:8f:37: 83:ae:15:75:80:70:e7:19:67:01:d3:dc:35:d2:bd:d5:82:5f: 58:e8:3f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYdlwsBWVEfp7DXr/UxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EygyMmUxN2YwNjEzODVmOTU2MWI4YjcwYjVjYzkyYjU2NGFjYmVkMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstTLvMSV5mJ2OjwOxXZkFSrkz4G/ yLEMBhm/rPIcDazJF8/7hPJqZiHrANlg/399SJ0YDfN8AN3kWukg4unf5nvsjp0x eluQK/tfRMAcjAq1gzxKjUMXq2MA/ONADzsXHmLuPSihS/70PqkZAh79UPdAgDSP U48XxQtOcMF6rmqgst3brsWc2S5yjReu5ym5ZflhhiXEzFTwaSmU50DwUmTV7n2D Hmcv9eywVFxGkA5XvPqi4XqmnLFUAFZXcQsh+Gy7gu8jOoiJSiVVvix0hheetQ84 oNZy6oiM4qkc30t+rwLGUQc2OaiTbIEkeBNFvOy+qnYcH5k6xvY/fq4/8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLhfwYThflWG4twtcyStWSsvtCJMB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArDyPp0c jiJHNWJl90TNYI2EFBtuW0VmTZTIMW4iE/jwllZy9MHUV1gn7CuLbzc/SdQYeyEc wKOGwP3g9X/gu/kv0ebIfm03v5r9U79nDH9GKPjDz2WdViek1K0HCWoOfB9D5nGz Zt09YLXn2m+6xPUcfWmGpZoCmWzlPgUcLq/04J3DIQ0zGrLiALXbaYFztpWPrXiA xwC5qGZ3cH6JVjcDjeCFIh0MitMjDiO97j633jN/b0jpGQiuzKNhJMQqQ8Z1ihAN jNMQ+w6rPXQA9p+X2lREjfhlLUFv1OUPCLMuuKK/cSGgQI83g64VdYBw5xlnAdPc NdK91YJfWOg/Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:49 2025 by rpki-client