This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft File: OdAejKCv5BTBV-H7-1OUhnzlHts.mft (raw, json) Hash identifier: L8aHWEBwVB870cSOPoq1Diq6RSd65Cj5n4TbhmCVSq8= Subject key identifier: 0A:85:E0:C4:6F:55:47:73:54:AC:4B:51:78:E3:EE:1C:56:B7:DE:E1 Authority key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB Certificate issuer: /CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Certificate serial: 019B48F09154F00ACFB9038671DB73413378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft Manifest number: 57 Signing time: Tue 23 Dec 2025 02:01:23 +0000 Manifest this update: Tue 23 Dec 2025 02:01:23 +0000 Manifest next update: Wed 24 Dec 2025 02:01:23 +0000 Files and hashes: 1: 2G4Xf8pLqEWjirvogul_LDd5FPI.roa (hash: /5ZBPi9hR3OWcYF4JvFkWR9sLIrIvmMOKZx6ycQkpcU=) 2: OdAejKCv5BTBV-H7-1OUhnzlHts.crl (hash: Qkn8DeS0EjngxxBj/EZaPXFpRiwzDWnFOKzixUdTTKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:91:54:f0:0a:cf:b9:03:86:71:db:73:41:33:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Validity Not Before: Dec 23 02:01:23 2025 GMT Not After : Dec 24 02:01:23 2025 GMT Subject: CN=0a85e0c46f55477354ac4b5178e3ee1c56b7dee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:a9:14:c0:16:bf:5b:9c:c4:72:31:85:76: 2b:73:72:83:37:20:48:4d:4f:31:63:15:89:a6:ec: 84:db:65:d8:62:50:b6:f2:cf:a0:7d:a4:cd:64:fa: 86:4f:3e:8b:95:da:ef:d8:ec:8b:72:c0:01:4b:c1: 5b:26:9e:6e:bd:54:0b:f2:d8:0a:19:89:2d:d1:a3: 75:25:6d:3f:f1:c6:91:2f:01:05:84:97:fd:3b:b4: f4:6b:22:6e:ed:fd:5c:d5:39:fe:e0:6e:3b:8a:2c: f3:56:dd:26:be:fe:23:d3:4a:21:23:28:d1:d3:87: 61:49:3f:6b:d4:c4:f8:ee:d8:c3:1e:27:4d:91:d1: 72:35:80:da:76:aa:4d:a1:37:99:70:82:05:90:42: 89:ac:5f:5a:ae:28:42:23:d1:ac:02:d6:05:02:28: 29:f1:42:af:65:e5:44:aa:10:a2:0d:d2:e4:92:d7: 1f:21:f5:84:84:26:fa:ef:d0:3d:54:07:23:6d:21: a1:41:be:39:41:fb:e8:86:f7:8e:07:c4:b5:52:9a: 6c:62:bb:34:a7:8c:82:bd:09:6f:41:7c:54:35:85: c3:e3:9b:70:24:20:be:f9:d6:5a:ba:42:f8:e9:60: d0:36:52:9e:e9:0b:b0:e7:04:1d:d7:27:dd:5a:8b: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:85:E0:C4:6F:55:47:73:54:AC:4B:51:78:E3:EE:1C:56:B7:DE:E1 X509v3 Authority Key Identifier: keyid:39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e2:43:3b:09:c5:e8:fe:45:cd:aa:ca:65:d3:4a:3e:9d:61: 36:ad:08:fa:9e:f1:70:97:f4:de:7b:a8:0f:f7:23:73:d3:e0: 37:df:66:68:05:1e:ca:af:2b:04:03:96:c0:56:db:8b:73:db: d2:7e:a0:cc:cc:24:69:fe:37:07:5a:06:68:84:62:34:16:a1: 7a:7a:d6:d9:5d:d8:5b:d9:1c:44:50:f9:49:66:71:bb:e9:c9: e1:c7:db:d5:c2:7d:96:98:18:fe:32:27:c3:94:d0:5e:bc:da: 1b:54:c7:4a:79:5d:f4:94:a3:1e:04:e5:dc:31:a3:ea:40:3b: f9:b0:29:1b:ed:44:83:fa:c8:bd:41:4e:c6:a7:a9:9d:b9:58: 2f:12:01:7d:41:c8:2b:63:45:ef:83:17:ef:83:2a:1f:00:32: a7:cd:69:ed:0b:d0:ea:4a:e7:9a:12:f8:aa:07:1e:e3:2d:63: 2e:85:09:83:d0:bb:97:46:f8:c6:d3:09:78:52:fd:03:a1:65: ac:9c:c6:40:f1:d6:69:fd:8b:8c:4e:e0:8c:f1:cd:62:56:6d: 00:61:34:b0:4a:7d:b5:47:1e:25:f4:a8:56:a0:ee:50:b6:86: d6:d8:68:7e:e5:4e:28:c2:af:65:b1:63:b3:9b:a3:72:81:24: 28:29:97:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8JFU8ArPuQOGcdtzQTN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZDAxZThjYTBhZmU0MTRjMTU3ZTFmYmZiNTM5NDg2N2Nl NTFlZGIwHhcNMjUxMjIzMDIwMTIzWhcNMjUxMjI0MDIwMTIzWjAzMTEwLwYDVQQD EygwYTg1ZTBjNDZmNTU0NzczNTRhYzRiNTE3OGUzZWUxYzU2YjdkZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOGpFMAWv1ucxHIxhXYrc3KDNyBI TU8xYxWJpuyE22XYYlC28s+gfaTNZPqGTz6Lldrv2OyLcsABS8FbJp5uvVQL8tgK GYkt0aN1JW0/8caRLwEFhJf9O7T0ayJu7f1c1Tn+4G47iizzVt0mvv4j00ohIyjR 04dhST9r1MT47tjDHidNkdFyNYDadqpNoTeZcIIFkEKJrF9arihCI9GsAtYFAigp 8UKvZeVEqhCiDdLkktcfIfWEhCb679A9VAcjbSGhQb45QfvohveOB8S1UppsYrs0 p4yCvQlvQXxUNYXD45twJCC++dZaukL46WDQNlKe6Quw5wQd1yfdWos/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqF4MRvVUdzVKxLUXjj7hxWt97hMB8GA1UdIwQY MBaAFDnQHoygr+QUwVfh+/tTlIZ85R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTIt MmU2MjQ2YzIxOWY3LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTItMmU2MjQ2YzIxOWY3 LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuJDOwnF 6P5FzarKZdNKPp1hNq0I+p7xcJf03nuoD/cjc9PgN99maAUeyq8rBAOWwFbbi3Pb 0n6gzMwkaf43B1oGaIRiNBahenrW2V3YW9kcRFD5SWZxu+nJ4cfb1cJ9lpgY/jIn w5TQXrzaG1THSnld9JSjHgTl3DGj6kA7+bApG+1Eg/rIvUFOxqepnblYLxIBfUHI K2NF74MX74MqHwAyp81p7QvQ6krnmhL4qgce4y1jLoUJg9C7l0b4xtMJeFL9A6Fl rJzGQPHWaf2LjE7gjPHNYlZtAGE0sEp9tUceJfSoVqDuULaG1thofuVOKMKvZbFj s5ujcoEkKCmXgQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:18:18 2025 by rpki-client