This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json) Hash identifier: Vm+ovhodP56pLaIu9Qrw8Uajdtb5KL9vYf/LYdVgAaM= Subject key identifier: 9F:5D:D0:80:8F:34:20:4D:98:89:17:AD:8C:0F:DA:54:C8:6E:B0:40 Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Certificate serial: 019B37FCA54D832A2A6BAAD6057FD17756A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft Manifest number: 06D2 Signing time: Fri 19 Dec 2025 19:01:02 +0000 Manifest this update: Fri 19 Dec 2025 19:01:02 +0000 Manifest next update: Sat 20 Dec 2025 19:01:02 +0000 Files and hashes: 1: InB_IX31uvHxMubFeh7gf9PNz5I.roa (hash: GynuEhjsTsyBFx3Fyz2fqy0AYWXC0AnBi+qBO5MvYRk=) 2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: eUC3Yy/8t6IeY58EtiN5d5BOJjC+a7yaXU76SFMZfAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:a5:4d:83:2a:2a:6b:aa:d6:05:7f:d1:77:56:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Validity Not Before: Dec 19 19:01:02 2025 GMT Not After : Dec 20 19:01:02 2025 GMT Subject: CN=9f5dd0808f34204d988917ad8c0fda54c86eb040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:f9:4f:7e:8f:94:c6:39:29:71:48:14:09: 3b:36:42:b2:73:51:4d:8a:2e:d5:0d:2a:5f:0a:1e: 2d:08:de:78:aa:24:28:c3:04:7f:15:5f:30:3f:42: 22:a8:39:61:9a:14:21:f2:67:1d:2a:13:1a:69:f1: 96:b0:e0:f2:30:e6:b1:72:8a:3b:27:8a:37:93:78: 8b:da:fe:0c:86:ca:06:42:11:5f:ed:3e:2d:01:95: df:5b:42:f1:0a:b7:d9:bc:9d:57:03:99:3b:25:14: 9e:4a:a7:6c:0e:e8:d4:c2:eb:55:3c:2c:e0:a6:d4: e2:f4:ea:24:2e:31:25:f9:e9:45:88:a4:3d:a9:f1: 53:40:8e:7d:72:d5:63:05:e8:ee:45:21:0b:74:86: 71:2d:8f:2d:a3:3a:ae:54:bc:76:fd:68:7f:76:48: 15:90:bb:de:36:4e:e6:cb:3b:cf:25:92:df:e2:7b: 4b:b2:bf:dd:8f:ce:b5:fe:5a:c7:c6:f9:4e:e7:29: 17:60:e8:6a:29:18:f7:7b:73:4f:8b:dc:c6:c1:81: e5:ff:1d:50:88:e3:00:37:f4:38:9c:9e:1f:a7:75: 5d:f2:5d:92:2a:5c:9e:37:e3:85:a3:68:c3:2d:83: 6b:7c:33:bf:95:37:7d:7c:73:dd:93:cd:4e:f0:fa: 0c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:D0:80:8F:34:20:4D:98:89:17:AD:8C:0F:DA:54:C8:6E:B0:40 X509v3 Authority Key Identifier: keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2a:8d:e8:fd:c2:68:43:6e:77:da:77:64:44:23:c9:07:44: 70:0e:ef:65:2c:4e:16:48:26:57:f1:26:a5:83:a5:81:f7:37: 33:d1:96:94:be:3b:16:d2:e1:09:ad:9d:7c:fb:78:f0:5e:bd: a9:53:af:75:9f:6d:3d:b0:4e:f0:98:77:2e:c6:41:c3:d1:1a: d5:e6:8f:ee:7d:22:6b:2b:c2:91:26:e8:22:d0:54:ed:24:c3: 76:62:c4:d3:32:6f:fa:60:db:c8:67:5f:28:7a:92:ac:8d:27: a4:74:f2:2e:aa:4d:23:31:cd:5c:74:54:64:98:95:86:33:c5: db:e2:6b:a3:aa:11:1e:f0:34:2b:2c:95:7b:bb:2b:eb:2c:89: ca:db:17:67:5e:6a:9b:47:a9:62:3f:a7:8e:45:07:c0:e0:ea: 36:85:e6:18:8e:d2:26:96:8f:33:6b:9c:06:c8:ee:c5:6e:98: c3:2f:e8:21:fc:3e:2d:fd:08:7a:2c:7b:ae:70:f0:8a:b6:75: 2e:29:3d:e4:af:ea:e0:6c:5f:eb:e7:d3:f5:03:c5:57:8c:e6: 39:42:f6:0f:72:4f:8e:6c:94:3d:ea:da:1f:05:c1:e0:e9:91: 41:92:6a:22:59:a3:96:0c:bb:c1:e3:3a:de:aa:7b:a9:38:e5: f2:47:4e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/KVNgyoqa6rWBX/Rd1akMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1 NDE5MWIwHhcNMjUxMjE5MTkwMTAyWhcNMjUxMjIwMTkwMTAyWjAzMTEwLwYDVQQD Eyg5ZjVkZDA4MDhmMzQyMDRkOTg4OTE3YWQ4YzBmZGE1NGM4NmViMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufX5T36PlMY5KXFIFAk7NkKyc1FN ii7VDSpfCh4tCN54qiQowwR/FV8wP0IiqDlhmhQh8mcdKhMaafGWsODyMOaxcoo7 J4o3k3iL2v4MhsoGQhFf7T4tAZXfW0LxCrfZvJ1XA5k7JRSeSqdsDujUwutVPCzg ptTi9OokLjEl+elFiKQ9qfFTQI59ctVjBejuRSELdIZxLY8tozquVLx2/Wh/dkgV kLveNk7myzvPJZLf4ntLsr/dj861/lrHxvlO5ykXYOhqKRj3e3NPi9zGwYHl/x1Q iOMAN/Q4nJ4fp3Vd8l2SKlyeN+OFo2jDLYNrfDO/lTd9fHPdk81O8PoM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9d0ICPNCBNmIkXrYwP2lTIbrBAMB8GA1UdIwQY MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt M2UwNmEwMTgyNjE0LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0 LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniqN6P3C aENud9p3ZEQjyQdEcA7vZSxOFkgmV/EmpYOlgfc3M9GWlL47FtLhCa2dfPt48F69 qVOvdZ9tPbBO8Jh3LsZBw9Ea1eaP7n0iayvCkSboItBU7STDdmLE0zJv+mDbyGdf KHqSrI0npHTyLqpNIzHNXHRUZJiVhjPF2+Jro6oRHvA0KyyVe7sr6yyJytsXZ15q m0epYj+njkUHwODqNoXmGI7SJpaPM2ucBsjuxW6Ywy/oIfw+Lf0Ieix7rnDwirZ1 Lik95K/q4Gxf6+fT9QPFV4zmOUL2D3JPjmyUPeraHwXB4OmRQZJqIlmjlgy7weM6 3qp7qTjl8kdOXw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:39 2025 by rpki-client