This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft File: 95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json) Hash identifier: eJ4V24XYkXCXMkdptvFkBIBPfXgp8CDj2ti0bAMjJ+4= Subject key identifier: 04:6A:26:51:1E:1F:FF:0A:B9:65:E7:47:7C:88:AB:3F:FD:32:EA:69 Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62 Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662 Certificate serial: 019B3DFEC3FBD7A0D638BF4C3CA8F01D702C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft Manifest number: 037D Signing time: Sat 20 Dec 2025 23:01:04 +0000 Manifest this update: Sat 20 Dec 2025 23:01:04 +0000 Manifest next update: Sun 21 Dec 2025 23:01:04 +0000 Files and hashes: 1: 5BPtNrEhH9Rw1aJqmYEkCzXkQjY.roa (hash: qBma49p0UmV3mrUVRqrsoQSZBl3jQDEOljuj/i+uqbI=) 2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: raU0C8PXN5rzRbcb8a+8ynXVPxWgVhF1hMU97WJfKh8=) 3: OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa (hash: Jj0BQnswIB1ZHaTdvAdTXUICRNEwRPIUjy/LhMuocGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c3:fb:d7:a0:d6:38:bf:4c:3c:a8:f0:1d:70:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662 Validity Not Before: Dec 20 23:01:04 2025 GMT Not After : Dec 21 23:01:04 2025 GMT Subject: CN=046a26511e1fff0ab965e7477c88ab3ffd32ea69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:d9:03:3c:f8:80:0a:36:0a:43:29:4b:79: 8c:ac:46:0d:83:c3:b5:1d:22:0d:1c:cf:b8:bb:ae: d5:41:d5:0f:9d:b2:39:8d:cc:1f:b2:55:37:d0:01: 13:4e:13:13:c7:8b:ab:ff:d7:fa:cc:c1:e4:f3:a8: 4c:04:98:53:44:7a:55:b7:4c:ed:c9:4c:11:35:ee: e4:84:33:23:4c:d1:50:77:f3:16:aa:e1:0e:b9:c3: 09:3b:5a:68:5b:04:12:a2:a2:4d:5c:16:14:fa:ae: cf:b0:9d:5c:13:6a:ab:02:5d:86:8a:12:46:16:6f: a9:73:35:de:c7:69:c8:9b:b2:a9:a7:59:a3:98:02: cb:52:c8:08:fc:fc:1a:4b:cc:4f:73:a1:3c:df:81: 1a:61:d5:61:94:eb:e1:93:89:31:43:3a:60:0c:96: df:90:78:2f:d3:3c:01:cf:e1:1f:f7:fd:41:9a:0e: 9c:a7:6c:0c:ec:44:b1:15:a0:d7:ea:d0:86:89:f4: fe:3f:4c:69:ff:43:56:d2:11:42:35:ad:f8:fe:35: 39:f1:08:2e:56:38:6b:4f:b3:dd:a6:83:a9:53:16: cd:67:63:6b:ea:e0:95:75:3d:ed:b0:69:95:dd:96: 5b:95:9d:e6:4e:31:ba:5a:f9:6c:1e:f2:cb:eb:7e: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6A:26:51:1E:1F:FF:0A:B9:65:E7:47:7C:88:AB:3F:FD:32:EA:69 X509v3 Authority Key Identifier: keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d8:b8:b6:d4:cb:d0:24:79:ef:bb:c5:58:10:18:ab:dc:1f: 32:16:d5:a7:45:2e:80:c6:15:69:4e:95:1c:cc:c0:c8:a6:ea: f0:29:80:6b:a8:f8:dd:4e:4f:17:8f:a4:2e:85:d5:af:0d:0d: ce:70:f1:7a:6c:2c:f6:bc:bd:1b:92:dd:04:79:ca:9d:8c:02: 84:cd:71:ca:89:61:5a:c0:50:dd:c1:ec:78:19:84:2d:71:c2: 7a:f1:dd:a5:0b:28:3d:70:31:e2:b9:d3:90:29:6f:9f:29:d9: 90:56:9e:d4:eb:c2:4b:44:dc:9c:91:05:0e:4b:c9:54:20:1e: 2e:f8:9c:69:86:21:39:88:53:f2:10:ee:a6:3f:50:4f:e9:7a: e0:04:58:a0:e6:f7:c3:83:7c:05:2f:93:16:79:5a:6e:a4:ec: c8:fa:7c:86:cc:f7:54:d9:0c:a5:c2:92:a5:f2:08:39:cf:b4: 1d:ce:50:ba:84:68:1a:bd:5a:cc:7e:12:69:ac:ac:bd:8d:36: 4f:8a:88:79:30:4b:40:86:da:30:a0:ce:a9:22:17:8d:0d:bb: 46:1e:b2:c8:de:3d:88:f2:0b:19:55:75:fe:60:56:fd:62:6e: d8:04:57:a9:b2:e6:d0:e6:a9:4f:3a:28:49:74:61:57:72:a5: 04:69:ef:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/sP716DWOL9MPKjwHXAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OWZjZmQyODc1YWJkZjYxZTE5ZDMyNzBlYWZlMWVmZmFk YzY2NjIwHhcNMjUxMjIwMjMwMTA0WhcNMjUxMjIxMjMwMTA0WjAzMTEwLwYDVQQD EygwNDZhMjY1MTFlMWZmZjBhYjk2NWU3NDc3Yzg4YWIzZmZkMzJlYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx97ZAzz4gAo2CkMpS3mMrEYNg8O1 HSINHM+4u67VQdUPnbI5jcwfslU30AETThMTx4ur/9f6zMHk86hMBJhTRHpVt0zt yUwRNe7khDMjTNFQd/MWquEOucMJO1poWwQSoqJNXBYU+q7PsJ1cE2qrAl2GihJG Fm+pczXex2nIm7Kpp1mjmALLUsgI/PwaS8xPc6E834EaYdVhlOvhk4kxQzpgDJbf kHgv0zwBz+Ef9/1Bmg6cp2wM7ESxFaDX6tCGifT+P0xp/0NW0hFCNa34/jU58Qgu VjhrT7PdpoOpUxbNZ2Nr6uCVdT3tsGmV3ZZblZ3mTjG6WvlsHvLL637LiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARqJlEeH/8KuWXnR3yIqz/9MuppMB8GA1UdIwQY MBaAFPefz9KHWr32HhnTJw6v4e/63GZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEt OTA3NzZmODRjOWI3LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEtOTA3NzZmODRjOWI3 LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9i4ttTL 0CR577vFWBAYq9wfMhbVp0UugMYVaU6VHMzAyKbq8CmAa6j43U5PF4+kLoXVrw0N znDxemws9ry9G5LdBHnKnYwChM1xyolhWsBQ3cHseBmELXHCevHdpQsoPXAx4rnT kClvnynZkFae1OvCS0TcnJEFDkvJVCAeLvicaYYhOYhT8hDupj9QT+l64ARYoOb3 w4N8BS+TFnlabqTsyPp8hsz3VNkMpcKSpfIIOc+0Hc5QuoRoGr1azH4SaaysvY02 T4qIeTBLQIbaMKDOqSIXjQ27Rh6yyN49iPILGVV1/mBW/WJu2ARXqbLm0OapTzoo SXRhV3KlBGnvgA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:50:50 2025 by rpki-client