This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json) Hash identifier: pdbtSAUiQ4X0hTzgqEq7wRkeDRKVgoQbTb0aXX+Jw+Y= Subject key identifier: EF:F1:0C:8A:A6:B7:30:79:0B:F2:F2:47:F0:C6:49:B6:D3:60:CF:A0 Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf Certificate serial: 019AF2767FE90D01220B489F14113A242F3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft Manifest number: 0F58 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: msXRQ0nte05ob5r/QuhurZSstUbjrZiBVwodmW3iO7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:e9:0d:01:22:0b:48:9f:14:11:3a:24:2f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=eff10c8aa6b730790bf2f247f0c649b6d360cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:31:b0:a0:ae:a6:dd:dd:7d:cc:37:d8:41: 0a:33:34:41:39:94:24:dc:df:2f:7d:c6:73:e9:28: 08:2b:78:3f:d9:4f:68:fe:25:88:00:7e:7e:fd:e1: 96:69:b6:35:68:64:9b:ef:82:43:44:70:e3:ab:51: 7f:1f:5b:6b:6e:a3:c9:43:dd:a6:ae:b2:12:c9:c0: 9a:07:9b:ca:2d:b7:55:16:69:f9:52:de:be:42:15: ac:ec:99:30:51:f3:e7:1e:bb:1b:27:eb:9f:c2:8c: b5:ad:a0:cd:70:19:cc:c9:9d:c8:d4:d8:ad:05:ae: b0:cf:3e:3b:46:85:89:2b:1b:18:fb:55:f5:f1:f9: 1c:d9:85:54:ae:64:c5:bc:f2:91:50:ae:3a:19:ab: 2b:7e:ef:da:ec:56:ed:8d:1b:ce:07:69:56:ce:70: da:8e:e8:5a:c1:34:cb:08:8a:5c:74:2b:d3:70:19: 3e:f7:80:90:a5:27:35:53:db:f2:c2:80:53:46:ed: d4:fc:ba:11:90:52:15:5a:1a:ca:d1:55:bf:e3:7e: b6:3e:0e:d8:c2:89:61:31:27:3c:34:4d:97:b8:54: a5:c2:d0:76:4e:c1:25:60:ab:97:a2:02:73:9f:9b: a6:59:35:d9:34:e8:b4:5f:87:82:04:35:52:17:14: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F1:0C:8A:A6:B7:30:79:0B:F2:F2:47:F0:C6:49:B6:D3:60:CF:A0 X509v3 Authority Key Identifier: keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5a:a5:ff:ea:d4:44:07:06:fa:8a:8c:80:84:18:ab:c5:14: dc:a7:11:48:2e:38:af:f2:3e:e9:34:d6:3f:fd:be:97:5d:cc: a1:a8:28:71:05:b8:12:08:57:0a:3a:87:a8:db:39:1d:18:82: e0:a2:dc:d8:05:c5:59:8a:56:bf:26:5e:bf:77:42:3b:09:4b: fc:0b:fd:ec:6f:b3:72:82:60:d7:c3:a3:3b:28:48:66:26:b3: 57:98:8b:3e:9f:7c:ff:c0:83:a8:95:f0:a8:ee:95:3d:3a:a1: dc:c4:6d:d2:a3:f2:8b:ad:67:38:3f:62:2c:7a:bc:ab:67:b8: 28:94:bf:d9:1c:be:07:87:92:c6:24:22:72:d1:2b:67:5a:64: 5c:dd:36:50:79:75:6e:cb:8a:aa:d5:b3:8f:87:22:ee:80:f7: 82:68:bb:0f:3c:0e:08:e7:02:bb:85:a6:78:92:a0:5f:5b:32: 10:f6:97:c5:9e:6c:54:e1:19:87:d3:f5:3a:7e:95:2f:ca:53: 99:84:d6:cc:f0:0a:3c:b3:91:5f:d1:52:0b:1c:0f:44:82:5e: 0a:ae:d4:52:85:a2:ac:6b:f0:84:82:08:c5:3d:22:8b:5f:c2: c0:79:82:ef:42:6c:03:df:2d:34:ca:04:6d:5d:b8:63:28:d6: 93:42:d8:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn/pDQEiC0ifFBE6JC86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzBmNGQxMzk0NWYxNmY5Yjc0YjEyNjQ3ZWExMmNjNWQy NzQ4Y2YwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EyhlZmYxMGM4YWE2YjczMDc5MGJmMmYyNDdmMGM2NDliNmQzNjBjZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/UxsKCupt3dfcw32EEKMzRBOZQk 3N8vfcZz6SgIK3g/2U9o/iWIAH5+/eGWabY1aGSb74JDRHDjq1F/H1trbqPJQ92m rrISycCaB5vKLbdVFmn5Ut6+QhWs7JkwUfPnHrsbJ+ufwoy1raDNcBnMyZ3I1Nit Ba6wzz47RoWJKxsY+1X18fkc2YVUrmTFvPKRUK46Gasrfu/a7FbtjRvOB2lWznDa juhawTTLCIpcdCvTcBk+94CQpSc1U9vywoBTRu3U/LoRkFIVWhrK0VW/4362Pg7Y wolhMSc8NE2XuFSlwtB2TsElYKuXogJzn5umWTXZNOi0X4eCBDVSFxRgdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/xDIqmtzB5C/LyR/DGSbbTYM+gMB8GA1UdIwQY MBaAFDgw9NE5RfFvm3SxJkfqEsxdJ0jPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYt ZWNkZWMwYTQxMDI0LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYtZWNkZWMwYTQxMDI0 LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFql/+rU RAcG+oqMgIQYq8UU3KcRSC44r/I+6TTWP/2+l13MoagocQW4EghXCjqHqNs5HRiC 4KLc2AXFWYpWvyZev3dCOwlL/Av97G+zcoJg18OjOyhIZiazV5iLPp98/8CDqJXw qO6VPTqh3MRt0qPyi61nOD9iLHq8q2e4KJS/2Ry+B4eSxiQictErZ1pkXN02UHl1 bsuKqtWzj4ci7oD3gmi7DzwOCOcCu4WmeJKgX1syEPaXxZ5sVOEZh9P1On6VL8pT mYTWzPAKPLORX9FSCxwPRIJeCq7UUoWirGvwhIIIxT0ii1/CwHmC70JsA98tNMoE bV24YyjWk0LYCA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:33:57 2025 by rpki-client