This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json) Hash identifier: pYBgwuHohukNcwRa4ffr99YXR5N4IRpDXyMCPma3RBY= Subject key identifier: 31:B6:65:9B:F4:C8:02:6A:6A:48:A9:76:87:0F:B4:24:B6:6E:0C:DF Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16 Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16 Certificate serial: 019AF31BB6C8CC4F4B407C164BC2561188FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=) 2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: K9xcaQayizHyO5ZzjCAGPDbJt13sG0FFl8Q2V8h6Ouo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b6:c8:cc:4f:4b:40:7c:16:4b:c2:56:11:88:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16 Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=31b6659bf4c8026a6a48a976870fb424b66e0cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:79:92:45:d6:b8:63:5f:2c:f0:76:90:b9: f3:7c:98:7d:e1:56:23:74:37:8c:b6:6b:9d:f2:e4: f2:48:3c:68:d7:ef:d4:a3:e7:c3:f9:cf:88:59:ab: ee:4f:10:a9:4c:f6:fa:ae:3d:3d:fd:ef:3d:67:2e: 07:bf:49:7d:72:54:52:ee:b1:a8:cc:ca:e5:52:ad: bc:5d:a7:22:ff:14:f5:56:d6:7d:bb:69:34:01:fa: cc:99:96:c0:a0:a2:5e:d2:3e:01:ed:ce:0c:66:b9: 59:45:97:4b:a2:5b:b1:94:b7:4a:6b:45:12:72:aa: f2:1d:8b:4b:96:bb:64:7b:cd:3e:c2:92:4a:ed:fb: 8d:cb:bc:86:97:7a:28:23:07:86:90:f6:28:50:ae: 71:f7:8f:50:d6:5a:ae:b5:d7:31:a4:7f:a4:d4:4c: 15:57:c5:fd:9a:58:14:dd:29:1d:4f:3c:df:6a:9c: ea:93:c8:8f:1f:1b:e1:76:55:4d:31:b0:ed:6d:d4: c1:49:c2:c0:86:32:9f:9a:4c:7e:be:22:ef:db:6b: 78:c8:9c:00:03:93:ff:65:bb:b8:8e:b0:70:c6:28: 36:15:4b:b3:cf:c2:a7:16:46:88:1d:f8:8f:34:9c: 79:d9:7b:ea:af:c6:14:8d:d5:1c:18:2e:05:6b:8c: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B6:65:9B:F4:C8:02:6A:6A:48:A9:76:87:0F:B4:24:B6:6E:0C:DF X509v3 Authority Key Identifier: keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b1:6f:da:6a:13:1d:d6:00:74:dc:c9:6b:e0:58:06:be:d3: a1:7d:1d:22:6d:cf:52:89:00:b6:85:74:2e:3c:ae:12:ee:0a: 95:88:18:7b:31:b3:75:2c:f7:bb:f6:f3:23:ca:88:48:69:d3: b9:02:c2:34:9f:c8:cc:ab:c7:c7:40:0f:72:af:8f:2f:17:b4: 91:3e:0d:75:6b:b8:8b:4e:94:56:7f:d8:ef:2b:0a:dd:7d:9b: 82:9a:74:4e:05:7d:6b:ae:35:d1:09:9f:a1:2f:36:7a:6c:eb: 86:91:f9:05:81:10:c9:bb:ad:90:25:46:d3:a1:3d:b4:1c:06: a8:9c:47:6b:37:04:1d:65:31:83:cb:cb:b2:72:ab:09:55:b0: 5a:27:25:e2:b3:ce:0f:bb:0b:e4:a9:9b:7a:36:90:d7:90:ca: 28:a5:ab:54:09:32:87:3e:ab:05:db:eb:8f:64:48:41:71:1a: fb:4e:9a:af:3d:97:f1:25:30:7c:ee:ea:7c:83:5a:fa:00:a8: 5c:60:18:34:72:98:38:5f:9c:c9:5f:20:bf:cf:df:30:0d:07: 45:1a:b3:f1:46:cc:2f:fe:ec:c9:c5:e0:fa:10:e7:8a:29:d0: d4:d2:0d:27:d1:fd:ba:68:ed:9b:35:0d:ce:ac:89:c4:4d:61: 11:04:ad:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7bIzE9LQHwWS8JWEYj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZDQzYzI2NDY4ODE5YzA3YjE5MjUxMTVmZTQ5MjFmODQy MDNkMTYwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD EygzMWI2NjU5YmY0YzgwMjZhNmE0OGE5NzY4NzBmYjQyNGI2NmUwY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt15kkXWuGNfLPB2kLnzfJh94VYj dDeMtmud8uTySDxo1+/Uo+fD+c+IWavuTxCpTPb6rj09/e89Zy4Hv0l9clRS7rGo zMrlUq28Xaci/xT1VtZ9u2k0AfrMmZbAoKJe0j4B7c4MZrlZRZdLoluxlLdKa0US cqryHYtLlrtke80+wpJK7fuNy7yGl3ooIweGkPYoUK5x949Q1lqutdcxpH+k1EwV V8X9mlgU3SkdTzzfapzqk8iPHxvhdlVNMbDtbdTBScLAhjKfmkx+viLv22t4yJwA A5P/Zbu4jrBwxig2FUuzz8KnFkaIHfiPNJx52Xvqr8YUjdUcGC4Fa4wWBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDG2ZZv0yAJqakipdocPtCS2bgzfMB8GA1UdIwQY MBaAFDnUPCZGiBnAexklEV/kkh+EID0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQt YWJmMGVhMDdlZmFmLzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQtYWJmMGVhMDdlZmFm LzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArFv2moT HdYAdNzJa+BYBr7ToX0dIm3PUokAtoV0LjyuEu4KlYgYezGzdSz3u/bzI8qISGnT uQLCNJ/IzKvHx0APcq+PLxe0kT4NdWu4i06UVn/Y7ysK3X2bgpp0TgV9a6410Qmf oS82emzrhpH5BYEQybutkCVG06E9tBwGqJxHazcEHWUxg8vLsnKrCVWwWicl4rPO D7sL5KmbejaQ15DKKKWrVAkyhz6rBdvrj2RIQXEa+06arz2X8SUwfO7qfINa+gCo XGAYNHKYOF+cyV8gv8/fMA0HRRqz8UbML/7sycXg+hDniinQ1NINJ9H9umjtmzUN zqyJxE1hEQStLg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:49 2025 by rpki-client