This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json) Hash identifier: Min4fioifzsQbAlhpalo1p+xPNOaDsnaYlM4g3NcJJ8= Subject key identifier: CC:B0:B3:3B:49:5A:F2:82:4F:E1:E7:A5:CD:EF:6F:A2:AC:73:C2:4E Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Certificate serial: 019AF240185B0C7540CB1A050011972A33E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: loBGKdTgMJ67QI56yFk3xO8tbm0ycsqrEbKweFvOqUU=) 2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:18:5b:0c:75:40:cb:1a:05:00:11:97:2a:33:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=ccb0b33b495af2824fe1e7a5cdef6fa2ac73c24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:2f:8c:74:fe:7c:ca:53:02:5f:f5:68:98: cd:40:bb:c8:00:4a:84:5a:42:47:c6:53:3c:00:d8: d8:25:02:12:79:02:35:30:4f:09:6b:f3:f4:22:30: a7:3b:81:25:41:f2:d5:6f:8b:53:dd:74:29:51:b4: b5:48:03:16:59:db:c8:b4:be:1a:f5:5d:85:50:48: 00:11:2e:cd:a4:ac:9e:a5:ae:c7:d8:8b:b2:eb:a0: 4f:f6:ab:ee:f0:f3:fd:0d:2a:63:63:aa:9b:ec:20: cb:17:f7:d0:34:40:77:e1:fe:b2:9a:7b:be:ee:87: af:3f:c5:1c:c7:18:18:a4:39:78:ba:70:c3:ae:e7: 9c:3c:f2:43:96:0e:d1:34:95:c5:39:a7:bc:ef:6b: 8c:b6:8e:14:bc:44:95:b9:2b:73:60:ee:62:a2:2b: a8:e1:27:c9:7b:e7:b0:28:61:ca:55:a9:81:75:28: 2c:c7:fe:3f:68:68:d5:3c:88:24:f0:4f:e2:6d:35: 16:cf:c3:63:9a:91:69:3c:69:4a:11:ec:96:7d:c9: 90:4b:f3:57:62:34:a0:13:5f:b4:53:00:2b:51:e0: ce:32:be:b8:bc:97:b4:4d:70:00:af:e5:9c:70:12: 1b:91:15:43:5a:f7:f4:70:6f:57:15:c5:bf:18:0f: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:B3:3B:49:5A:F2:82:4F:E1:E7:A5:CD:EF:6F:A2:AC:73:C2:4E X509v3 Authority Key Identifier: keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ad:45:86:b0:0f:66:52:92:16:7b:ac:40:bf:4c:61:aa:22: e6:13:6c:07:5f:cd:dc:62:ec:c7:03:c4:67:ca:06:2a:02:43: 9e:c3:9e:46:11:5a:b5:91:00:d4:c4:c6:67:2c:d4:3f:a7:14: 16:e9:8a:de:2c:4f:58:70:c6:a9:40:22:e8:e6:1a:b1:bf:b3: 13:3f:c8:a1:68:96:de:74:ad:02:b1:95:06:b2:a7:8a:7d:16: e5:4a:f6:e4:b9:bc:92:71:60:be:fd:f9:77:0a:92:ab:8a:10: b1:d9:9e:79:a2:94:5b:c8:57:9f:28:42:0d:2b:53:bd:90:7e: 87:18:4b:57:eb:27:e8:a5:48:7b:44:0e:6d:94:2f:fc:bd:ae: 40:ff:ba:36:37:82:8a:03:cc:5e:b7:f9:b8:1c:58:09:10:23: 75:02:a9:f2:82:27:3e:44:c9:63:32:e8:b3:89:dc:47:ea:3b: ab:a7:10:1f:0f:19:67:4c:1d:15:c5:5d:a8:eb:15:63:b4:ac: 2a:5b:5b:b8:3f:2a:d5:2d:81:b3:55:ac:61:4b:e7:ae:6e:f9: c5:1e:eb:fa:1d:da:87:3a:b8:0b:08:54:ef:19:fc:9f:04:09: 80:f0:ff:36:57:c9:ee:2b:52:1c:61:c7:27:85:fd:77:6a:46: ee:50:e8:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBhbDHVAyxoFABGXKjPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz Yjk5MmIwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhjY2IwYjMzYjQ5NWFmMjgyNGZlMWU3YTVjZGVmNmZhMmFjNzNjMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUQvjHT+fMpTAl/1aJjNQLvIAEqE WkJHxlM8ANjYJQISeQI1ME8Ja/P0IjCnO4ElQfLVb4tT3XQpUbS1SAMWWdvItL4a 9V2FUEgAES7NpKyepa7H2Iuy66BP9qvu8PP9DSpjY6qb7CDLF/fQNEB34f6ymnu+ 7oevP8UcxxgYpDl4unDDruecPPJDlg7RNJXFOae872uMto4UvESVuStzYO5ioiuo 4SfJe+ewKGHKVamBdSgsx/4/aGjVPIgk8E/ibTUWz8NjmpFpPGlKEeyWfcmQS/NX YjSgE1+0UwArUeDOMr64vJe0TXAAr+WccBIbkRVDWvf0cG9XFcW/GA/y2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMywsztJWvKCT+Hnpc3vb6Ksc8JOMB8GA1UdIwQY MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt NWUzMGI4NmZkMWFiLzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw61FhrAP ZlKSFnusQL9MYaoi5hNsB1/N3GLsxwPEZ8oGKgJDnsOeRhFatZEA1MTGZyzUP6cU FumK3ixPWHDGqUAi6OYasb+zEz/IoWiW3nStArGVBrKnin0W5Ur25Lm8knFgvv35 dwqSq4oQsdmeeaKUW8hXnyhCDStTvZB+hxhLV+sn6KVIe0QObZQv/L2uQP+6NjeC igPMXrf5uBxYCRAjdQKp8oInPkTJYzLos4ncR+o7q6cQHw8ZZ0wdFcVdqOsVY7Ss KltbuD8q1S2Bs1WsYUvnrm75xR7r+h3ahzq4CwhU7xn8nwQJgPD/NlfJ7itSHGHH J4X9d2pG7lDoZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:33 2025 by rpki-client