This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json) Hash identifier: fWZuHsoeKWlmjIMLbtUEg/THmIgOEnJ3susPj/Nxwd0= Subject key identifier: D3:65:0B:42:76:65:68:54:2F:9B:66:96:6D:1F:D6:AF:2C:B5:D6:25 Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5 Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5 Certificate serial: 019B3B6B2990C417700A4972DB03457B273C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft Manifest number: 131F Signing time: Sat 20 Dec 2025 11:00:37 +0000 Manifest this update: Sat 20 Dec 2025 11:00:37 +0000 Manifest next update: Sun 21 Dec 2025 11:00:37 +0000 Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=) 2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: UQWex562iCBwZpviaYZoy4lon4vU2iRUgnA9+0k2YEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:29:90:c4:17:70:0a:49:72:db:03:45:7b:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5 Validity Not Before: Dec 20 11:00:37 2025 GMT Not After : Dec 21 11:00:37 2025 GMT Subject: CN=d3650b42766568542f9b66966d1fd6af2cb5d625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d0:17:ad:87:59:a3:35:4c:8b:d8:60:85:4e: 23:e8:d3:ce:85:b0:7f:a4:6a:9b:78:27:7c:a4:8d: 2d:79:41:f6:56:39:b6:c9:70:65:46:59:a9:c5:a2: a0:0c:6b:e0:f6:c9:e6:c0:76:0c:58:88:0f:04:8e: 2e:f8:db:41:9e:43:83:69:80:69:80:ae:bd:6b:0c: ff:41:20:98:86:4e:30:7e:f3:bf:43:4c:9b:6d:2c: 3d:d3:33:df:97:6f:ef:0c:23:e0:80:8b:2b:50:fa: 3f:81:89:d9:48:02:ae:53:f9:99:09:02:81:73:45: 51:51:a2:07:e5:98:d5:23:cc:39:d7:bc:16:ae:60: 09:f6:be:0b:58:fe:47:00:c4:16:ba:e0:db:78:ea: 77:b3:2f:75:58:41:b1:de:38:f6:65:e0:9e:c6:58: 45:49:01:92:75:d7:fd:0f:8e:c1:cd:86:e8:05:b1: ab:21:d3:70:3a:13:22:be:5c:40:e9:64:9a:0a:63: 9b:5a:9b:5b:48:94:1d:df:02:91:ae:64:c1:d8:fd: ee:19:b0:be:62:a5:67:87:ce:d5:63:ff:3d:c3:06: 92:61:ad:fe:8f:61:1f:a1:01:31:a1:35:e5:77:6a: 1f:e3:6f:88:20:d1:e3:ea:7a:23:3b:80:6a:6b:b8: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:65:0B:42:76:65:68:54:2F:9B:66:96:6D:1F:D6:AF:2C:B5:D6:25 X509v3 Authority Key Identifier: keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:07:7d:22:36:01:6e:67:64:69:5d:98:55:d7:d6:19:3d:e4: eb:b5:d0:cb:dc:2d:9f:51:b7:79:41:ea:dd:0a:18:48:54:2b: c5:83:76:ba:b6:13:1f:14:5e:50:59:29:0a:a8:f7:26:c4:4d: 8a:0e:c5:fb:83:72:41:0c:07:7b:57:e4:ca:22:77:db:9d:b9: d8:6b:f6:fc:5e:a9:70:81:be:95:f5:8e:f2:bb:f1:05:b2:0f: 5b:c0:72:42:12:a3:1d:ea:24:34:48:af:f7:f3:1c:ee:1e:a4: bf:6b:94:90:79:7b:f9:69:81:ab:66:22:60:13:bc:9e:e2:ae: a0:19:27:b1:4e:63:0a:7e:f2:b1:73:7b:f4:4a:46:46:d7:aa: 68:95:c9:23:cb:78:8f:a7:82:8b:e2:80:43:9e:f8:90:fe:4f: c3:37:77:18:df:99:6d:c6:5a:bd:22:b6:b0:68:41:8f:6a:d9: 8d:2e:8d:11:1b:94:21:08:f3:2a:b7:3d:02:cc:50:3a:43:db: 0c:7e:a6:a9:aa:47:8f:c3:ea:3c:ad:1c:3e:a8:1d:c6:7a:9f: 10:fd:4b:87:b9:ab:b0:63:ac:0f:1f:b7:1f:bc:66:a0:55:e0: 9f:b7:63:27:cf:1a:3f:9c:2d:61:77:35:f9:39:4f:87:e6:3c: 89:38:55:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7aymQxBdwCkly2wNFeyc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDM5ZDk0MjQyNmZjNjczYjI3OWNjOThhYjM1ZmRiZDdl YTk3ZjUwHhcNMjUxMjIwMTEwMDM3WhcNMjUxMjIxMTEwMDM3WjAzMTEwLwYDVQQD EyhkMzY1MGI0Mjc2NjU2ODU0MmY5YjY2OTY2ZDFmZDZhZjJjYjVkNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NAXrYdZozVMi9hghU4j6NPOhbB/ pGqbeCd8pI0teUH2Vjm2yXBlRlmpxaKgDGvg9snmwHYMWIgPBI4u+NtBnkODaYBp gK69awz/QSCYhk4wfvO/Q0ybbSw90zPfl2/vDCPggIsrUPo/gYnZSAKuU/mZCQKB c0VRUaIH5ZjVI8w517wWrmAJ9r4LWP5HAMQWuuDbeOp3sy91WEGx3jj2ZeCexlhF SQGSddf9D47BzYboBbGrIdNwOhMivlxA6WSaCmObWptbSJQd3wKRrmTB2P3uGbC+ YqVnh87VY/89wwaSYa3+j2EfoQExoTXld2of42+IINHj6nojO4Bqa7hb+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNlC0J2ZWhUL5tmlm0f1q8stdYlMB8GA1UdIwQY MBaAFH9DnZQkJvxnOyecyYqzX9vX6pf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUt MTQ2ZjI1NGFjMTMxLzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUtMTQ2ZjI1NGFjMTMx LzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgd9IjYB bmdkaV2YVdfWGT3k67XQy9wtn1G3eUHq3QoYSFQrxYN2urYTHxReUFkpCqj3JsRN ig7F+4NyQQwHe1fkyiJ325252Gv2/F6pcIG+lfWO8rvxBbIPW8ByQhKjHeokNEiv 9/Mc7h6kv2uUkHl7+WmBq2YiYBO8nuKuoBknsU5jCn7ysXN79EpGRteqaJXJI8t4 j6eCi+KAQ574kP5Pwzd3GN+ZbcZavSK2sGhBj2rZjS6NERuUIQjzKrc9AsxQOkPb DH6mqapHj8PqPK0cPqgdxnqfEP1Lh7mrsGOsDx+3H7xmoFXgn7djJ88aP5wtYXc1 +TlPh+Y8iThViA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:48 2025 by rpki-client