This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json) Hash identifier: sxq3/iubT6gpXth/ymxwUEeS1ArgOASYUeGT7h31kwU= Subject key identifier: 98:72:DD:F5:53:58:AF:2A:3B:8C:CB:C9:97:2C:9D:20:75:D8:09:61 Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Certificate serial: 019B661F1E77945C3FE88E3E97F23140AAA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft Manifest number: 1199 Signing time: Sun 28 Dec 2025 18:01:13 +0000 Manifest this update: Sun 28 Dec 2025 18:01:13 +0000 Manifest next update: Mon 29 Dec 2025 18:01:13 +0000 Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: +l1mXJnWSvYqBN3l5dyVNe8WWrTy8nnFwhFrx+n5x7g=) 2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:1e:77:94:5c:3f:e8:8e:3e:97:f2:31:40:aa:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Validity Not Before: Dec 28 18:01:13 2025 GMT Not After : Dec 29 18:01:13 2025 GMT Subject: CN=9872ddf55358af2a3b8ccbc9972c9d2075d80961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:5b:de:d3:d3:31:5b:e8:77:c2:5b:a8:dc: 37:d0:9b:af:0d:63:dc:26:24:70:9d:bb:81:40:8b: 5f:8c:ca:13:26:09:23:1f:7f:41:d2:b9:18:31:22: b8:70:e0:f6:d8:a7:44:c0:73:ec:ed:7a:f8:ef:7b: 61:56:91:58:45:ee:d9:77:90:d0:7a:48:24:a3:71: 1a:41:ce:d3:32:e2:e7:f1:6a:4c:9a:98:99:0a:5f: 19:3c:37:7e:8b:99:74:f8:dc:3c:ec:28:ce:23:b9: 4d:af:56:3c:e3:d1:bb:4d:17:d9:d0:00:65:15:41: 69:77:18:ac:31:38:08:32:ae:50:b0:b9:97:e3:5c: 8c:fd:34:20:b2:2e:e7:b8:b9:18:7f:79:09:ea:38: 0b:f7:af:bc:86:8d:f6:d4:66:63:20:69:ff:e2:33: af:a0:92:42:33:3f:a9:2c:69:7a:a9:73:a4:6c:b6: 55:37:2e:44:f6:d9:04:b2:ec:9f:8f:32:83:38:2d: 75:aa:7f:3d:d6:83:69:2b:e8:75:39:03:2a:cd:9a: 5c:49:ad:f5:85:6b:d2:ba:f7:2f:7a:5e:0a:0b:fd: 1f:97:4c:5e:d8:15:96:c2:73:36:36:89:56:77:31: bf:59:c1:88:0f:01:99:03:b5:7e:77:a4:8d:b8:1b: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:72:DD:F5:53:58:AF:2A:3B:8C:CB:C9:97:2C:9D:20:75:D8:09:61 X509v3 Authority Key Identifier: keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:51:a2:06:7d:35:12:7f:52:33:c0:f7:24:d3:44:40:05:33: fd:79:b5:a5:ac:e3:fd:bf:12:c0:48:07:d8:a9:c5:a2:c4:98: 90:d6:11:10:c5:45:2d:33:21:2e:05:98:33:34:0f:1e:ca:9d: a6:42:e1:33:54:ee:e3:c3:6f:b4:50:98:f9:62:a2:d0:3d:72: d5:3f:b6:f2:32:96:12:37:0a:c3:05:bb:82:20:93:c2:be:cd: c6:12:dd:74:ff:30:1e:36:9c:02:f6:c1:db:a7:dd:42:b9:f3: fe:b1:a9:33:7e:57:6f:9e:26:37:e1:dc:2e:79:6f:61:71:a0: 6c:ad:fb:84:60:30:9b:3b:49:02:00:79:4d:c2:d8:27:3b:76: 6d:c4:2b:1d:62:a9:86:f3:b8:ff:eb:07:0d:f2:f0:24:f2:62: 7d:fe:02:5e:cf:34:db:03:74:63:66:c2:21:0a:d0:45:54:fa: 88:34:6f:8a:09:81:bb:d0:62:38:77:85:49:9e:ab:97:98:ee: 12:10:67:20:55:72:b7:75:db:2f:cc:58:c2:d2:ab:56:66:07: a9:e0:29:81:c5:63:4d:48:6b:a6:a0:80:86:ce:7b:4d:f6:79: b4:67:46:18:6e:88:35:80:9b:96:cf:1f:0c:61:64:b8:7f:94: a5:31:96:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHx53lFw/6I4+l/IxQKqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz Yjk5MmIwHhcNMjUxMjI4MTgwMTEzWhcNMjUxMjI5MTgwMTEzWjAzMTEwLwYDVQQD Eyg5ODcyZGRmNTUzNThhZjJhM2I4Y2NiYzk5NzJjOWQyMDc1ZDgwOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Jb3tPTMVvod8JbqNw30JuvDWPc JiRwnbuBQItfjMoTJgkjH39B0rkYMSK4cOD22KdEwHPs7Xr473thVpFYRe7Zd5DQ ekgko3EaQc7TMuLn8WpMmpiZCl8ZPDd+i5l0+Nw87CjOI7lNr1Y849G7TRfZ0ABl FUFpdxisMTgIMq5QsLmX41yM/TQgsi7nuLkYf3kJ6jgL96+8ho321GZjIGn/4jOv oJJCMz+pLGl6qXOkbLZVNy5E9tkEsuyfjzKDOC11qn891oNpK+h1OQMqzZpcSa31 hWvSuvcvel4KC/0fl0xe2BWWwnM2NolWdzG/WcGIDwGZA7V+d6SNuBvqaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhy3fVTWK8qO4zLyZcsnSB12AlhMB8GA1UdIwQY MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt NWUzMGI4NmZkMWFiLzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlGiBn01 En9SM8D3JNNEQAUz/Xm1pazj/b8SwEgH2KnFosSYkNYREMVFLTMhLgWYMzQPHsqd pkLhM1Tu48NvtFCY+WKi0D1y1T+28jKWEjcKwwW7giCTwr7NxhLddP8wHjacAvbB 26fdQrnz/rGpM35Xb54mN+HcLnlvYXGgbK37hGAwmztJAgB5TcLYJzt2bcQrHWKp hvO4/+sHDfLwJPJiff4CXs802wN0Y2bCIQrQRVT6iDRvigmBu9BiOHeFSZ6rl5ju EhBnIFVyt3XbL8xYwtKrVmYHqeApgcVjTUhrpqCAhs57TfZ5tGdGGG6INYCbls8f DGFkuH+UpTGWfg== -----END CERTIFICATE-----Generated at Sun Dec 28 18:53:07 2025 by rpki-client