This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json) Hash identifier: 9/5kTLav16xhiivVNnAQcaMo/zB62/x2CVAH9RDQB2c= Subject key identifier: D1:9D:49:C8:60:25:1B:24:65:5D:F2:E3:C8:28:96:EA:31:CB:6A:54 Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Certificate serial: 019B3757E4498346B4C7A3A68401E6E1AA87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft Manifest number: 0862 Signing time: Fri 19 Dec 2025 16:01:05 +0000 Manifest this update: Fri 19 Dec 2025 16:01:05 +0000 Manifest next update: Sat 20 Dec 2025 16:01:05 +0000 Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: U/j7kj3/KhaRo/1zd98sPzMALq74aUcD2Unwd8guRj4=) 2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:e4:49:83:46:b4:c7:a3:a6:84:01:e6:e1:aa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Validity Not Before: Dec 19 16:01:05 2025 GMT Not After : Dec 20 16:01:05 2025 GMT Subject: CN=d19d49c860251b24655df2e3c82896ea31cb6a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:0a:eb:dd:4b:ad:d1:10:90:b2:38:38:6e: 99:85:d8:b0:aa:00:e3:11:94:b3:09:f2:51:b8:b1: 2d:da:93:c5:d0:d4:f6:63:c3:bb:fa:a2:e8:36:40: d1:cb:e6:b3:7d:2b:ff:1a:75:81:b1:af:a8:b9:56: a9:23:31:72:26:f9:fb:b6:dd:6c:8f:be:01:cf:e6: 68:39:e8:c1:64:c9:9f:75:01:18:d4:01:b0:09:cc: bb:65:90:be:bd:1a:9f:30:7a:3c:2d:53:43:73:d6: 7b:72:8d:ee:04:ff:bb:fe:87:ac:c4:0c:9a:68:ce: 17:97:fe:91:04:41:ca:44:37:dc:ff:a7:83:4e:1b: 81:6a:8b:4b:49:31:ff:5e:a1:fa:28:9d:dc:58:0b: 57:44:ec:81:93:e9:21:2a:5f:1b:f8:2d:83:b4:d5: 0c:8a:aa:51:96:b0:16:07:41:8e:47:f4:85:1c:f3: 20:6f:e4:e6:bd:6e:e0:b9:02:ca:d4:45:17:45:86: 06:7c:d6:78:52:b9:0d:6a:fa:72:0d:97:16:9d:43: 10:ec:44:c6:19:7d:ab:97:05:7b:e7:bb:00:ba:c2: 28:a2:1c:5b:32:48:cd:86:3f:21:2f:30:1e:ff:86: 1e:e8:d5:5f:ef:52:b2:0e:29:a3:58:9f:cd:e5:23: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9D:49:C8:60:25:1B:24:65:5D:F2:E3:C8:28:96:EA:31:CB:6A:54 X509v3 Authority Key Identifier: keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:6e:b3:5b:dd:c1:d4:6f:41:05:73:99:86:1f:cc:3d:3f:02: ce:08:5f:7c:9d:e5:32:76:9e:de:df:81:f6:68:5b:3a:dd:6b: 92:a7:bc:d8:6d:c1:54:8f:24:a5:1c:60:a7:66:4f:b5:58:a8: 69:45:29:68:17:89:5e:73:0c:32:ac:cd:6c:02:cc:ac:34:1a: d7:4d:be:06:ba:33:49:c8:21:f1:b2:08:ce:4b:fd:52:03:9b: 5c:51:17:f4:40:dd:62:c1:98:30:a9:84:54:0a:97:89:4c:42: 8d:a1:c3:99:87:c4:f5:d3:93:a6:81:25:9b:b0:20:d0:87:a1: 53:85:87:8a:a6:5b:db:a9:88:28:36:51:de:f5:ee:1f:4d:a0: 21:06:0a:00:f1:3e:9b:a3:78:b7:25:7a:74:e3:7a:52:b7:55: 44:13:d8:7f:3d:9c:ab:d3:57:7e:22:44:c2:27:93:1c:4b:68: ef:af:3a:02:0a:dc:18:d1:9a:63:db:0f:76:03:e3:30:d3:03: 5d:94:9d:35:4a:73:63:e6:da:24:88:a2:01:da:dc:ab:37:04: f0:ac:88:f0:a7:24:5d:92:4c:46:45:cc:8b:9c:ba:8f:c2:f3: 0b:5a:9a:f1:34:7a:f5:37:4a:c1:d0:3d:cf:26:85:09:ee:c5: 48:bf:26:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+RJg0a0x6OmhAHm4aqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4 YWNiZTIwHhcNMjUxMjE5MTYwMTA1WhcNMjUxMjIwMTYwMTA1WjAzMTEwLwYDVQQD EyhkMTlkNDljODYwMjUxYjI0NjU1ZGYyZTNjODI4OTZlYTMxY2I2YTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HsK691LrdEQkLI4OG6ZhdiwqgDj EZSzCfJRuLEt2pPF0NT2Y8O7+qLoNkDRy+azfSv/GnWBsa+ouVapIzFyJvn7tt1s j74Bz+ZoOejBZMmfdQEY1AGwCcy7ZZC+vRqfMHo8LVNDc9Z7co3uBP+7/oesxAya aM4Xl/6RBEHKRDfc/6eDThuBaotLSTH/XqH6KJ3cWAtXROyBk+khKl8b+C2DtNUM iqpRlrAWB0GOR/SFHPMgb+TmvW7guQLK1EUXRYYGfNZ4UrkNavpyDZcWnUMQ7ETG GX2rlwV757sAusIoohxbMkjNhj8hLzAe/4Ye6NVf71KyDimjWJ/N5SM3UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGdSchgJRskZV3y48goluoxy2pUMB8GA1UdIwQY MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvm6zW93B 1G9BBXOZhh/MPT8CzghffJ3lMnae3t+B9mhbOt1rkqe82G3BVI8kpRxgp2ZPtVio aUUpaBeJXnMMMqzNbALMrDQa102+BrozScgh8bIIzkv9UgObXFEX9EDdYsGYMKmE VAqXiUxCjaHDmYfE9dOTpoElm7Ag0IehU4WHiqZb26mIKDZR3vXuH02gIQYKAPE+ m6N4tyV6dON6UrdVRBPYfz2cq9NXfiJEwieTHEto7686AgrcGNGaY9sPdgPjMNMD XZSdNUpzY+baJIiiAdrcqzcE8KyI8KckXZJMRkXMi5y6j8LzC1qa8TR69TdKwdA9 zyaFCe7FSL8mWw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:42 2025 by rpki-client