This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json) Hash identifier: IYuAkcYM1BwY2NQESS45mZfjEzslmP6lnVt4J1UY/0o= Subject key identifier: 63:6A:61:D8:88:99:23:2C:A5:FD:95:68:E3:E7:E1:DC:31:FE:DC:83 Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019B4DE0C32B9345085A0B66D5BA11668BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft Manifest number: 1475 Signing time: Wed 24 Dec 2025 01:02:14 +0000 Manifest this update: Wed 24 Dec 2025 01:02:14 +0000 Manifest next update: Thu 25 Dec 2025 01:02:14 +0000 Files and hashes: 1: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (hash: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=) 2: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=) 3: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=) 4: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=) 5: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=) 6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=) 7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: g0MKjHkpW8uve+ZBINlnQBb0ay+0MDyCoSq61FD86EY=) 8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=) 9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:c3:2b:93:45:08:5a:0b:66:d5:ba:11:66:8b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Dec 24 01:02:14 2025 GMT Not After : Dec 25 01:02:14 2025 GMT Subject: CN=636a61d88899232ca5fd9568e3e7e1dc31fedc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:04:27:36:a4:1f:84:a9:07:32:c5:7a:b8: 56:4d:41:80:4e:f8:95:a3:cb:00:df:e0:21:cc:4b: 1f:81:04:2b:bc:79:54:89:f4:98:c9:5a:9b:87:d2: 8d:55:0a:40:7e:fa:15:c7:9e:28:8f:5c:cc:c4:cd: 83:29:a4:13:e4:71:8f:73:53:3d:92:74:0d:90:d6: 93:6a:82:32:af:8a:04:b1:7f:e4:8e:88:15:ad:63: e2:f1:b0:27:a3:0f:36:f3:56:c7:aa:cd:f8:b0:b2: 34:34:7c:b6:3d:9b:61:9b:64:99:04:21:df:30:90: 70:90:07:76:5c:ec:0b:f7:f0:e0:07:44:35:59:1d: 57:38:7a:72:1c:f9:1b:0c:a4:c2:3c:7b:eb:4b:c4: d8:c9:3a:76:7b:de:11:e9:d4:06:f9:9d:33:88:37: cc:83:d7:60:4a:67:c9:83:ac:4e:0f:fc:de:d3:29: 03:4d:d0:a7:09:e0:b4:39:f2:66:0a:c8:d7:a5:2b: 7f:5c:d9:1f:9a:3f:71:67:39:ab:8b:3e:7f:ed:75: 07:4c:fd:14:53:0c:23:ba:02:02:cf:93:07:0f:38: bc:4c:6f:d4:f5:19:47:fd:da:61:c0:2b:27:cd:74: 12:7a:93:55:6f:b4:3d:b7:95:09:74:97:70:4e:79: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:61:D8:88:99:23:2C:A5:FD:95:68:E3:E7:E1:DC:31:FE:DC:83 X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3c:71:b4:60:a9:7e:54:cf:fc:b0:65:c3:8e:20:e3:df:74: ca:7c:67:63:40:87:fb:9f:fd:f2:fb:40:e8:99:58:07:fd:f0: 78:f0:91:eb:58:3b:c6:93:87:ef:11:1d:81:a5:bf:f7:d7:d8: a9:e0:c5:c7:76:1c:80:64:18:b6:a7:b5:74:6c:ba:cd:a9:42: 78:98:bd:4e:01:b7:a1:a6:f2:29:1c:7d:85:77:8b:f4:44:5e: 96:4a:ff:60:61:c5:90:29:80:de:17:44:d4:7b:db:e2:85:61: 7f:33:5f:03:7d:60:f1:97:76:33:72:33:69:9d:50:ec:10:da: 61:69:b1:87:c4:d4:d4:b6:dd:a6:35:76:55:cb:82:de:d9:cb: f1:ec:67:66:53:61:36:7e:ab:3a:41:41:ab:c5:21:32:43:ff: 33:cf:16:36:9c:3a:37:49:a5:22:f7:f9:ba:27:6d:c0:6f:af: b2:3c:1b:46:e6:34:bf:93:38:db:9a:d3:ed:05:cc:6d:f9:e5: e5:a3:dc:5b:84:38:89:20:0d:c4:c3:6c:6a:06:d0:88:d0:b0: 54:1f:cc:84:7b:ff:3a:84:1b:af:cb:37:03:7d:01:05:da:00: 43:bb:10:06:5d:01:15:85:67:dc:0a:89:86:6f:43:60:ee:74: ad:0c:03:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4MMrk0UIWgtm1boRZovhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjUxMjI0MDEwMjE0WhcNMjUxMjI1MDEwMjE0WjAzMTEwLwYDVQQD Eyg2MzZhNjFkODg4OTkyMzJjYTVmZDk1NjhlM2U3ZTFkYzMxZmVkYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaoEJzakH4SpBzLFerhWTUGATviV o8sA3+AhzEsfgQQrvHlUifSYyVqbh9KNVQpAfvoVx54oj1zMxM2DKaQT5HGPc1M9 knQNkNaTaoIyr4oEsX/kjogVrWPi8bAnow8281bHqs34sLI0NHy2PZthm2SZBCHf MJBwkAd2XOwL9/DgB0Q1WR1XOHpyHPkbDKTCPHvrS8TYyTp2e94R6dQG+Z0ziDfM g9dgSmfJg6xOD/ze0ykDTdCnCeC0OfJmCsjXpSt/XNkfmj9xZzmriz5/7XUHTP0U UwwjugICz5MHDzi8TG/U9RlH/dphwCsnzXQSepNVb7Q9t5UJdJdwTnnFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNqYdiImSMspf2VaOPn4dwx/tyDMB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDxxtGCp flTP/LBlw44g4990ynxnY0CH+5/98vtA6JlYB/3wePCR61g7xpOH7xEdgaW/99fY qeDFx3YcgGQYtqe1dGy6zalCeJi9TgG3oabyKRx9hXeL9ERelkr/YGHFkCmA3hdE 1Hvb4oVhfzNfA31g8Zd2M3IzaZ1Q7BDaYWmxh8TU1LbdpjV2VcuC3tnL8exnZlNh Nn6rOkFBq8UhMkP/M88WNpw6N0mlIvf5uidtwG+vsjwbRuY0v5M425rT7QXMbfnl 5aPcW4Q4iSANxMNsagbQiNCwVB/MhHv/OoQbr8s3A30BBdoAQ7sQBl0BFYVn3AqJ hm9DYO50rQwDcQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:29 2025 by rpki-client