This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json) Hash identifier: bbte7TakqMbBk3xk48K8zxJSxgnDPxwuyXKPX8nLRhk= Subject key identifier: D9:A1:0A:E7:A6:1D:6C:B5:21:A0:05:48:2A:2A:D8:5F:E5:39:5E:E7 Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Certificate serial: 019AF12D2A5F50FCB9903800F1D9FB81AABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft Manifest number: 0B06 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: Q5YoCzDcevruUmpVlvO+WotAXYmreKbtxv2QrtcUne8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2a:5f:50:fc:b9:90:38:00:f1:d9:fb:81:aa:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=d9a10ae7a61d6cb521a005482a2ad85fe5395ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:3b:4c:ab:1a:95:b2:3e:c2:27:c5:58:a0: e1:ee:06:40:cb:4f:88:d2:6d:dd:89:83:d9:08:18: f6:ae:cb:2c:02:7c:9c:5e:c6:a5:3d:4c:bc:36:37: c9:0a:78:df:01:a7:98:16:fc:d0:eb:74:e2:3e:f5: b0:53:7a:88:9f:a5:8d:21:c0:46:68:f3:1b:71:b0: a2:94:ce:8e:79:bd:60:1f:9a:be:35:29:e9:80:a7: d7:e2:09:86:c1:c6:3b:71:43:ed:a0:15:bf:c2:0c: 0e:d9:a6:e6:fc:ae:00:03:c9:08:bf:8c:53:24:49: d6:6b:5f:76:ac:d5:93:2d:47:de:b2:2f:3c:ee:91: 45:c5:53:0e:36:93:64:4e:da:75:f8:6d:3f:25:c9: 01:3f:12:2f:ad:61:a2:55:03:52:5a:0d:0b:62:74: f9:d0:e9:80:37:30:90:df:4a:fc:2c:54:97:2b:03: a1:50:27:22:07:26:d9:a5:ec:7c:71:11:dc:cf:18: 15:a4:41:b9:54:f2:8f:47:83:f9:a4:8f:42:30:28: 8b:2a:2e:8d:fd:09:63:ca:e3:b2:89:2f:0e:c4:bd: e9:dc:28:04:69:b5:11:25:8a:1d:44:ae:2f:8f:0f: 7b:ee:95:79:a3:74:f1:b9:99:60:23:54:de:9d:51: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:0A:E7:A6:1D:6C:B5:21:A0:05:48:2A:2A:D8:5F:E5:39:5E:E7 X509v3 Authority Key Identifier: keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f3:27:fd:e6:18:37:b8:76:45:33:49:e5:0f:f0:e8:9a:bc: 2c:39:51:f4:60:47:02:a7:33:36:d8:01:6a:db:17:96:a9:fb: 8a:d6:db:27:9f:0f:10:60:93:96:56:af:4b:c0:1a:cd:9f:3c: cc:42:01:b0:6b:f7:0f:44:01:c9:76:90:c9:d4:dc:7e:d9:e5: 14:67:05:9e:c6:8f:8a:47:59:c5:e2:2b:ec:26:e4:cd:e8:d6: b2:6a:b2:16:ee:e5:10:df:a6:5f:7d:e5:88:bd:48:af:63:08: b0:5f:03:f2:f4:14:50:b5:65:d4:34:80:38:81:4e:5b:c0:8e: ef:e3:ce:89:46:a3:ed:25:c6:af:37:36:b6:f7:5a:04:41:d0: 06:ab:53:9a:9d:59:5b:fa:32:29:fa:e7:08:9b:00:ea:bc:bb: ce:91:5b:b2:fc:ce:b0:a4:e1:36:64:39:c8:9c:51:dd:a3:7b: 26:2f:00:85:c0:53:c3:aa:72:39:9e:dd:d4:51:ea:a1:02:55: ff:c5:bb:b7:7e:0c:d5:73:f8:33:db:38:54:fb:d2:a4:73:d7: a8:66:16:b2:1c:df:ec:03:75:6b:2f:e8:e1:73:a0:8b:76:65: 80:48:e8:f0:ee:23:9c:df:96:e2:78:d5:0a:cd:00:42:fb:6a: 22:40:1f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSpfUPy5kDgA8dn7gaq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzQwZmY2NjlhM2FkYzlkNjY5NjEzNWM4ZDcxZjZkZjVl YWMyN2IwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EyhkOWExMGFlN2E2MWQ2Y2I1MjFhMDA1NDgyYTJhZDg1ZmU1Mzk1ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywM7TKsalbI+wifFWKDh7gZAy0+I 0m3diYPZCBj2rsssAnycXsalPUy8NjfJCnjfAaeYFvzQ63TiPvWwU3qIn6WNIcBG aPMbcbCilM6Oeb1gH5q+NSnpgKfX4gmGwcY7cUPtoBW/wgwO2abm/K4AA8kIv4xT JEnWa192rNWTLUfesi887pFFxVMONpNkTtp1+G0/JckBPxIvrWGiVQNSWg0LYnT5 0OmANzCQ30r8LFSXKwOhUCciBybZpex8cRHczxgVpEG5VPKPR4P5pI9CMCiLKi6N /QljyuOyiS8OxL3p3CgEabURJYodRK4vjw977pV5o3TxuZlgI1TenVG3OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmhCuemHWy1IaAFSCoq2F/lOV7nMB8GA1UdIwQY MBaAFDg0D/Zpo63J1mlhNcjXH2316sJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2Mt Mjg0NmVhYWRkZTY3LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2MtMjg0NmVhYWRkZTY3 LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPMn/eYY N7h2RTNJ5Q/w6Jq8LDlR9GBHAqczNtgBatsXlqn7itbbJ58PEGCTllavS8AazZ88 zEIBsGv3D0QByXaQydTcftnlFGcFnsaPikdZxeIr7CbkzejWsmqyFu7lEN+mX33l iL1Ir2MIsF8D8vQUULVl1DSAOIFOW8CO7+POiUaj7SXGrzc2tvdaBEHQBqtTmp1Z W/oyKfrnCJsA6ry7zpFbsvzOsKThNmQ5yJxR3aN7Ji8AhcBTw6pyOZ7d1FHqoQJV /8W7t34M1XP4M9s4VPvSpHPXqGYWshzf7AN1ay/o4XOgi3ZlgEjo8O4jnN+W4njV Cs0AQvtqIkAfVA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:20 2025 by rpki-client