This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json) Hash identifier: 4PQT94h9VQYx5fO3Q/wpMIGxS0w9YkxbnusR4/FdqQM= Subject key identifier: 69:D9:F6:90:BA:6A:FB:76:91:51:B9:56:2A:04:E9:4C:A5:15:08:00 Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Certificate serial: 019AF0886C14138361EDCC6FD26A7861FD50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:03 +0000 Manifest this update: Fri 05 Dec 2025 22:01:03 +0000 Manifest next update: Sat 06 Dec 2025 22:01:03 +0000 Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: hNUDocZ9U7mPslNBRoJuVHCAblCU0tGhC+ZGBwrtCcM=) 2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6c:14:13:83:61:ed:cc:6f:d2:6a:78:61:fd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Validity Not Before: Dec 5 22:01:03 2025 GMT Not After : Dec 6 22:01:03 2025 GMT Subject: CN=69d9f690ba6afb769151b9562a04e94ca5150800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:33:e1:0a:0f:0c:6c:1a:f1:1b:ae:c1:46: 9f:67:0b:9b:55:99:ef:a5:ce:a3:9c:21:f3:9b:d7: 02:00:b7:89:8c:4a:8a:c9:c6:fe:e5:38:ff:f4:01: 79:9d:a2:73:fd:ce:ed:eb:56:a5:75:52:5a:3f:5e: ce:5a:5d:68:11:07:46:53:15:eb:32:40:d6:9e:f9: f3:b3:fe:bc:ca:f7:99:04:cc:57:b8:7f:ce:b0:9e: 65:04:09:9f:6c:7b:43:ad:7c:0f:e2:d5:67:14:c9: e0:94:2a:40:01:12:e5:20:ea:d9:77:db:a1:75:0e: 18:58:2d:b3:c0:bd:c8:75:03:17:c8:a7:c9:b4:a8: 99:f9:64:60:d0:08:a5:3d:57:58:7e:48:65:d4:ea: 6d:17:c7:1a:37:26:e7:de:08:76:6c:de:3f:20:b4: 7e:68:ae:f8:ac:80:89:3c:e7:59:0c:40:ef:83:a3: d0:08:72:0d:36:69:54:56:5a:c0:54:df:8b:9d:e0: e5:ab:14:64:10:5c:c9:42:73:20:ce:38:52:f5:53: 72:76:74:52:0c:f4:73:42:0c:02:68:f6:66:1c:73: 40:3e:6b:9c:47:f9:a6:a7:68:73:02:17:63:fa:d9: 0d:db:43:b9:fa:e2:c9:2b:9a:c2:0b:93:36:f1:b1: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:F6:90:BA:6A:FB:76:91:51:B9:56:2A:04:E9:4C:A5:15:08:00 X509v3 Authority Key Identifier: keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:eb:a8:de:dc:fd:23:31:aa:1a:26:e4:d0:75:86:00:bf:59: 2d:1b:0b:80:c2:db:d9:20:9d:fd:ae:83:6e:50:3f:ab:f9:68: 81:b6:ec:52:8e:96:cc:05:81:80:73:1f:4e:2d:5e:cb:14:b6: 0d:72:90:a1:ce:db:d0:2e:bf:80:d6:d5:7f:e1:93:96:3f:12: 6d:0b:a9:a9:ca:cc:8e:d0:3b:be:82:eb:64:4f:c2:34:c5:fc: 4a:e6:54:df:58:7d:f5:64:bd:4c:19:e9:40:b6:35:a4:94:cd: aa:c9:3a:fe:b1:23:9a:2b:e2:02:39:42:78:56:0d:ed:f4:1b: a3:01:72:8e:8c:7e:2d:d8:e5:78:6e:8d:8c:11:9d:2b:9f:df: 39:fb:06:1a:36:43:00:94:49:e7:03:83:33:da:c4:15:e9:b5: ab:36:29:aa:8d:a9:da:13:b6:cf:e6:96:6f:04:75:2b:06:50: c2:88:c3:12:c7:a6:6d:3d:a9:21:ba:5b:aa:78:a2:d5:29:3f: 62:80:f0:6a:27:36:8a:91:a3:28:58:43:c9:7a:1e:03:17:58: 44:89:22:55:11:1e:96:a0:31:28:83:60:01:23:5f:50:26:57: e7:51:b3:be:e8:15:8d:7d:c2:98:6a:7f:9e:4a:91:24:2a:65: ad:77:1c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGwUE4Nh7cxv0mp4Yf1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl NDM3OTMwHhcNMjUxMjA1MjIwMTAzWhcNMjUxMjA2MjIwMTAzWjAzMTEwLwYDVQQD Eyg2OWQ5ZjY5MGJhNmFmYjc2OTE1MWI5NTYyYTA0ZTk0Y2E1MTUwODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E4z4QoPDGwa8RuuwUafZwubVZnv pc6jnCHzm9cCALeJjEqKycb+5Tj/9AF5naJz/c7t61aldVJaP17OWl1oEQdGUxXr MkDWnvnzs/68yveZBMxXuH/OsJ5lBAmfbHtDrXwP4tVnFMnglCpAARLlIOrZd9uh dQ4YWC2zwL3IdQMXyKfJtKiZ+WRg0AilPVdYfkhl1OptF8caNybn3gh2bN4/ILR+ aK74rICJPOdZDEDvg6PQCHINNmlUVlrAVN+LneDlqxRkEFzJQnMgzjhS9VNydnRS DPRzQgwCaPZmHHNAPmucR/mmp2hzAhdj+tkN20O5+uLJK5rCC5M28bGvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnZ9pC6avt2kVG5VioE6UylFQgAMB8GA1UdIwQY MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4 LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuuo3tz9 IzGqGibk0HWGAL9ZLRsLgMLb2SCd/a6DblA/q/logbbsUo6WzAWBgHMfTi1eyxS2 DXKQoc7b0C6/gNbVf+GTlj8SbQupqcrMjtA7voLrZE/CNMX8SuZU31h99WS9TBnp QLY1pJTNqsk6/rEjmiviAjlCeFYN7fQbowFyjox+LdjleG6NjBGdK5/fOfsGGjZD AJRJ5wODM9rEFem1qzYpqo2p2hO2z+aWbwR1KwZQwojDEsembT2pIbpbqnii1Sk/ YoDwaic2ipGjKFhDyXoeAxdYRIkiVREelqAxKINgASNfUCZX51GzvugVjX3CmGp/ nkqRJCplrXccPA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:24 2025 by rpki-client