This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json) Hash identifier: RQRqWxTQbK+VNg+WMmYJV37c7F6AOIxkkudNFZa0dqE= Subject key identifier: 45:65:AE:AF:27:08:D8:68:CC:2C:FD:CA:44:4E:F0:34:26:4B:10:D7 Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a Certificate serial: 019B42491858D928DB07D88B4164BCC6015F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft Manifest number: 137F Signing time: Sun 21 Dec 2025 19:00:45 +0000 Manifest this update: Sun 21 Dec 2025 19:00:45 +0000 Manifest next update: Mon 22 Dec 2025 19:00:45 +0000 Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=) 2: ODB5K147usnzcNTK56uipc26ego.crl (hash: D+MHQXK9J6CEzZF9PjwtGFSoCF1Kzoe0bgFaqPltmTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:18:58:d9:28:db:07:d8:8b:41:64:bc:c6:01:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a Validity Not Before: Dec 21 19:00:45 2025 GMT Not After : Dec 22 19:00:45 2025 GMT Subject: CN=4565aeaf2708d868cc2cfdca444ef034264b10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:11:72:55:b4:fd:ae:17:fe:9e:fc:cb:b5: da:f8:3f:7e:2e:c7:88:c8:2d:93:b7:2a:7e:b5:a9: 71:40:3f:aa:d7:cf:21:6d:1c:09:8b:af:c6:d5:13: e2:9c:01:ac:20:ad:5f:0b:5a:84:80:17:cb:9d:44: be:c2:ad:7d:6b:6d:0b:f0:b7:f6:f9:7b:22:e2:9b: ba:70:8d:f7:7b:79:99:81:ea:7b:c1:c5:8e:ce:ee: 5d:cb:5f:ed:8b:cd:a8:a8:b6:00:14:e2:a4:45:7b: 7b:d9:c9:9b:00:24:8a:f2:ac:d6:d4:f9:13:ab:ba: a3:d6:a9:56:9e:57:4b:f3:16:ca:a6:c0:e7:4a:ee: 64:69:83:37:64:d9:77:ef:4a:b3:85:ba:53:78:6c: f7:c6:43:af:cf:c8:61:c4:39:ed:5a:19:1f:a3:94: 95:95:97:81:6a:4c:d2:c4:ea:1f:e8:8a:7b:f4:9a: 2d:bd:93:51:5b:17:fd:31:74:0c:84:f3:4a:f3:71: ff:90:31:65:6d:88:0d:2c:89:c3:83:06:30:81:cf: ba:83:99:c6:5d:29:40:93:47:3d:1e:2b:8f:aa:43: a7:fa:d7:5b:b1:d3:12:94:e4:52:be:8d:29:56:95: 62:c7:de:4d:b3:12:e4:22:cd:f1:c1:d4:b9:78:a0: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:AE:AF:27:08:D8:68:CC:2C:FD:CA:44:4E:F0:34:26:4B:10:D7 X509v3 Authority Key Identifier: keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:fa:8d:72:f5:88:2e:82:7e:1d:85:cf:e2:5d:e9:2a:0d: e3:30:96:aa:dd:aa:68:68:4b:25:2d:cf:de:50:5a:0a:f4:7e: fd:0a:05:1f:ba:3e:0a:61:66:8b:20:41:7f:e6:3a:06:31:84: ec:cb:bb:2b:58:1b:b6:cb:9d:2a:94:72:5b:30:1a:c3:4d:af: 49:81:80:e9:de:0e:90:12:49:da:f5:74:a3:dd:7b:8d:cd:29: 85:4e:c7:0a:4d:0e:a6:16:4b:0b:22:bc:26:82:82:f1:a9:5f: 95:0e:b2:85:c4:cc:96:3f:3e:57:a8:bc:8b:70:cc:be:bd:80: 83:4d:16:8b:e1:db:5b:c8:24:53:a8:ca:3e:4c:5c:7f:88:7b: 5b:b2:e7:e7:e3:1e:c8:72:e5:a2:a1:57:8e:3a:93:2e:af:92: a7:55:f4:d2:1a:c8:9d:9a:4d:39:01:92:31:f6:3e:b7:b4:e9: 76:88:fd:d9:cd:b9:b6:1e:26:63:f0:1b:20:7d:1a:3f:e2:03: e0:5a:f5:b8:cb:5a:56:20:55:d5:09:84:32:60:83:5a:d1:7c: d0:be:94:87:ac:d3:94:46:ac:07:92:e0:b6:d7:bf:5e:2c:26: 97:b4:65:23:ea:f9:d3:7f:b9:29:28:7f:bb:40:01:b2:f5:dd: 3c:fa:5c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSRhY2SjbB9iLQWS8xgFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzA3OTJiNWUzYmJhYzlmMzcwZDRjYWU3YWJhMmE1Y2Ri YTdhMGEwHhcNMjUxMjIxMTkwMDQ1WhcNMjUxMjIyMTkwMDQ1WjAzMTEwLwYDVQQD Eyg0NTY1YWVhZjI3MDhkODY4Y2MyY2ZkY2E0NDRlZjAzNDI2NGIxMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxwRclW0/a4X/p78y7Xa+D9+LseI yC2Ttyp+talxQD+q188hbRwJi6/G1RPinAGsIK1fC1qEgBfLnUS+wq19a20L8Lf2 +Xsi4pu6cI33e3mZgep7wcWOzu5dy1/ti82oqLYAFOKkRXt72cmbACSK8qzW1PkT q7qj1qlWnldL8xbKpsDnSu5kaYM3ZNl370qzhbpTeGz3xkOvz8hhxDntWhkfo5SV lZeBakzSxOof6Ip79JotvZNRWxf9MXQMhPNK83H/kDFlbYgNLInDgwYwgc+6g5nG XSlAk0c9HiuPqkOn+tdbsdMSlORSvo0pVpVix95NsxLkIs3xwdS5eKCr+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVlrq8nCNhozCz9ykRO8DQmSxDXMB8GA1UdIwQY MBaAFDgweSteO7rJ83DUyueroqXNunoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjkt MWJmZmE3NGEzYjFkLzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjktMWJmZmE3NGEzYjFk LzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqv6jXL1 iC6Cfh2Fz+Jd6SoN4zCWqt2qaGhLJS3P3lBaCvR+/QoFH7o+CmFmiyBBf+Y6BjGE 7Mu7K1gbtsudKpRyWzAaw02vSYGA6d4OkBJJ2vV0o917jc0phU7HCk0OphZLCyK8 JoKC8alflQ6yhcTMlj8+V6i8i3DMvr2Ag00Wi+HbW8gkU6jKPkxcf4h7W7Ln5+Me yHLloqFXjjqTLq+Sp1X00hrInZpNOQGSMfY+t7Tpdoj92c25th4mY/AbIH0aP+ID 4Fr1uMtaViBV1QmEMmCDWtF80L6Uh6zTlEasB5Lgtte/Xiwml7RlI+r503+5KSh/ u0ABsvXdPPpcEg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:03:57 2025 by rpki-client