This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json) Hash identifier: 5aDrpAWpnbSyrAjTETxg5/Hp0els5bXPjuesU3SuOKI= Subject key identifier: 65:69:A5:D5:0E:62:58:96:F1:F4:89:71:7A:77:2E:32:58:0E:77:69 Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Certificate serial: 019B44382BB39E69DCE980A92EC7AEF84A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 04:01:30 +0000 Manifest this update: Mon 22 Dec 2025 04:01:30 +0000 Manifest next update: Tue 23 Dec 2025 04:01:30 +0000 Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=) 2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: mh+Auo4QAvnESnZIkqgqK07I0k3rI3EBbPy5nDPHDC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:2b:b3:9e:69:dc:e9:80:a9:2e:c7:ae:f8:4a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Validity Not Before: Dec 22 04:01:30 2025 GMT Not After : Dec 23 04:01:30 2025 GMT Subject: CN=6569a5d50e625896f1f489717a772e32580e7769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:8f:ec:c2:ec:5e:6b:6a:70:74:d8:11:f9: 65:11:70:81:97:02:78:12:16:14:f6:ab:b7:2e:07: c7:d0:37:7a:4b:ed:2c:1b:92:35:b3:2a:b9:79:c7: 4e:aa:ee:13:6d:0e:4d:74:22:da:4d:05:3a:59:b0: aa:06:c8:23:63:7d:fb:b7:88:b1:df:19:fb:e0:19: 01:72:75:f8:14:25:a9:b6:dc:d6:40:99:aa:42:c5: 6f:f9:8e:e3:e6:b6:a5:05:aa:db:c2:6b:5e:f1:ff: 2c:f2:69:ac:6e:7a:cf:03:8d:d0:11:bc:ac:3c:4b: 98:f5:fa:87:de:7b:c6:24:36:99:70:32:fa:e7:70: e1:0c:01:5e:4e:80:16:15:f8:45:3d:d5:04:1c:af: 9b:59:c2:51:ba:a1:4c:72:e8:89:13:d3:77:c1:48: fc:9d:71:bf:f4:8e:b1:fa:25:d7:d6:04:19:5b:34: d1:a6:f0:82:50:7e:1c:74:d1:0b:39:37:1e:fa:51: 37:a9:da:e1:c3:a4:17:07:ee:90:8c:67:3d:db:6c: ac:be:b2:dd:17:09:72:26:6e:e5:49:b6:5f:6a:a9: d3:01:21:d9:9e:d5:0d:df:d6:ea:ff:0e:17:2f:01: 2c:e5:bc:c0:32:0d:63:f0:c6:36:fb:57:be:3d:43: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:69:A5:D5:0E:62:58:96:F1:F4:89:71:7A:77:2E:32:58:0E:77:69 X509v3 Authority Key Identifier: keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:07:31:30:41:2e:03:5a:87:3d:f3:65:4a:4b:75:9e:0b:00: 2a:39:cf:63:90:10:3a:00:f5:9d:29:fd:d7:61:5d:27:48:44: 4b:40:cf:aa:b2:50:1e:9c:3f:54:50:e5:d7:5d:6c:89:4b:e2: 95:a6:11:f0:c9:51:c9:f4:1b:75:78:26:b7:ef:aa:f5:8c:e0: c5:31:ef:3e:f9:35:67:6e:78:9f:1a:8f:16:c9:eb:1f:36:42: 3a:ae:23:5e:e8:0a:2c:6e:78:8e:37:5b:0a:41:50:13:2a:83: 1a:20:29:63:56:25:39:4c:7c:2b:1b:6f:57:51:53:41:9d:0e: a2:a6:7c:c6:2c:96:5a:b1:74:97:36:5f:74:93:a6:f8:83:38: c5:8c:86:61:7b:65:b9:0c:af:28:46:f7:34:ce:21:eb:1d:df: 12:56:a6:c9:46:74:d1:02:c8:47:d2:f6:cf:27:ee:c3:55:25: 7d:c5:48:09:49:ae:a6:84:92:9d:17:e4:41:8a:f0:6c:8f:db: c8:5f:b7:75:c4:70:b1:b2:c7:71:59:dc:e8:a1:ea:52:d1:1a: 14:d1:47:60:c9:61:20:12:b5:93:3c:e3:7c:0e:78:db:24:a8: 5c:7a:30:1a:c6:f1:70:52:87:6d:cc:d1:80:3b:07:ea:53:29: a7:f3:55:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOCuznmnc6YCpLseu+EqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz YmVhMWQwHhcNMjUxMjIyMDQwMTMwWhcNMjUxMjIzMDQwMTMwWjAzMTEwLwYDVQQD Eyg2NTY5YTVkNTBlNjI1ODk2ZjFmNDg5NzE3YTc3MmUzMjU4MGU3NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH2P7MLsXmtqcHTYEfllEXCBlwJ4 EhYU9qu3LgfH0Dd6S+0sG5I1syq5ecdOqu4TbQ5NdCLaTQU6WbCqBsgjY337t4ix 3xn74BkBcnX4FCWpttzWQJmqQsVv+Y7j5ralBarbwmte8f8s8mmsbnrPA43QEbys PEuY9fqH3nvGJDaZcDL653DhDAFeToAWFfhFPdUEHK+bWcJRuqFMcuiJE9N3wUj8 nXG/9I6x+iXX1gQZWzTRpvCCUH4cdNELOTce+lE3qdrhw6QXB+6QjGc922ysvrLd FwlyJm7lSbZfaqnTASHZntUN39bq/w4XLwEs5bzAMg1j8MY2+1e+PUPPLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVppdUOYliW8fSJcXp3LjJYDndpMB8GA1UdIwQY MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3 LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwcxMEEu A1qHPfNlSkt1ngsAKjnPY5AQOgD1nSn912FdJ0hES0DPqrJQHpw/VFDl111siUvi laYR8MlRyfQbdXgmt++q9YzgxTHvPvk1Z254nxqPFsnrHzZCOq4jXugKLG54jjdb CkFQEyqDGiApY1YlOUx8KxtvV1FTQZ0OoqZ8xiyWWrF0lzZfdJOm+IM4xYyGYXtl uQyvKEb3NM4h6x3fElamyUZ00QLIR9L2zyfuw1UlfcVICUmupoSSnRfkQYrwbI/b yF+3dcRwsbLHcVnc6KHqUtEaFNFHYMlhIBK1kzzjfA542ySoXHowGsbxcFKHbczR gDsH6lMpp/NVKQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:57:43 2025 by rpki-client