This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft File: OOdr5zhCITzgy8kz0aN0g1fyKD8.mft (raw, json) Hash identifier: z4saCDbMVkvHVj1g5L/t/uGt5e2Lg1uSQPxPfXPWdOo= Subject key identifier: BD:37:61:91:CF:3F:3E:4E:4F:C4:B6:1B:F6:4D:C0:C7:30:C2:9A:AE Authority key identifier: 38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F Certificate issuer: /CN=38e76be73842213ce0cbc933d1a3748357f2283f Certificate serial: 019AF2E4317F0A3298E78E469D919AC79C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft Manifest number: 017D Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: OOdr5zhCITzgy8kz0aN0g1fyKD8.crl (hash: 0u7B7Fj6za1qolgdCB0We4jsKniVwrMhJoOI7G6GYfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:31:7f:0a:32:98:e7:8e:46:9d:91:9a:c7:9c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e76be73842213ce0cbc933d1a3748357f2283f Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=bd376191cf3f3e4e4fc4b61bf64dc0c730c29aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:45:75:0e:d3:dd:c5:2f:5e:1f:31:26:b9: e9:0b:3a:77:1d:46:e0:df:f1:ee:09:23:cd:00:0e: ab:63:9b:36:09:cf:0a:35:eb:d3:5d:dc:95:da:c7: e7:1d:9a:37:aa:99:1a:07:eb:d0:ec:58:38:b6:4a: 39:59:67:dc:d6:11:68:46:65:7e:1f:0a:8d:7b:53: e9:97:47:c7:3f:48:e4:ba:e3:71:73:6e:b5:2e:75: 35:61:fa:bb:5a:0e:6e:62:13:95:47:04:04:9f:56: 35:7a:19:45:f7:c4:ab:4a:11:07:c3:e9:56:1a:59: 68:a1:67:d6:2e:44:91:07:46:ae:1c:e7:1a:e2:94: f9:df:ad:98:d7:48:12:f3:9a:6f:6c:15:a7:62:6a: de:58:be:0d:8f:5b:00:78:d1:04:75:96:a6:26:6c: 46:9a:5d:46:a9:1c:c3:6c:8a:ba:d0:68:4a:45:52: 0d:c9:b0:15:3b:b5:85:df:f1:6d:6e:bc:a0:8b:2f: 8b:5e:ce:b2:57:d0:7e:a6:41:6b:09:89:bb:5b:f8: 4f:a5:06:26:a3:a6:3e:71:9d:10:06:fd:5a:62:69: ff:60:10:65:bc:40:22:bb:d7:08:48:23:c7:18:a3: 11:80:71:27:fe:69:a5:93:18:ea:f4:b6:55:29:94: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:61:91:CF:3F:3E:4E:4F:C4:B6:1B:F6:4D:C0:C7:30:C2:9A:AE X509v3 Authority Key Identifier: keyid:38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3f:c4:db:c9:63:dd:0a:ea:86:c0:c2:ea:2a:28:a9:d0:05: a8:1f:73:82:7f:05:bf:4f:88:b7:98:5b:fb:2d:1d:fd:78:91: a5:6b:7d:9c:c9:94:74:f6:db:d2:fe:9b:cd:e9:2b:2a:2b:cb: 19:a6:84:21:4d:35:99:0a:62:94:e7:bb:41:11:2f:df:37:95: 42:47:ae:ef:75:ee:7b:a5:d2:fd:1f:80:cb:59:a1:c0:78:2b: 86:b2:6e:28:d5:69:b3:d6:c6:99:87:5e:7e:cd:38:5e:98:e8: 35:04:04:71:6e:66:6c:a8:3e:9c:7c:4c:d7:ef:d8:a8:73:1c: 89:39:66:b6:ad:e9:76:5d:4e:86:c6:0e:40:a1:31:8e:2c:27: df:f1:64:3d:a2:57:ee:1c:35:8c:84:86:d9:7a:36:30:40:15: 97:be:c6:2d:ec:94:3c:00:f8:c7:6e:d2:b7:87:36:d6:e4:50: 9e:dd:ae:ae:45:0b:f9:c7:e4:8f:e2:d8:9d:dc:05:eb:e1:94: b7:46:55:8e:18:59:33:2e:2e:f1:07:9c:08:32:d7:45:dc:9b: 10:ec:e0:37:6b:41:c6:f6:ee:10:eb:54:51:e3:ad:3a:84:a0: f5:79:29:4e:06:22:9e:5d:6c:d2:30:dc:46:bd:d8:55:27:bc: 28:50:6e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DF/CjKY545GnZGax5xCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZTc2YmU3Mzg0MjIxM2NlMGNiYzkzM2QxYTM3NDgzNTdm MjI4M2YwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD EyhiZDM3NjE5MWNmM2YzZTRlNGZjNGI2MWJmNjRkYzBjNzMwYzI5YWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYVFdQ7T3cUvXh8xJrnpCzp3HUbg 3/HuCSPNAA6rY5s2Cc8KNevTXdyV2sfnHZo3qpkaB+vQ7Fg4tko5WWfc1hFoRmV+ HwqNe1Ppl0fHP0jkuuNxc261LnU1Yfq7Wg5uYhOVRwQEn1Y1ehlF98SrShEHw+lW GllooWfWLkSRB0auHOca4pT5362Y10gS85pvbBWnYmreWL4Nj1sAeNEEdZamJmxG ml1GqRzDbIq60GhKRVINybAVO7WF3/Ftbrygiy+LXs6yV9B+pkFrCYm7W/hPpQYm o6Y+cZ0QBv1aYmn/YBBlvEAiu9cISCPHGKMRgHEn/mmlkxjq9LZVKZQghQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL03YZHPPz5OT8S2G/ZNwMcwwpquMB8GA1UdIwQY MBaAFDjna+c4QiE84MvJM9GjdINX8ig/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09kcjV6aENJVHpneThrejBhTjBnMWZ5S0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yN2M4NmMtYTVhZC00MjUzLTgxZGMt MTU1MjZiZjdmNGViLzEvT09kcjV6aENJVHpneThrejBhTjBnMWZ5S0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yN2M4NmMtYTVhZC00MjUzLTgxZGMtMTU1MjZiZjdmNGVi LzEvT09kcjV6aENJVHpneThrejBhTjBnMWZ5S0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqT/E28lj 3QrqhsDC6iooqdAFqB9zgn8Fv0+It5hb+y0d/XiRpWt9nMmUdPbb0v6bzekrKivL GaaEIU01mQpilOe7QREv3zeVQkeu73Xue6XS/R+Ay1mhwHgrhrJuKNVps9bGmYde fs04XpjoNQQEcW5mbKg+nHxM1+/YqHMciTlmtq3pdl1OhsYOQKExjiwn3/FkPaJX 7hw1jISG2Xo2MEAVl77GLeyUPAD4x27St4c21uRQnt2urkUL+cfkj+LYndwF6+GU t0ZVjhhZMy4u8QecCDLXRdybEOzgN2tBxvbuEOtUUeOtOoSg9XkpTgYinl1s0jDc Rr3YVSe8KFBuTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:11 2025 by rpki-client