This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json) Hash identifier: xSPVXf46mEhTeAoIg0P56Hmwy2QcWC+2Xw7j8pXQ0RQ= Subject key identifier: B0:48:9A:CF:55:E0:60:B8:F7:85:7B:B7:EC:E1:F7:9E:C9:37:12:8D Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Certificate serial: 019B7AB823BE19C98C399E0F98C6BF5921DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft Manifest number: 0BF4 Signing time: Thu 01 Jan 2026 18:00:46 +0000 Manifest this update: Thu 01 Jan 2026 18:00:46 +0000 Manifest next update: Fri 02 Jan 2026 18:00:46 +0000 Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=) 2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: PTDc3ddejg/HHhslXptrBamDDmi1cwL1bYbpBU7+shk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b8:23:be:19:c9:8c:39:9e:0f:98:c6:bf:59:21:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Validity Not Before: Jan 1 18:00:46 2026 GMT Not After : Jan 2 18:00:46 2026 GMT Subject: CN=b0489acf55e060b8f7857bb7ece1f79ec937128d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:ad:71:e0:5b:4e:da:d9:b1:09:26:93:f6: 18:dd:bd:45:0f:e0:1e:75:5b:25:3e:19:dd:aa:3b: 8c:90:ca:c8:c8:74:04:73:fd:78:7a:d8:02:da:8d: 1c:cd:a1:d4:6a:0a:59:11:33:07:5d:72:6c:6f:69: 4a:2e:86:97:b6:c3:87:bc:2d:8f:37:ba:d4:58:7d: d6:7f:e0:f2:6d:e1:cf:81:b3:f8:56:61:e8:e0:d3: d8:ec:3e:f0:d9:63:17:11:45:59:3f:cb:29:bb:2f: 83:23:62:5e:9c:b2:51:45:f8:b2:13:1f:40:47:32: e0:59:ab:af:9e:59:a2:15:5c:8b:4e:de:69:3d:38: 1c:51:f5:90:91:cd:05:82:a1:fc:cf:88:c4:e0:a8: 4e:8f:b0:51:0e:38:81:b2:04:71:cf:fd:06:4d:32: 63:3f:58:47:3e:f5:21:f7:c9:49:c9:95:2f:db:09: 08:a4:80:bd:c8:b1:61:fb:e5:c0:ce:3f:e3:fb:7e: 80:81:6f:ad:6f:a8:16:4e:49:d9:96:f5:8d:07:e6: 25:f9:0d:e6:bc:88:d7:e9:a7:52:d8:ec:fc:da:af: 02:1b:35:89:96:2b:62:89:7d:1a:b7:8d:eb:ac:f2: 32:49:97:12:e2:07:a1:fe:be:ca:69:d9:dc:95:5d: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:9A:CF:55:E0:60:B8:F7:85:7B:B7:EC:E1:F7:9E:C9:37:12:8D X509v3 Authority Key Identifier: keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:77:be:fc:ff:cb:96:82:13:21:0b:8a:8a:f7:1a:ec:50:7e: 6f:c3:14:65:1a:31:02:92:8f:b0:01:95:2b:e2:ab:3b:13:e7: 07:ac:9a:ca:c0:ab:67:66:2e:28:81:e1:e3:fd:78:45:4f:08: d4:bd:6e:4e:a0:91:cc:63:3f:ed:b7:9e:a2:d0:e4:f4:02:f6: 49:39:04:09:32:c3:00:8c:90:24:07:bb:ff:92:68:3e:3b:61: c3:9d:1f:9b:e3:13:1e:41:31:97:c1:cb:c5:cd:65:bd:eb:d4: 9d:20:6b:03:78:bb:86:6d:b8:9a:8b:7e:a3:1e:29:6c:e0:36: 21:88:bb:2d:40:20:b0:8e:93:18:b8:c6:d3:08:85:08:9f:88: a2:26:2e:02:93:f5:f5:60:cf:ad:7d:20:b3:4e:02:0e:24:c3: 57:62:29:d4:5d:3b:2a:42:a8:6b:ed:17:a8:ca:71:f4:2b:8f: f0:f1:89:0a:4f:bc:0d:43:6f:7b:f8:04:d0:79:6c:86:4c:e4: 18:71:55:20:b5:d9:d9:7c:02:60:24:0d:5d:38:b8:fc:46:73: 29:0f:89:14:74:e0:bc:62:d8:6d:f7:a7:51:b2:cd:50:9a:32: 49:ce:fb:9b:fc:06:6a:95:8c:77:ed:65:09:81:7c:d4:33:a9: 49:ba:9c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6uCO+GcmMOZ4PmMa/WSHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm Y2M1ZTIwHhcNMjYwMTAxMTgwMDQ2WhcNMjYwMTAyMTgwMDQ2WjAzMTEwLwYDVQQD EyhiMDQ4OWFjZjU1ZTA2MGI4Zjc4NTdiYjdlY2UxZjc5ZWM5MzcxMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkytceBbTtrZsQkmk/YY3b1FD+Ae dVslPhndqjuMkMrIyHQEc/14etgC2o0czaHUagpZETMHXXJsb2lKLoaXtsOHvC2P N7rUWH3Wf+DybeHPgbP4VmHo4NPY7D7w2WMXEUVZP8spuy+DI2JenLJRRfiyEx9A RzLgWauvnlmiFVyLTt5pPTgcUfWQkc0FgqH8z4jE4KhOj7BRDjiBsgRxz/0GTTJj P1hHPvUh98lJyZUv2wkIpIC9yLFh++XAzj/j+36AgW+tb6gWTknZlvWNB+Yl+Q3m vIjX6adS2Oz82q8CGzWJlitiiX0at43rrPIySZcS4geh/r7KadnclV0TWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBIms9V4GC494V7t+zh957JNxKNMB8GA1UdIwQY MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXe+/P/L loITIQuKivca7FB+b8MUZRoxApKPsAGVK+KrOxPnB6yaysCrZ2YuKIHh4/14RU8I 1L1uTqCRzGM/7beeotDk9AL2STkECTLDAIyQJAe7/5JoPjthw50fm+MTHkExl8HL xc1lvevUnSBrA3i7hm24mot+ox4pbOA2IYi7LUAgsI6TGLjG0wiFCJ+IoiYuApP1 9WDPrX0gs04CDiTDV2Ip1F07KkKoa+0XqMpx9CuP8PGJCk+8DUNve/gE0Hlshkzk GHFVILXZ2XwCYCQNXTi4/EZzKQ+JFHTgvGLYbfenUbLNUJoySc77m/wGapWMd+1l CYF81DOpSbqcmg== -----END CERTIFICATE-----Generated at Thu Jan 1 22:59:44 2026 by rpki-client