This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json) Hash identifier: FHIJgUh3aaQEO6afunOIIBteLc9lyGLKAx2zcGrJCi4= Subject key identifier: 2A:DD:73:3B:3A:1B:E4:29:11:64:9E:08:AE:62:BD:09:73:34:0F:9A Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a Certificate serial: 019AF31CF1D8F65F2AA80FD297AE957E5F36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft Manifest number: 1356 Signing time: Sat 06 Dec 2025 10:02:31 +0000 Manifest this update: Sat 06 Dec 2025 10:02:31 +0000 Manifest next update: Sun 07 Dec 2025 10:02:31 +0000 Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=) 2: ODB5K147usnzcNTK56uipc26ego.crl (hash: EGGceERilRT3syCLbZiGMs/m7xgghpx0fb+hzBPxYsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f1:d8:f6:5f:2a:a8:0f:d2:97:ae:95:7e:5f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a Validity Not Before: Dec 6 10:02:31 2025 GMT Not After : Dec 7 10:02:31 2025 GMT Subject: CN=2add733b3a1be42911649e08ae62bd0973340f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:e4:79:c3:b1:34:b9:d9:17:55:67:2d:40: aa:4c:0e:41:ad:23:9b:a2:12:e6:25:4e:c6:19:0f: 34:ac:de:51:4e:c5:99:f0:f5:40:b7:ca:be:e7:a4: c8:81:3b:0d:ea:75:0d:86:fe:ce:eb:b7:d5:cc:de: f6:72:a1:73:3f:5e:78:61:0e:9c:0b:5e:e7:3b:8a: e4:07:51:48:d9:79:90:ba:35:93:5c:39:f7:17:50: 66:22:76:24:c3:98:c5:01:c3:77:a0:9c:09:c7:00: 0a:dc:f4:2f:c2:1d:24:4a:4e:37:7d:91:b0:00:19: aa:a6:75:cc:b3:67:5d:31:53:12:11:76:a0:5a:43: e1:5e:dd:bb:f9:dc:e1:39:54:80:c5:4f:83:3d:f2: 93:94:97:f9:59:f5:14:d2:ca:86:44:7c:62:e4:4d: 0f:3c:87:ed:ee:61:00:e3:39:28:1a:96:15:b4:83: 39:da:16:70:78:9b:ca:8f:5d:e8:9c:5e:2b:fa:a2: 74:7e:11:4d:95:05:8d:59:e6:07:14:ca:a8:9a:86: 26:1b:ee:d6:38:22:18:23:65:75:5b:b2:03:05:56: e7:47:a2:f2:06:b6:3d:2b:ed:df:95:0c:bc:29:53: 2f:5c:ca:4b:9d:0e:54:29:58:fd:3b:a0:b1:b5:49: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DD:73:3B:3A:1B:E4:29:11:64:9E:08:AE:62:BD:09:73:34:0F:9A X509v3 Authority Key Identifier: keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e9:9f:31:5e:1d:ea:eb:25:b2:83:1d:2a:84:bb:5d:5f:25: d1:e7:fc:03:1e:05:4e:13:02:08:93:d7:73:f0:f2:cf:0b:1a: 8c:0c:04:bc:fb:89:2a:3f:31:a6:02:05:28:be:83:22:d9:7e: 86:f0:42:68:a5:8a:a3:ff:57:56:0a:56:c3:eb:d8:37:f5:35: e9:e7:e7:4f:d2:d2:ef:ba:cc:02:4f:ce:f2:fe:a0:0a:fc:73: aa:73:29:52:c4:2b:34:c0:74:58:e8:d1:51:e6:d0:cd:8f:28: d9:44:36:99:8d:4e:1c:b2:ed:1f:1b:56:ba:5c:4a:81:b7:1f: ac:a4:d9:b7:3d:4d:88:73:89:0b:51:83:42:48:55:d5:77:75: b0:c2:8d:0b:34:8d:d3:54:3f:f5:3c:5f:87:11:78:b3:49:13: 47:ab:a3:11:0f:ae:24:58:12:19:59:1e:bf:0a:80:64:86:16: 2e:99:ec:48:0d:61:3e:f3:bc:c1:ec:49:f2:9c:53:3f:79:6a: 2e:20:58:89:03:d9:ff:da:88:83:42:55:bc:0c:bd:36:5c:95: f9:04:2f:f8:c2:0b:80:a6:0a:e6:51:a7:43:0f:61:1d:59:c8: 99:02:5e:90:71:d1:eb:c1:6b:d7:c4:94:f4:2b:f7:22:4d:2e: 30:74:7b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPHY9l8qqA/Sl66Vfl82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzA3OTJiNWUzYmJhYzlmMzcwZDRjYWU3YWJhMmE1Y2Ri YTdhMGEwHhcNMjUxMjA2MTAwMjMxWhcNMjUxMjA3MTAwMjMxWjAzMTEwLwYDVQQD EygyYWRkNzMzYjNhMWJlNDI5MTE2NDllMDhhZTYyYmQwOTczMzQwZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPfkecOxNLnZF1VnLUCqTA5BrSOb ohLmJU7GGQ80rN5RTsWZ8PVAt8q+56TIgTsN6nUNhv7O67fVzN72cqFzP154YQ6c C17nO4rkB1FI2XmQujWTXDn3F1BmInYkw5jFAcN3oJwJxwAK3PQvwh0kSk43fZGw ABmqpnXMs2ddMVMSEXagWkPhXt27+dzhOVSAxU+DPfKTlJf5WfUU0sqGRHxi5E0P PIft7mEA4zkoGpYVtIM52hZweJvKj13onF4r+qJ0fhFNlQWNWeYHFMqomoYmG+7W OCIYI2V1W7IDBVbnR6LyBrY9K+3flQy8KVMvXMpLnQ5UKVj9O6CxtUnGlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrdczs6G+QpEWSeCK5ivQlzNA+aMB8GA1UdIwQY MBaAFDgweSteO7rJ83DUyueroqXNunoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjkt MWJmZmE3NGEzYjFkLzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjktMWJmZmE3NGEzYjFk LzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdumfMV4d 6uslsoMdKoS7XV8l0ef8Ax4FThMCCJPXc/DyzwsajAwEvPuJKj8xpgIFKL6DItl+ hvBCaKWKo/9XVgpWw+vYN/U16efnT9LS77rMAk/O8v6gCvxzqnMpUsQrNMB0WOjR UebQzY8o2UQ2mY1OHLLtHxtWulxKgbcfrKTZtz1NiHOJC1GDQkhV1Xd1sMKNCzSN 01Q/9TxfhxF4s0kTR6ujEQ+uJFgSGVkevwqAZIYWLpnsSA1hPvO8wexJ8pxTP3lq LiBYiQPZ/9qIg0JVvAy9NlyV+QQv+MILgKYK5lGnQw9hHVnImQJekHHR68Fr18SU 9Cv3Ik0uMHR7Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:05 2025 by rpki-client