This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json) Hash identifier: YngXkijVTcKLv7bBjyR59J8ZaAsSuncKytJsqEksB4Q= Subject key identifier: 6B:70:F1:0E:96:E0:B1:2E:80:4A:ED:6A:EE:2D:2E:00:78:C3:C2:AF Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e Certificate serial: 019B2C9DABFF8AC9227C34E3B55570955CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft Manifest number: 0CF1 Signing time: Wed 17 Dec 2025 14:01:29 +0000 Manifest this update: Wed 17 Dec 2025 14:01:29 +0000 Manifest next update: Thu 18 Dec 2025 14:01:29 +0000 Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=) 2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: U0N9KU8uvzUl1kvmk9GfRVqRVJopkPn4JNtQcT4gyoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:ab:ff:8a:c9:22:7c:34:e3:b5:55:70:95:5c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e Validity Not Before: Dec 17 14:01:29 2025 GMT Not After : Dec 18 14:01:29 2025 GMT Subject: CN=6b70f10e96e0b12e804aed6aee2d2e0078c3c2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:54:69:58:90:b6:90:07:4e:87:98:c2:d2: 9b:7e:ed:89:55:8b:51:37:51:0e:d3:0c:0a:49:81: 72:6e:47:c7:cc:91:d5:90:2b:6a:b8:3c:84:3b:35: 42:70:46:a7:9f:86:3a:43:8a:35:b1:c9:73:9e:ee: cc:ed:44:77:93:bf:95:11:02:4d:74:d1:a9:ce:c1: e0:5c:e5:11:28:f9:27:c3:44:14:78:9d:67:c3:92: 00:55:3f:06:1b:04:66:7e:12:ec:ff:7f:95:6b:1b: d3:53:37:51:8b:6c:fc:b6:63:88:76:b7:77:68:be: 64:7b:42:3c:8b:39:fb:dd:c0:3f:c8:41:be:fd:72: 9b:b6:99:74:14:6a:81:42:27:11:6c:12:11:98:0f: eb:a5:38:b3:bb:50:3b:f6:ff:30:40:cf:a3:a0:b9: 8c:52:ba:46:cd:a5:e3:f9:6a:9d:83:37:6e:b5:52: 69:3f:52:ba:00:b2:ed:97:06:6b:b6:3b:bc:72:c0: 76:c1:ab:f5:10:8c:f4:87:b3:4e:11:c0:89:5d:ef: 38:89:66:7d:ef:ee:d5:5e:fc:f1:46:75:5b:3f:c6: 36:3e:45:60:73:73:88:b3:0f:3f:b2:98:b1:64:e2: 55:34:de:0f:f7:70:58:47:f9:2d:61:56:82:19:2a: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:70:F1:0E:96:E0:B1:2E:80:4A:ED:6A:EE:2D:2E:00:78:C3:C2:AF X509v3 Authority Key Identifier: keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:29:2b:c8:1c:b4:eb:25:c6:ae:23:0e:69:83:ee:4e:1a:6a: 0e:5a:33:19:6d:f8:76:5e:ee:f5:3d:f1:54:83:7e:3a:11:21: 5e:2b:47:89:00:4d:a9:0f:84:3f:f6:da:43:18:e1:6d:b1:d7: d8:85:5e:fb:01:d2:13:79:ff:d1:2d:95:59:93:d9:d7:ba:ff: bc:e1:46:b4:48:74:b0:b1:de:4a:70:93:37:ce:83:74:73:2b: ee:e8:81:20:18:24:4f:24:5a:5e:cc:ef:cc:b6:12:79:b1:0c: 06:78:f6:27:93:3c:bd:ff:01:de:9d:fb:21:1e:2a:b5:f2:ff: 04:cf:8a:dd:3b:f8:73:b4:d4:85:f2:00:00:8e:d8:7b:8c:9d: 05:7d:58:69:0c:d6:8d:f0:62:48:ec:60:f9:1b:4c:20:92:ee: fd:84:f7:bf:56:54:60:57:ee:cc:16:59:f0:f6:3a:dc:a1:ef: 92:4b:ae:f7:d4:7d:30:e6:e0:09:58:a8:be:32:d7:fb:35:e1: e9:fe:8a:7e:24:fa:b5:c1:99:8d:5e:b2:3f:92:77:b5:e0:c2: fa:ee:2f:c3:26:32:89:97:d8:85:e0:e9:14:43:38:61:30:df: 49:00:4f:0d:e4:9c:16:5f:71:4c:4c:74:11:af:2f:1f:4f:a5: 48:2e:12:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnav/iskifDTjtVVwlVy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGU0NTZkNGQ0MDVjNmY0MjkyZDYzNjg4Njc2Y2UxNTBl N2YwN2UwHhcNMjUxMjE3MTQwMTI5WhcNMjUxMjE4MTQwMTI5WjAzMTEwLwYDVQQD Eyg2YjcwZjEwZTk2ZTBiMTJlODA0YWVkNmFlZTJkMmUwMDc4YzNjMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQtUaViQtpAHToeYwtKbfu2JVYtR N1EO0wwKSYFybkfHzJHVkCtquDyEOzVCcEann4Y6Q4o1sclznu7M7UR3k7+VEQJN dNGpzsHgXOURKPknw0QUeJ1nw5IAVT8GGwRmfhLs/3+VaxvTUzdRi2z8tmOIdrd3 aL5ke0I8izn73cA/yEG+/XKbtpl0FGqBQicRbBIRmA/rpTizu1A79v8wQM+joLmM UrpGzaXj+WqdgzdutVJpP1K6ALLtlwZrtju8csB2wav1EIz0h7NOEcCJXe84iWZ9 7+7VXvzxRnVbP8Y2PkVgc3OIsw8/spixZOJVNN4P93BYR/ktYVaCGSoZrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtw8Q6W4LEugErtau4tLgB4w8KvMB8GA1UdIwQY MBaAFKHeRW1NQFxvQpLWNohnbOFQ5/B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUt MGM5ZTBjZjdlOWZjLzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUtMGM5ZTBjZjdlOWZj LzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCkryBy0 6yXGriMOaYPuThpqDlozGW34dl7u9T3xVIN+OhEhXitHiQBNqQ+EP/baQxjhbbHX 2IVe+wHSE3n/0S2VWZPZ17r/vOFGtEh0sLHeSnCTN86DdHMr7uiBIBgkTyRaXszv zLYSebEMBnj2J5M8vf8B3p37IR4qtfL/BM+K3Tv4c7TUhfIAAI7Ye4ydBX1YaQzW jfBiSOxg+RtMIJLu/YT3v1ZUYFfuzBZZ8PY63KHvkkuu99R9MObgCViovjLX+zXh 6f6KfiT6tcGZjV6yP5J3teDC+u4vwyYyiZfYheDpFEM4YTDfSQBPDeScFl9xTEx0 Ea8vH0+lSC4SJw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:39:00 2025 by rpki-client