This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json) Hash identifier: i50JLoRNFLPGahVYVIQB7Jempz3ntIpXbzBUXxam7mc= Subject key identifier: 2F:DF:6C:27:2B:BB:99:06:F8:CB:60:E1:E8:EC:87:AB:09:F4:23:E0 Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019B3A8FE390AB538EF1AC991C8E23A92FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft Manifest number: 146B Signing time: Sat 20 Dec 2025 07:01:06 +0000 Manifest this update: Sat 20 Dec 2025 07:01:06 +0000 Manifest next update: Sun 21 Dec 2025 07:01:06 +0000 Files and hashes: 1: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (hash: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=) 2: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=) 3: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=) 4: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=) 5: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=) 6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=) 7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: V5gCx3EnAx6GG4/Od6+zVX4ZEqOxrhrxltuQSjZnDw0=) 8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=) 9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:e3:90:ab:53:8e:f1:ac:99:1c:8e:23:a9:2f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Dec 20 07:01:06 2025 GMT Not After : Dec 21 07:01:06 2025 GMT Subject: CN=2fdf6c272bbb9906f8cb60e1e8ec87ab09f423e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:ea:2e:f8:57:fe:05:5b:e3:44:c7:3f:5d: 9e:2c:a0:55:27:cf:8d:93:0d:35:b1:4e:7b:2b:59: 18:61:4c:48:fa:37:5e:ca:94:7c:e8:e0:e4:1e:49: 96:3e:bf:ab:2f:5e:43:21:45:ab:ab:c3:bf:b6:bb: e2:2c:f0:cc:90:46:05:92:d4:b1:be:8d:9d:98:eb: 3d:fc:53:0c:5d:a4:77:7d:9e:aa:b2:b7:45:63:30: 81:54:0f:78:23:d2:9c:52:83:93:d7:30:c3:10:a5: 85:d4:0c:15:cc:2d:49:81:4c:4b:22:53:29:12:70: 32:40:a4:0e:1c:72:41:07:42:2c:4c:24:91:91:f8: 1b:88:0e:84:75:87:46:3f:68:04:22:27:20:16:bf: 7b:8e:11:ff:03:e7:e6:4b:15:22:19:17:19:97:a0: 38:aa:84:71:8b:66:65:7f:70:9b:e7:f2:88:f5:f1: 41:14:b3:a7:04:d9:03:cd:02:74:b5:d7:a9:64:e4: 69:fe:c6:64:7b:3d:87:2b:f9:32:7d:24:50:f3:b0: 12:03:9b:11:09:25:b2:aa:7b:ac:35:49:a2:05:e4: e0:b3:8d:92:49:3c:47:58:43:68:dd:57:93:d7:f5: 45:12:65:04:ef:25:c3:76:8b:c6:c6:31:58:d3:c4: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:6C:27:2B:BB:99:06:F8:CB:60:E1:E8:EC:87:AB:09:F4:23:E0 X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:92:16:a7:d1:dd:40:61:39:83:9c:76:1c:3c:04:80:fc:11: 82:01:47:ff:3f:7e:31:27:4f:d0:0d:6c:f9:43:b1:01:d7:35: 1c:aa:e2:2f:17:2f:ce:c2:34:c8:8d:9b:3c:e8:38:4a:b0:27: a8:e4:85:4b:38:13:92:27:3a:fd:54:23:bb:04:78:03:18:59: e5:84:39:53:df:ba:32:02:f4:12:4b:11:b7:be:e3:a8:ea:6f: 48:61:fc:d7:08:05:be:99:73:ef:42:c1:ba:16:2b:4b:e1:1d: 82:e0:11:2a:c2:95:df:ff:45:9a:34:ca:fd:60:51:d5:cb:44: 07:be:a1:84:ab:3f:51:6a:92:6a:ca:7b:d2:6c:5b:62:cd:f8: cb:ac:20:a1:3b:37:7a:cd:21:fa:a2:17:0a:1f:c0:1f:7c:4c: b8:6d:7b:a8:aa:1a:07:68:cc:2a:a3:d2:98:39:11:c7:8c:e0: 1b:34:74:19:58:0d:74:05:c7:26:9f:a5:6e:47:9a:d7:18:32: ae:e1:17:6c:31:02:56:ba:0f:46:93:bd:57:84:d0:ed:2e:9d: 66:34:a3:dc:a7:db:93:74:d6:71:59:5b:c4:ab:52:00:37:95: c4:9c:c3:19:35:f6:61:58:05:2f:8a:f0:06:8e:a0:b1:40:9e: 1a:18:08:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+OQq1OO8ayZHI4jqS/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjUxMjIwMDcwMTA2WhcNMjUxMjIxMDcwMTA2WjAzMTEwLwYDVQQD EygyZmRmNmMyNzJiYmI5OTA2ZjhjYjYwZTFlOGVjODdhYjA5ZjQyM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwafqLvhX/gVb40THP12eLKBVJ8+N kw01sU57K1kYYUxI+jdeypR86ODkHkmWPr+rL15DIUWrq8O/trviLPDMkEYFktSx vo2dmOs9/FMMXaR3fZ6qsrdFYzCBVA94I9KcUoOT1zDDEKWF1AwVzC1JgUxLIlMp EnAyQKQOHHJBB0IsTCSRkfgbiA6EdYdGP2gEIicgFr97jhH/A+fmSxUiGRcZl6A4 qoRxi2Zlf3Cb5/KI9fFBFLOnBNkDzQJ0tdepZORp/sZkez2HK/kyfSRQ87ASA5sR CSWyqnusNUmiBeTgs42SSTxHWENo3VeT1/VFEmUE7yXDdovGxjFY08QITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/fbCcru5kG+Mtg4ejsh6sJ9CPgMB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJIWp9Hd QGE5g5x2HDwEgPwRggFH/z9+MSdP0A1s+UOxAdc1HKriLxcvzsI0yI2bPOg4SrAn qOSFSzgTkic6/VQjuwR4AxhZ5YQ5U9+6MgL0EksRt77jqOpvSGH81wgFvplz70LB uhYrS+EdguARKsKV3/9FmjTK/WBR1ctEB76hhKs/UWqSasp70mxbYs34y6wgoTs3 es0h+qIXCh/AH3xMuG17qKoaB2jMKqPSmDkRx4zgGzR0GVgNdAXHJp+lbkea1xgy ruEXbDECVroPRpO9V4TQ7S6dZjSj3Kfbk3TWcVlbxKtSADeVxJzDGTX2YVgFL4rw Bo6gsUCeGhgIhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:14:07 2025 by rpki-client