This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft File: vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft (raw, json) Hash identifier: Qn7tKfy8YOpzxk+PEiW5VIMKASfH4ChtU+P0yofpM9I= Subject key identifier: 89:FF:62:BD:CA:BB:F3:57:5E:50:8A:B2:C4:A2:3A:C5:F1:17:00:39 Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF Certificate issuer: /CN=bce75c43a41501d35417ae813be29f4227fb2dcf Certificate serial: 019B360EABA52F08BDFF88CCFC2DDF34C224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft Manifest number: 0CDD Signing time: Fri 19 Dec 2025 10:01:29 +0000 Manifest this update: Fri 19 Dec 2025 10:01:29 +0000 Manifest next update: Sat 20 Dec 2025 10:01:29 +0000 Files and hashes: 1: 3YOlf0iPPEKZOejM5ERFeNy2UUI.roa (hash: 7dF2XTmUFq3q1B6JF9m1PhiG/XLJRsnEpYYup465d6M=) 2: vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl (hash: dMstKMNY+wZn2oi8zaZReQo/DlyZFeVq0sDQNb5VchY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:ab:a5:2f:08:bd:ff:88:cc:fc:2d:df:34:c2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf Validity Not Before: Dec 19 10:01:29 2025 GMT Not After : Dec 20 10:01:29 2025 GMT Subject: CN=89ff62bdcabbf3575e508ab2c4a23ac5f1170039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:90:29:e4:0d:40:df:c8:a0:c4:c7:c1:73: 99:b9:8a:eb:b4:70:b5:ea:1f:c6:60:04:95:13:67: 40:cd:34:21:96:9a:5f:e1:48:0c:f5:bb:65:5c:ae: 06:6b:38:9f:0d:c3:63:7a:60:69:34:be:12:16:2e: f4:44:eb:71:38:0e:44:55:f0:bf:d3:9c:c4:e0:80: dd:61:69:bb:09:9f:c1:6e:f6:81:75:97:62:4b:aa: 19:02:97:a7:4f:49:08:73:80:0a:ea:7d:0e:e2:fa: b6:f0:78:3e:ab:70:de:57:4f:80:81:b3:e5:de:d0: 74:06:63:12:3a:07:11:f6:df:22:34:66:1a:8e:aa: 94:3b:46:23:2e:28:77:51:cb:47:e5:bb:85:bf:7d: 8b:58:e5:8f:fc:4d:b8:ec:39:f6:58:ee:79:62:20: 7b:d5:08:14:7a:6f:6a:07:01:ed:7b:54:7a:17:34: 22:02:fe:ef:31:63:8b:e4:4a:fa:60:ef:3b:2b:9d: 46:ed:d1:d8:96:76:d2:b7:09:19:32:f2:5f:db:7c: e9:b6:66:70:86:93:a1:3c:d4:2f:d6:c4:af:4b:58: a7:19:6e:09:61:68:29:b3:9a:cd:c9:49:64:04:12: 61:10:6a:e7:94:3f:bf:0b:f7:3b:a6:b9:3b:3b:d4: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:62:BD:CA:BB:F3:57:5E:50:8A:B2:C4:A2:3A:C5:F1:17:00:39 X509v3 Authority Key Identifier: keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:97:e4:ea:1c:4e:44:c3:b3:42:58:8a:ed:d7:4e:a0:39:4f: 07:7b:85:4c:1a:f6:8d:21:6b:eb:82:fa:d8:94:fd:92:a3:1e: 37:89:88:1c:09:55:cc:d3:0a:2d:56:96:b4:a5:8a:6b:9c:9a: 2f:99:9d:84:8d:7b:ad:f4:45:43:73:a8:fa:58:b8:9d:bd:8e: b9:56:ab:e5:89:66:ef:07:47:c4:43:51:68:5a:df:a8:05:7c: c8:ea:97:12:f2:4f:1f:90:0d:50:3b:d5:75:bf:f8:c5:41:13: c1:05:c5:79:55:39:a6:7f:ad:33:f2:10:0c:59:5b:27:d7:a7: 50:5f:34:e4:82:8d:d2:8b:3b:7f:06:7b:41:70:ad:95:1c:73: cb:1e:5f:73:37:d7:d8:3f:6b:1f:b7:41:e9:dd:df:2f:d5:69: d5:51:1f:dc:44:4a:5c:86:69:a2:fc:17:fc:b5:d4:6b:9a:09: 20:1f:23:0f:e9:2c:ac:b9:2f:83:d7:79:91:d1:d2:0e:8b:0c: 05:ec:04:47:1e:88:0a:4d:cb:6e:4c:6c:d7:c6:af:94:09:b6: 73:de:4c:42:a2:13:21:b6:89:2e:cd:96:9a:36:7d:cb:bb:b5: e3:e5:71:fd:3a:c6:d5:85:df:00:7f:5d:d9:f1:bb:4a:91:fc: 82:83:d7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DqulLwi9/4jM/C3fNMIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZTc1YzQzYTQxNTAxZDM1NDE3YWU4MTNiZTI5ZjQyMjdm YjJkY2YwHhcNMjUxMjE5MTAwMTI5WhcNMjUxMjIwMTAwMTI5WjAzMTEwLwYDVQQD Eyg4OWZmNjJiZGNhYmJmMzU3NWU1MDhhYjJjNGEyM2FjNWYxMTcwMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq22QKeQNQN/IoMTHwXOZuYrrtHC1 6h/GYASVE2dAzTQhlppf4UgM9btlXK4GazifDcNjemBpNL4SFi70ROtxOA5EVfC/ 05zE4IDdYWm7CZ/BbvaBdZdiS6oZApenT0kIc4AK6n0O4vq28Hg+q3DeV0+AgbPl 3tB0BmMSOgcR9t8iNGYajqqUO0YjLih3UctH5buFv32LWOWP/E247Dn2WO55YiB7 1QgUem9qBwHte1R6FzQiAv7vMWOL5Er6YO87K51G7dHYlnbStwkZMvJf23zptmZw hpOhPNQv1sSvS1inGW4JYWgps5rNyUlkBBJhEGrnlD+/C/c7prk7O9RewQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn/Yr3Ku/NXXlCKssSiOsXxFwA5MB8GA1UdIwQY MBaAFLznXEOkFQHTVBeugTvin0In+y3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jYTdjNGEtZjk0Ni00OWU2LTlmNDEt MDJmOTJhYTRlMmEwLzEvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jYTdjNGEtZjk0Ni00OWU2LTlmNDEtMDJmOTJhYTRlMmEw LzEvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzJfk6hxO RMOzQliK7ddOoDlPB3uFTBr2jSFr64L62JT9kqMeN4mIHAlVzNMKLVaWtKWKa5ya L5mdhI17rfRFQ3Oo+li4nb2OuVar5Ylm7wdHxENRaFrfqAV8yOqXEvJPH5ANUDvV db/4xUETwQXFeVU5pn+tM/IQDFlbJ9enUF805IKN0os7fwZ7QXCtlRxzyx5fczfX 2D9rH7dB6d3fL9Vp1VEf3ERKXIZpovwX/LXUa5oJIB8jD+ksrLkvg9d5kdHSDosM BewERx6ICk3Lbkxs18avlAm2c95MQqITIbaJLs2WmjZ9y7u14+Vx/TrG1YXfAH9d 2fG7SpH8goPX5w== -----END CERTIFICATE-----Generated at Fri Dec 19 13:30:13 2025 by rpki-client