This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json) Hash identifier: 8BICvqVph1iuHQisGupSHMxbPYUliJLadbEJ1I8MfhU= Subject key identifier: 10:4C:F0:B3:F9:58:E3:56:09:A0:55:BD:61:86:0E:86:47:23:BD:89 Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Certificate serial: 019AF46583D8114B93D676942CC088A562F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft Manifest number: 06AF Signing time: Sat 06 Dec 2025 16:01:24 +0000 Manifest this update: Sat 06 Dec 2025 16:01:24 +0000 Manifest next update: Sun 07 Dec 2025 16:01:24 +0000 Files and hashes: 1: InB_IX31uvHxMubFeh7gf9PNz5I.roa (hash: GynuEhjsTsyBFx3Fyz2fqy0AYWXC0AnBi+qBO5MvYRk=) 2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: 8hvYOauJThb3bWHpcPK+4LWF0MkIiZ2HcD7BOvhFwqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:83:d8:11:4b:93:d6:76:94:2c:c0:88:a5:62:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Validity Not Before: Dec 6 16:01:24 2025 GMT Not After : Dec 7 16:01:24 2025 GMT Subject: CN=104cf0b3f958e35609a055bd61860e864723bd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:a3:8d:5b:d0:ba:c9:5d:e8:7c:c2:a0:e4: ec:b6:43:1d:1b:c0:c4:28:4d:31:ac:23:29:0c:e4: 9e:bb:a4:d4:d1:fa:7e:52:87:f5:ea:2c:21:61:ca: f2:d3:9f:a5:68:8e:24:d0:3b:59:49:23:a6:d1:fb: 6a:e1:4a:e1:90:e2:ba:ba:28:56:09:b0:45:11:dc: bd:9f:a1:42:93:78:3e:fb:78:1b:df:6f:0e:5d:8e: 1a:5b:d8:a1:f6:10:8c:2b:f1:be:16:be:43:45:3f: 3d:f1:e3:88:da:4b:3c:10:4d:59:2d:82:3f:64:b1: 9d:a2:ca:21:7a:ae:0c:0d:67:cc:93:ee:f5:55:db: 15:73:85:7c:f3:4c:da:f6:25:49:56:5d:c5:07:27: 40:3a:ad:be:e6:99:d1:ed:48:2d:94:04:e0:2c:53: 65:cc:9f:ea:87:aa:f8:8c:69:d3:1b:94:a6:48:f1: f6:00:a4:f4:5a:70:54:a4:3e:6c:41:5a:7a:8a:28: 3d:9a:c7:80:02:3e:e0:7d:30:6c:79:1f:73:f8:1a: 69:75:68:4b:8c:e8:96:14:43:49:80:f0:ab:f9:41: b0:b1:19:5b:c1:24:46:76:6d:7e:dd:9a:5b:24:1a: 76:c1:68:36:11:80:d0:af:33:40:9e:b6:a0:35:38: 12:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:F0:B3:F9:58:E3:56:09:A0:55:BD:61:86:0E:86:47:23:BD:89 X509v3 Authority Key Identifier: keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8e:fb:2a:17:11:8d:4a:41:8a:ef:d8:2d:d3:77:8b:db:c4: a4:36:fb:43:08:34:73:43:9b:3e:9d:9a:44:5c:19:b7:1a:ca: af:3e:81:07:f8:d0:35:74:73:69:20:04:83:60:e1:28:35:ba: c9:30:fd:8c:c7:2a:b1:b9:3b:c7:2b:12:25:64:cb:1a:b3:10: 5b:c8:e3:6b:f6:23:fa:4b:03:a7:f9:23:2f:01:56:84:f3:ad: e9:3c:22:65:25:ed:47:61:9c:a2:7e:fa:ed:5c:0a:5f:24:57: f4:f6:18:ce:74:3c:11:fa:56:2d:4e:4f:32:d7:20:3b:03:21: f8:1b:41:25:18:63:b1:27:6d:35:3b:5e:23:74:62:41:ac:6c: 2e:64:54:53:43:de:f1:5c:c2:dd:de:4b:4a:1a:28:df:d2:28: fe:01:f4:fc:ad:9c:ef:bd:c8:c6:74:f0:22:d6:f1:6a:4b:a4: 66:2c:80:0c:c0:e1:74:7b:71:a1:18:62:9d:5c:9d:50:a5:6a: 7f:c5:71:8e:2f:57:c6:14:e2:d6:d6:c6:00:4e:6a:e8:80:9a: 98:47:48:27:42:2b:5c:3f:3d:71:71:e9:9f:d0:8a:65:00:36: 37:33:62:6a:c4:bd:ab:bd:01:f7:5f:0e:76:e0:12:c2:d3:f9: 0a:89:3b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYPYEUuT1naULMCIpWL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1 NDE5MWIwHhcNMjUxMjA2MTYwMTI0WhcNMjUxMjA3MTYwMTI0WjAzMTEwLwYDVQQD EygxMDRjZjBiM2Y5NThlMzU2MDlhMDU1YmQ2MTg2MGU4NjQ3MjNiZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPejjVvQusld6HzCoOTstkMdG8DE KE0xrCMpDOSeu6TU0fp+Uof16iwhYcry05+laI4k0DtZSSOm0ftq4UrhkOK6uihW CbBFEdy9n6FCk3g++3gb328OXY4aW9ih9hCMK/G+Fr5DRT898eOI2ks8EE1ZLYI/ ZLGdosoheq4MDWfMk+71VdsVc4V880za9iVJVl3FBydAOq2+5pnR7UgtlATgLFNl zJ/qh6r4jGnTG5SmSPH2AKT0WnBUpD5sQVp6iig9mseAAj7gfTBseR9z+BppdWhL jOiWFENJgPCr+UGwsRlbwSRGdm1+3ZpbJBp2wWg2EYDQrzNAnragNTgShQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBM8LP5WONWCaBVvWGGDoZHI72JMB8GA1UdIwQY MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt M2UwNmEwMTgyNjE0LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0 LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIo77KhcR jUpBiu/YLdN3i9vEpDb7Qwg0c0ObPp2aRFwZtxrKrz6BB/jQNXRzaSAEg2DhKDW6 yTD9jMcqsbk7xysSJWTLGrMQW8jja/Yj+ksDp/kjLwFWhPOt6TwiZSXtR2Gcon76 7VwKXyRX9PYYznQ8EfpWLU5PMtcgOwMh+BtBJRhjsSdtNTteI3RiQaxsLmRUU0Pe 8VzC3d5LShoo39Io/gH0/K2c773IxnTwItbxakukZiyADMDhdHtxoRhinVydUKVq f8Vxji9XxhTi1tbGAE5q6ICamEdIJ0IrXD89cXHpn9CKZQA2NzNiasS9q70B918O duASwtP5Cok7QA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:45 2025 by rpki-client