This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json) Hash identifier: 2ceDwRokpgJm8pRZyjV0yDNdLqU7lQcpxCv7LBWKDeE= Subject key identifier: A6:4A:EB:B6:C8:CD:C4:99:B5:AB:34:1B:F0:1E:F6:97:F3:B2:CC:E2 Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Certificate serial: 019B53AABF6E68CA75D3DA3B17F2010A02CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft Manifest number: 0B39 Signing time: Thu 25 Dec 2025 04:00:57 +0000 Manifest this update: Thu 25 Dec 2025 04:00:57 +0000 Manifest next update: Fri 26 Dec 2025 04:00:57 +0000 Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: aIfRvu1vsOBwotpW9oju2yJlTDOihma1yBnCztAqOFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:bf:6e:68:ca:75:d3:da:3b:17:f2:01:0a:02:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Validity Not Before: Dec 25 04:00:57 2025 GMT Not After : Dec 26 04:00:57 2025 GMT Subject: CN=a64aebb6c8cdc499b5ab341bf01ef697f3b2cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:87:79:43:88:b5:6b:fa:89:18:5c:19:a5: 6f:ef:da:3f:01:1e:2d:60:21:7a:23:37:02:b1:84: 73:1e:04:24:0a:c6:16:a7:b0:71:d7:03:5e:cc:66: f5:24:4c:8e:a0:d8:0f:72:e0:8c:5b:e1:5a:d8:c7: 24:68:b5:ef:0a:7f:1e:5c:7c:6d:fb:62:51:be:66: c4:7d:0f:be:a1:a9:20:40:50:33:db:f4:ec:16:71: 4f:ed:43:17:d3:f4:0d:89:bd:1d:9d:d9:de:7a:d6: fc:7a:c1:89:44:3e:6f:1f:bd:9f:56:6a:68:c8:96: 03:e9:45:a5:c0:2d:ff:02:47:89:b9:65:82:06:74: ca:56:c5:98:ea:7f:1e:28:88:26:3e:83:3f:05:5c: b3:3d:7f:12:92:15:22:e1:30:f3:2f:fa:99:0e:48: 3e:5e:ab:02:39:11:fe:1d:05:e5:cb:6e:df:21:fb: 73:e4:52:8c:5d:04:16:16:cd:e2:3b:cd:16:15:45: 22:dd:01:06:08:6e:66:9a:28:d4:19:b7:4f:43:87: 8f:fd:f9:33:07:66:bd:c2:05:b3:80:47:39:13:1d: 2a:91:1a:be:a8:dc:4d:d0:65:db:2f:70:fd:dd:4c: 49:1a:18:df:10:c1:84:c6:fa:ec:a6:fa:cf:8f:9e: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4A:EB:B6:C8:CD:C4:99:B5:AB:34:1B:F0:1E:F6:97:F3:B2:CC:E2 X509v3 Authority Key Identifier: keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:da:02:bb:5d:a1:f9:42:cc:af:c7:b8:fc:5f:8a:84:27:b0: fe:cc:b3:19:d0:aa:e8:06:cf:d5:b1:1a:43:8f:3d:92:9f:cc: 97:87:20:01:4f:b3:42:6a:a3:60:85:57:99:ee:2b:8f:2c:74: 66:95:2c:7d:01:51:f0:fd:45:e0:64:5c:dc:d7:b3:b6:9b:6a: 88:3f:e2:1d:71:50:86:89:7a:ef:eb:08:b4:09:1a:c9:c5:e2: 87:b5:76:21:92:e7:7b:d3:ca:bf:c1:14:18:48:30:91:a4:74: 16:56:93:b2:a3:ad:62:1b:9c:93:5e:08:76:df:82:66:19:85: dd:01:fa:28:3e:32:1a:53:95:89:53:ce:38:05:75:48:fd:a1: fb:51:a3:a0:ca:46:54:e7:31:57:71:79:bf:4d:cc:7e:9c:95: 1e:bd:36:2a:0d:f7:1c:e1:1b:b6:32:dd:01:fc:4e:11:39:cf: 29:f6:60:6c:e1:85:24:b2:26:27:eb:7f:cc:b8:79:54:d7:76: dc:d0:11:5a:e1:c9:01:7b:be:59:ed:be:53:5b:4a:ce:9b:4e: 05:30:9c:cc:31:5e:d3:48:cc:49:72:b3:1e:65:6a:b4:30:77: 90:1d:09:70:a6:81:8c:9a:17:a2:1b:c3:78:66:8c:7b:c9:e8: 02:29:0e:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqr9uaMp109o7F/IBCgLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzQwZmY2NjlhM2FkYzlkNjY5NjEzNWM4ZDcxZjZkZjVl YWMyN2IwHhcNMjUxMjI1MDQwMDU3WhcNMjUxMjI2MDQwMDU3WjAzMTEwLwYDVQQD EyhhNjRhZWJiNmM4Y2RjNDk5YjVhYjM0MWJmMDFlZjY5N2YzYjJjY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8uHeUOItWv6iRhcGaVv79o/AR4t YCF6IzcCsYRzHgQkCsYWp7Bx1wNezGb1JEyOoNgPcuCMW+Fa2MckaLXvCn8eXHxt +2JRvmbEfQ++oakgQFAz2/TsFnFP7UMX0/QNib0dndneetb8esGJRD5vH72fVmpo yJYD6UWlwC3/AkeJuWWCBnTKVsWY6n8eKIgmPoM/BVyzPX8SkhUi4TDzL/qZDkg+ XqsCORH+HQXly27fIftz5FKMXQQWFs3iO80WFUUi3QEGCG5mmijUGbdPQ4eP/fkz B2a9wgWzgEc5Ex0qkRq+qNxN0GXbL3D93UxJGhjfEMGExvrspvrPj55c9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZK67bIzcSZtas0G/Ae9pfzssziMB8GA1UdIwQY MBaAFDg0D/Zpo63J1mlhNcjXH2316sJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2Mt Mjg0NmVhYWRkZTY3LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2MtMjg0NmVhYWRkZTY3 LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitoCu12h +ULMr8e4/F+KhCew/syzGdCq6AbP1bEaQ489kp/Ml4cgAU+zQmqjYIVXme4rjyx0 ZpUsfQFR8P1F4GRc3NeztptqiD/iHXFQhol67+sItAkaycXih7V2IZLne9PKv8EU GEgwkaR0FlaTsqOtYhuck14Idt+CZhmF3QH6KD4yGlOViVPOOAV1SP2h+1GjoMpG VOcxV3F5v03MfpyVHr02Kg33HOEbtjLdAfxOETnPKfZgbOGFJLImJ+t/zLh5VNd2 3NARWuHJAXu+We2+U1tKzptOBTCczDFe00jMSXKzHmVqtDB3kB0JcKaBjJoXohvD eGaMe8noAikOpw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:04 2025 by rpki-client