This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft File: vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft (raw, json) Hash identifier: bu9MkWkp45ASLd687reYaVrRTiwoOZvHu0X/ZNpGtSc= Subject key identifier: E5:4C:CE:E0:46:5E:67:AF:49:0D:81:3D:94:C2:23:A3:03:5F:69:46 Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF Certificate issuer: /CN=bce75c43a41501d35417ae813be29f4227fb2dcf Certificate serial: 019AF653E15FA6236658DFA428D1452D9073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft Manifest number: 0CBC Signing time: Sun 07 Dec 2025 01:01:23 +0000 Manifest this update: Sun 07 Dec 2025 01:01:23 +0000 Manifest next update: Mon 08 Dec 2025 01:01:23 +0000 Files and hashes: 1: 3YOlf0iPPEKZOejM5ERFeNy2UUI.roa (hash: 7dF2XTmUFq3q1B6JF9m1PhiG/XLJRsnEpYYup465d6M=) 2: vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl (hash: ZA0U3dDF9Jupza4Yh/r5cGU8vg8rrSs8URPJHtEmqeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:e1:5f:a6:23:66:58:df:a4:28:d1:45:2d:90:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf Validity Not Before: Dec 7 01:01:23 2025 GMT Not After : Dec 8 01:01:23 2025 GMT Subject: CN=e54ccee0465e67af490d813d94c223a3035f6946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:d7:58:fc:f2:32:0f:b9:ef:7b:7b:04:72: 1b:17:fa:16:8c:a8:69:8c:8c:f9:b6:b6:0f:65:6d: e9:48:85:8e:50:25:41:b1:91:e7:c7:5a:3c:1e:b8: 9c:40:7a:43:54:52:8e:a4:39:7c:0d:83:79:a8:48: 97:5d:7c:a3:a9:b2:9a:74:b0:da:a8:18:b9:aa:1f: 3d:3f:ed:d8:3e:8e:aa:65:8d:45:86:8f:14:d7:e2: 4e:7d:2e:74:8d:b1:24:bf:6b:38:d8:b0:60:ce:63: 7e:1f:ba:c7:08:98:68:0c:aa:df:d4:25:bd:29:6a: fe:c4:fe:29:25:dc:b8:df:e0:00:d4:f9:5d:65:d9: 4e:1e:22:2a:80:f1:3a:f9:bf:19:c1:66:5e:df:7a: 04:1b:ae:b3:de:09:31:96:39:37:b4:ff:e9:2a:92: a0:ec:86:a3:2a:fc:a2:aa:8e:0a:93:83:f2:97:67: d5:a5:f7:ff:8f:d2:a6:9a:70:0b:58:d8:bd:c8:5f: fa:cb:1a:cb:c0:c1:20:a0:46:bf:57:5b:5f:98:8e: 51:38:c4:26:14:f2:79:58:c2:f0:e8:37:4d:be:ec: 16:4d:95:e9:63:9b:83:0b:26:20:e8:58:f7:62:91: db:37:99:eb:16:35:8d:1c:02:3f:56:10:de:93:12: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4C:CE:E0:46:5E:67:AF:49:0D:81:3D:94:C2:23:A3:03:5F:69:46 X509v3 Authority Key Identifier: keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:19:5e:1f:fe:b2:a1:b8:0c:8f:48:f3:26:ec:e9:b0:2f:da: 3e:4d:42:f1:be:6f:a6:d2:06:f2:dc:73:67:33:b5:92:d7:22: d1:55:cf:5a:5b:02:63:c6:4a:8d:47:45:87:e3:8d:51:27:4b: 51:27:94:9f:e7:c8:00:14:df:48:ef:13:37:37:83:bf:8b:5d: 33:ad:2b:2d:bf:74:06:ea:a8:d3:87:ad:a2:e1:0b:0f:2f:16: e7:3c:a2:1a:f7:24:0e:d7:6c:52:97:04:d2:fe:bf:c9:b3:06: 13:05:3e:d7:7a:10:c2:0e:fc:27:48:6d:0e:b3:ef:80:70:2c: e9:ae:b0:09:17:5b:85:d1:f9:0f:0a:8c:a6:42:b2:a1:89:93: 5d:35:56:33:f4:ea:39:a7:42:03:0f:a5:02:8b:d7:1d:7a:33: d7:2d:70:08:2b:8a:5c:27:03:9e:1b:07:d1:05:d3:b3:09:b2: 32:4e:1b:f2:f1:54:30:3f:45:e3:5b:f3:a5:83:71:72:df:64: 0d:3d:1c:db:ed:50:4d:0a:ab:ec:6f:4b:67:19:f4:fc:8d:92: 41:86:4c:e4:86:b7:eb:f4:81:24:b9:66:eb:98:66:56:d9:0c: de:b8:2b:6b:1e:6b:25:41:48:96:ab:97:c7:09:b5:fa:8f:8d: 99:53:80:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U+FfpiNmWN+kKNFFLZBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZTc1YzQzYTQxNTAxZDM1NDE3YWU4MTNiZTI5ZjQyMjdm YjJkY2YwHhcNMjUxMjA3MDEwMTIzWhcNMjUxMjA4MDEwMTIzWjAzMTEwLwYDVQQD EyhlNTRjY2VlMDQ2NWU2N2FmNDkwZDgxM2Q5NGMyMjNhMzAzNWY2OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznHXWPzyMg+573t7BHIbF/oWjKhp jIz5trYPZW3pSIWOUCVBsZHnx1o8HricQHpDVFKOpDl8DYN5qEiXXXyjqbKadLDa qBi5qh89P+3YPo6qZY1Fho8U1+JOfS50jbEkv2s42LBgzmN+H7rHCJhoDKrf1CW9 KWr+xP4pJdy43+AA1PldZdlOHiIqgPE6+b8ZwWZe33oEG66z3gkxljk3tP/pKpKg 7IajKvyiqo4Kk4Pyl2fVpff/j9KmmnALWNi9yF/6yxrLwMEgoEa/V1tfmI5ROMQm FPJ5WMLw6DdNvuwWTZXpY5uDCyYg6Fj3YpHbN5nrFjWNHAI/VhDekxLopQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVMzuBGXmevSQ2BPZTCI6MDX2lGMB8GA1UdIwQY MBaAFLznXEOkFQHTVBeugTvin0In+y3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jYTdjNGEtZjk0Ni00OWU2LTlmNDEt MDJmOTJhYTRlMmEwLzEvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jYTdjNGEtZjk0Ni00OWU2LTlmNDEtMDJmOTJhYTRlMmEw LzEvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBleH/6y obgMj0jzJuzpsC/aPk1C8b5vptIG8txzZzO1ktci0VXPWlsCY8ZKjUdFh+ONUSdL USeUn+fIABTfSO8TNzeDv4tdM60rLb90Buqo04etouELDy8W5zyiGvckDtdsUpcE 0v6/ybMGEwU+13oQwg78J0htDrPvgHAs6a6wCRdbhdH5DwqMpkKyoYmTXTVWM/Tq OadCAw+lAovXHXoz1y1wCCuKXCcDnhsH0QXTswmyMk4b8vFUMD9F41vzpYNxct9k DT0c2+1QTQqr7G9LZxn0/I2SQYZM5Ia36/SBJLlm65hmVtkM3rgrax5rJUFIlquX xwm1+o+NmVOA+g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:14:47 2025 by rpki-client