This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json) Hash identifier: ZUSuQPqlL767B13vvntbec4C7nAW7g/kw+zU24p8GbI= Subject key identifier: A2:74:45:18:0A:36:CB:E7:A9:B4:21:37:BD:28:67:F3:3E:79:44:E4 Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Certificate serial: 019AF389F182073B637C11F85FB63FA135CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft Manifest number: 0BAE Signing time: Sat 06 Dec 2025 12:01:34 +0000 Manifest this update: Sat 06 Dec 2025 12:01:34 +0000 Manifest next update: Sun 07 Dec 2025 12:01:34 +0000 Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=) 2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: Pt+Jig1u82p8YKYfjun0CP8ssCvxe2j9ZT2XWu8NsuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f1:82:07:3b:63:7c:11:f8:5f:b6:3f:a1:35:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Validity Not Before: Dec 6 12:01:34 2025 GMT Not After : Dec 7 12:01:34 2025 GMT Subject: CN=a27445180a36cbe7a9b42137bd2867f33e7944e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:3a:b6:1d:b6:5b:9e:e3:73:82:ae:95:0d: 93:aa:c3:58:c6:8d:20:77:a2:c7:87:4f:d4:6c:64: d8:f0:21:6b:dc:ae:f2:f0:de:30:cc:31:73:69:a4: 18:c9:1b:80:56:77:87:98:fd:33:15:2c:74:5b:bc: 19:81:9f:07:9e:47:4f:01:c6:ee:e8:b1:24:e9:8f: ed:47:f1:96:f9:0d:1b:c0:64:e3:1a:ac:43:97:c1: d0:c6:ca:ba:a9:e5:6e:b7:6f:06:df:55:85:db:7d: d6:e0:86:35:b7:e1:c3:4e:e4:8f:68:ad:f6:e5:32: 30:0c:98:f9:0b:e1:fe:4e:c2:05:fc:6d:80:fb:5d: 3e:47:b6:82:df:4b:20:f9:20:a2:d7:67:13:b9:8b: ee:c0:23:5f:38:e7:9f:04:69:f8:d9:90:31:82:9e: 0a:05:ac:62:a5:4e:3b:6e:d0:7f:57:c3:c2:13:ba: 96:25:3a:e9:bc:ef:ac:30:7e:a7:5b:89:9c:c9:45: e0:70:0a:b4:86:f2:21:41:94:01:ca:ff:2c:20:e5: d4:17:5b:9f:58:3a:5c:a5:d5:fa:57:19:0a:b9:42: 2a:12:ba:96:31:3a:a0:57:f0:26:76:a2:5b:98:d3: e3:4e:3d:2a:ad:26:59:10:3a:9a:52:0b:ac:be:58: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:74:45:18:0A:36:CB:E7:A9:B4:21:37:BD:28:67:F3:3E:79:44:E4 X509v3 Authority Key Identifier: keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c5:a6:f9:39:9a:4a:97:4a:cd:51:be:6c:ae:d3:7f:7d:69: fa:54:94:1a:e3:7e:5a:a6:c3:d8:ce:7c:40:c1:3e:f7:74:d4: 25:7f:31:60:41:96:43:a9:a7:f0:e4:6e:28:dd:a4:d8:44:60: 17:f3:df:b0:e0:bd:8c:52:3e:cb:f4:63:9d:c7:25:93:a4:7d: 14:c5:49:1c:fc:8b:14:f9:61:54:44:28:6d:fb:4d:47:c3:dc: a6:db:7d:ea:62:e7:88:6d:5a:d8:b3:f6:eb:ef:66:01:85:b0: b0:ce:4b:08:08:90:d8:ae:85:c6:38:87:ac:d7:4f:0b:76:95: 51:c5:66:7c:d7:3d:ba:0b:40:f4:d0:53:17:ed:5a:ba:9d:19: 27:86:cf:78:b7:d8:7a:d3:58:81:e3:9c:69:58:cd:ef:81:a6: 1e:46:38:18:96:61:17:29:3c:4d:7e:39:4d:ee:27:e2:5d:06: 97:50:d1:f9:98:21:fc:78:fe:52:a1:b7:7b:2d:5d:4c:98:31: 28:23:29:73:1a:58:29:5c:97:aa:ac:02:a9:72:be:58:95:57: 29:5f:94:42:bd:5e:1a:08:3d:16:34:5e:d3:76:59:ef:b2:7f: b0:a2:a4:f8:ba:3e:c3:9b:b8:d4:a9:59:60:88:1f:ce:c7:0e: c7:e1:6f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifGCBztjfBH4X7Y/oTXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm Y2M1ZTIwHhcNMjUxMjA2MTIwMTM0WhcNMjUxMjA3MTIwMTM0WjAzMTEwLwYDVQQD EyhhMjc0NDUxODBhMzZjYmU3YTliNDIxMzdiZDI4NjdmMzNlNzk0NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms86th22W57jc4KulQ2TqsNYxo0g d6LHh0/UbGTY8CFr3K7y8N4wzDFzaaQYyRuAVneHmP0zFSx0W7wZgZ8HnkdPAcbu 6LEk6Y/tR/GW+Q0bwGTjGqxDl8HQxsq6qeVut28G31WF233W4IY1t+HDTuSPaK32 5TIwDJj5C+H+TsIF/G2A+10+R7aC30sg+SCi12cTuYvuwCNfOOefBGn42ZAxgp4K BaxipU47btB/V8PCE7qWJTrpvO+sMH6nW4mcyUXgcAq0hvIhQZQByv8sIOXUF1uf WDpcpdX6VxkKuUIqErqWMTqgV/AmdqJbmNPjTj0qrSZZEDqaUgusvljJJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ0RRgKNsvnqbQhN70oZ/M+eUTkMB8GA1UdIwQY MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsWm+Tma SpdKzVG+bK7Tf31p+lSUGuN+WqbD2M58QME+93TUJX8xYEGWQ6mn8ORuKN2k2ERg F/PfsOC9jFI+y/Rjncclk6R9FMVJHPyLFPlhVEQobftNR8Pcptt96mLniG1a2LP2 6+9mAYWwsM5LCAiQ2K6FxjiHrNdPC3aVUcVmfNc9ugtA9NBTF+1aup0ZJ4bPeLfY etNYgeOcaVjN74GmHkY4GJZhFyk8TX45Te4n4l0Gl1DR+Zgh/Hj+UqG3ey1dTJgx KCMpcxpYKVyXqqwCqXK+WJVXKV+UQr1eGgg9FjRe03ZZ77J/sKKk+Lo+w5u41KlZ YIgfzscOx+Fvrg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:12 2025 by rpki-client