This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json) Hash identifier: NPTVq05aUOT7rVi9JooqZUV/eDCMJj2wmPna6XdXOLo= Subject key identifier: 14:68:A4:7C:B6:CC:E7:8F:6B:9D:0F:19:8D:03:DA:1B:95:3C:FA:8A Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Certificate serial: 019B2F9EBD6259CC8E68FC9D592BA84B3BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft Manifest number: 085E Signing time: Thu 18 Dec 2025 04:01:30 +0000 Manifest this update: Thu 18 Dec 2025 04:01:30 +0000 Manifest next update: Fri 19 Dec 2025 04:01:30 +0000 Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: bnT+oX0NDWxhjS4xLpvps+FXYr0YBFgnlCeewK4JaPk=) 2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:bd:62:59:cc:8e:68:fc:9d:59:2b:a8:4b:3b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Validity Not Before: Dec 18 04:01:30 2025 GMT Not After : Dec 19 04:01:30 2025 GMT Subject: CN=1468a47cb6cce78f6b9d0f198d03da1b953cfa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:33:b3:12:34:d5:1d:97:f3:b7:29:d1:ac: a2:1d:af:a5:e2:96:93:00:96:56:74:ef:26:2e:e4: 2e:19:e6:ad:97:0d:c7:83:9a:c2:d2:8b:02:05:4d: 33:01:2c:89:7f:c4:d0:de:23:74:f6:33:d9:d9:2c: 63:1d:9d:6f:cd:63:fc:70:74:9c:6e:2e:9a:d3:01: cc:2f:29:9b:e8:d0:ed:a8:57:c5:bc:36:bf:19:00: e5:d4:3a:3a:c0:a7:57:a9:54:f3:9e:5e:69:6e:98: 8a:61:0a:fb:ac:19:97:3c:10:4f:5b:39:06:f3:a8: 73:a0:ec:54:e8:3e:23:90:16:68:c9:56:ed:57:bf: 2f:37:68:73:2d:cd:33:81:01:0b:48:5e:11:ea:91: 2a:56:61:f8:45:3a:d6:b2:f0:8c:cf:39:8e:99:cf: 5a:93:ff:4c:ff:0f:3c:dc:94:cf:83:04:4d:fa:d7: 2f:ad:87:6f:b0:b9:a3:bc:57:09:f7:93:ab:2b:33: 2c:7a:da:47:c2:62:f5:00:2c:81:06:96:a1:fa:c2: 29:b4:14:a7:61:48:4b:a5:d3:df:71:8b:7b:80:91: 6d:c9:98:39:80:25:73:a4:ff:ee:e1:4e:95:05:d7: 72:60:64:6e:56:05:e5:7c:74:8f:c3:1d:82:00:46: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:68:A4:7C:B6:CC:E7:8F:6B:9D:0F:19:8D:03:DA:1B:95:3C:FA:8A X509v3 Authority Key Identifier: keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6e:8d:0c:c6:df:ec:7f:73:f5:87:67:57:b7:ef:db:e3:78: 9a:a4:f8:8b:c4:fc:e5:c4:b8:d3:2d:9b:3e:f1:3b:f0:41:51: f2:15:34:51:15:0a:3f:f3:2b:c1:c8:be:18:d6:a3:65:66:65: d1:05:a9:b3:8b:87:26:b9:f6:24:db:73:d1:8c:f6:e0:1c:1c: d1:88:da:2d:98:ec:73:61:7f:e5:b4:4e:44:3a:d4:ae:f6:ba: 7c:81:42:a5:8a:da:dd:dd:a6:ba:87:01:e3:d8:a3:29:f8:a1: 2a:c6:f7:bb:91:79:86:b6:11:82:1c:3a:f9:ce:28:42:ee:4c: cc:17:d1:e3:78:48:a0:9c:84:71:17:42:34:63:a0:43:0c:9f: 9a:90:67:1c:da:96:97:19:53:e7:87:96:2c:38:2e:b9:a7:3f: 68:e8:0c:ba:60:b9:17:99:5a:41:a7:b4:34:6d:a7:3c:13:10: 91:64:bf:82:16:0a:fd:e9:30:d3:a6:a8:ff:13:ef:59:5d:27: 21:75:a0:74:9d:13:2d:34:c4:90:f5:81:aa:24:1c:46:7b:d5: 13:04:0a:aa:92:51:8c:78:36:89:9c:0d:4e:a1:35:c9:5e:b5: c6:35:e7:10:62:93:a4:a8:b5:16:60:6a:d5:a8:ec:c0:b8:2b: 84:9b:a1:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnr1iWcyOaPydWSuoSzuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4 YWNiZTIwHhcNMjUxMjE4MDQwMTMwWhcNMjUxMjE5MDQwMTMwWjAzMTEwLwYDVQQD EygxNDY4YTQ3Y2I2Y2NlNzhmNmI5ZDBmMTk4ZDAzZGExYjk1M2NmYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplkzsxI01R2X87cp0ayiHa+l4paT AJZWdO8mLuQuGeatlw3Hg5rC0osCBU0zASyJf8TQ3iN09jPZ2SxjHZ1vzWP8cHSc bi6a0wHMLymb6NDtqFfFvDa/GQDl1Do6wKdXqVTznl5pbpiKYQr7rBmXPBBPWzkG 86hzoOxU6D4jkBZoyVbtV78vN2hzLc0zgQELSF4R6pEqVmH4RTrWsvCMzzmOmc9a k/9M/w883JTPgwRN+tcvrYdvsLmjvFcJ95OrKzMsetpHwmL1ACyBBpah+sIptBSn YUhLpdPfcYt7gJFtyZg5gCVzpP/u4U6VBddyYGRuVgXlfHSPwx2CAEaz5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRopHy2zOePa50PGY0D2huVPPqKMB8GA1UdIwQY MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW6NDMbf 7H9z9YdnV7fv2+N4mqT4i8T85cS40y2bPvE78EFR8hU0URUKP/Mrwci+GNajZWZl 0QWps4uHJrn2JNtz0Yz24Bwc0YjaLZjsc2F/5bRORDrUrva6fIFCpYra3d2muocB 49ijKfihKsb3u5F5hrYRghw6+c4oQu5MzBfR43hIoJyEcRdCNGOgQwyfmpBnHNqW lxlT54eWLDguuac/aOgMumC5F5laQae0NG2nPBMQkWS/ghYK/ekw06ao/xPvWV0n IXWgdJ0TLTTEkPWBqiQcRnvVEwQKqpJRjHg2iZwNTqE1yV61xjXnEGKTpKi1FmBq 1ajswLgrhJuh4w== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:52 2025 by rpki-client