This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json) Hash identifier: WxLMUbYROgssEfK1UPCzCeg1kQ1jTUXXMx82alt771w= Subject key identifier: FE:A4:5C:B7:05:6E:4D:50:2B:BB:0A:08:43:20:C8:07:98:26:FF:B0 Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23 Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23 Certificate serial: 019B3E6CF41C34F8022B9EEBD5AA583FAC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:01:26 +0000 Manifest this update: Sun 21 Dec 2025 01:01:26 +0000 Manifest next update: Mon 22 Dec 2025 01:01:26 +0000 Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=) 2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: iO+uLQyqcA055Skqs9VTCsMVjMc34lLulfsX8vgoOqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f4:1c:34:f8:02:2b:9e:eb:d5:aa:58:3f:ac:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23 Validity Not Before: Dec 21 01:01:26 2025 GMT Not After : Dec 22 01:01:26 2025 GMT Subject: CN=fea45cb7056e4d502bbb0a084320c8079826ffb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:ea:0c:16:01:14:75:39:60:36:cd:1c:d9: 71:e0:a7:7a:a7:0e:b0:76:f2:d3:31:44:af:be:73: 5e:f9:5f:13:4c:6e:19:6a:2c:de:e4:bb:3c:26:2a: 84:a6:3b:1b:d4:09:31:23:2f:3a:88:2a:2f:90:2b: 98:55:98:9b:ed:b8:f4:87:4a:cd:1a:e8:83:fa:b2: 63:8f:04:55:30:2e:7c:0a:48:06:ed:52:bd:63:cb: 12:e6:e3:4a:6a:14:38:da:76:ac:1c:04:f4:da:7b: 7e:90:0d:f5:3d:ab:3f:6a:37:c6:32:61:8d:23:32: dc:42:a5:37:bc:93:d8:b7:8a:34:6f:8b:da:8b:80: 03:65:9a:70:63:29:2f:b0:96:9f:25:9c:4c:15:d7: 70:fe:f5:ea:63:5e:56:fa:26:17:d4:c3:88:cf:d5: 15:cf:84:97:8e:3a:2e:80:e4:68:fa:db:27:f9:a1: a1:93:72:15:ee:d8:a8:c9:4a:d0:cc:68:53:ba:f8: 9c:62:15:b9:07:68:35:b0:2e:d1:b8:16:d8:52:2b: be:28:2b:7e:d4:8e:9c:5a:22:31:19:6d:be:e3:2e: 00:d4:eb:ea:de:f2:b3:bc:1a:ad:7b:b0:c6:8d:5d: 24:36:36:14:60:0d:dc:71:2a:17:f3:05:51:23:6b: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:5C:B7:05:6E:4D:50:2B:BB:0A:08:43:20:C8:07:98:26:FF:B0 X509v3 Authority Key Identifier: keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5f:35:91:2f:c3:9a:cf:64:1f:f9:30:c5:f7:66:1f:07:c7: b7:49:d8:9d:c1:4b:ba:6e:8f:29:9f:6e:2e:86:7b:60:f6:a2: 9e:9d:17:ab:ac:20:3c:33:a9:07:dd:ee:fb:55:5a:6d:93:2a: e9:ce:91:6f:99:a8:63:10:93:3d:60:ef:53:34:fe:63:91:be: a3:07:62:2b:19:d1:f3:24:5b:98:bf:17:77:f1:54:2d:3b:41: fe:43:e4:17:d2:e1:e1:1c:da:cb:53:e1:9e:f6:74:20:d2:11: eb:09:ad:cc:b3:7d:ba:ee:0e:2e:94:5f:94:5f:79:c7:e2:64: 08:7e:a7:3e:dd:da:17:80:e1:d2:79:6c:73:2a:34:2a:a3:f3: ff:16:11:91:dd:21:b5:f5:7a:49:ea:90:a6:85:76:61:24:6e: 68:00:35:27:f1:dc:de:8d:96:52:60:8f:e1:51:c8:ab:0f:cc: 42:5c:10:be:0e:0c:62:72:d8:26:51:97:08:8f:86:8b:ae:2a: 09:9e:b7:e5:06:e9:69:56:16:e1:10:de:f3:35:6a:d0:b4:ad: a7:49:90:3a:ea:09:3f:15:02:07:65:6d:42:e9:69:66:91:f7: 99:12:3e:c4:6c:3c:ba:d8:ee:96:b1:fa:98:df:66:ae:d8:1e: e7:93:7b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPQcNPgCK57r1apYP6xsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDM5ZDZjNTBkZDMwOWVlOTI4NmMzMDJkZmIxNTI0NWJk YmFmMjMwHhcNMjUxMjIxMDEwMTI2WhcNMjUxMjIyMDEwMTI2WjAzMTEwLwYDVQQD EyhmZWE0NWNiNzA1NmU0ZDUwMmJiYjBhMDg0MzIwYzgwNzk4MjZmZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPzqDBYBFHU5YDbNHNlx4Kd6pw6w dvLTMUSvvnNe+V8TTG4Zaize5Ls8JiqEpjsb1AkxIy86iCovkCuYVZib7bj0h0rN GuiD+rJjjwRVMC58CkgG7VK9Y8sS5uNKahQ42nasHAT02nt+kA31Pas/ajfGMmGN IzLcQqU3vJPYt4o0b4vai4ADZZpwYykvsJafJZxMFddw/vXqY15W+iYX1MOIz9UV z4SXjjougORo+tsn+aGhk3IV7tioyUrQzGhTuvicYhW5B2g1sC7RuBbYUiu+KCt+ 1I6cWiIxGW2+4y4A1Ovq3vKzvBqte7DGjV0kNjYUYA3ccSoX8wVRI2u2NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6kXLcFbk1QK7sKCEMgyAeYJv+wMB8GA1UdIwQY MBaAFHHTnWxQ3TCe6ShsMC37FSRb268jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RPZGJGRGRNSjdwS0d3d0xmc1ZKRnZicnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMWU2M2ItMDFhYi00YzA1LTg0YTct NDVlMWM3N2ExOGMwLzEvY2RPZGJGRGRNSjdwS0d3d0xmc1ZKRnZicnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMWU2M2ItMDFhYi00YzA1LTg0YTctNDVlMWM3N2ExOGMw LzEvY2RPZGJGRGRNSjdwS0d3d0xmc1ZKRnZicnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa181kS/D ms9kH/kwxfdmHwfHt0nYncFLum6PKZ9uLoZ7YPainp0Xq6wgPDOpB93u+1VabZMq 6c6Rb5moYxCTPWDvUzT+Y5G+owdiKxnR8yRbmL8Xd/FULTtB/kPkF9Lh4Rzay1Ph nvZ0INIR6wmtzLN9uu4OLpRflF95x+JkCH6nPt3aF4Dh0nlscyo0KqPz/xYRkd0h tfV6SeqQpoV2YSRuaAA1J/Hc3o2WUmCP4VHIqw/MQlwQvg4MYnLYJlGXCI+Gi64q CZ635QbpaVYW4RDe8zVq0LStp0mQOuoJPxUCB2VtQulpZpH3mRI+xGw8utjulrH6 mN9mrtge55N7og== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:15 2025 by rpki-client