This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json) Hash identifier: fP2XVQxYSXsUrHjSMHhZDJwhw65vUOF83ygVNCE7B/4= Subject key identifier: 66:84:CC:29:6E:2F:37:A6:8E:90:78:D1:EA:0B:8C:4D:2E:6A:28:53 Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Certificate serial: 019B43928A460B6236579B01B65BF9C048DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 01:00:35 +0000 Manifest this update: Mon 22 Dec 2025 01:00:35 +0000 Manifest next update: Tue 23 Dec 2025 01:00:35 +0000 Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: CPMorode2hrCBmzYN7UviiGE3UFzkgHDTKlUrn+ts8E=) 2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:8a:46:0b:62:36:57:9b:01:b6:5b:f9:c0:48:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Validity Not Before: Dec 22 01:00:35 2025 GMT Not After : Dec 23 01:00:35 2025 GMT Subject: CN=6684cc296e2f37a68e9078d1ea0b8c4d2e6a2853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:c0:3d:d2:e2:40:d2:e2:ba:f1:66:58:4a: cb:81:d8:f8:18:33:41:91:56:b5:97:37:1e:87:ec: 94:c9:12:dc:43:56:cd:55:31:58:d2:93:b9:c3:c7: ca:12:b5:4f:30:c5:5d:52:f9:65:57:da:85:01:53: 85:ec:58:e2:c2:5f:54:da:90:96:a9:7f:7f:06:0e: 92:8e:c2:e8:e4:7c:5f:b3:0a:1a:a5:a9:3f:22:75: 69:fe:bd:75:15:7a:81:ed:8b:0c:50:cd:0a:8f:7e: c4:f0:cd:cd:e5:33:75:25:7c:1e:82:51:4c:f5:df: 93:4c:50:59:23:bb:4c:0f:c3:d7:be:60:a8:bc:c9: 58:11:2a:c8:25:c8:01:ac:07:4b:24:d4:84:72:3d: 41:f2:59:83:3f:a1:71:cb:a1:1f:35:71:7d:52:77: d0:2c:35:54:5e:25:92:aa:b1:33:2c:ec:39:fc:ed: 34:45:74:a1:69:05:5e:b9:6b:de:1a:2b:0a:50:bf: 09:2c:5d:fd:fa:48:07:49:f0:16:ba:c9:ee:34:3c: 91:ee:83:2b:7b:ba:79:14:2d:b8:ac:d2:2a:af:84: 44:0d:fa:d1:0e:03:f5:0a:73:da:bc:c5:ce:99:bb: 59:cd:81:38:df:dc:d8:a0:77:5e:b2:3e:f9:82:97: 6d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:84:CC:29:6E:2F:37:A6:8E:90:78:D1:EA:0B:8C:4D:2E:6A:28:53 X509v3 Authority Key Identifier: keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b8:2e:03:21:0b:7e:5d:8f:2e:29:be:a9:6d:fc:9d:d5:1e: fb:93:30:45:43:45:2d:7d:29:f1:72:68:4f:a5:87:70:5a:bf: 6e:81:9c:03:ce:99:06:13:10:64:5b:df:fb:1d:44:75:f3:5b: 34:46:5d:80:e9:05:8d:99:62:99:6a:91:c9:a1:f3:d7:11:bb: 97:51:40:12:46:4f:90:47:c4:51:94:8d:c7:b0:86:7d:52:25: d7:03:36:eb:d9:11:ac:82:3d:15:fc:f3:a5:04:b8:3e:4f:82: bf:72:95:5f:32:a6:74:78:46:b4:1f:01:e0:93:7e:88:e6:ce: 17:f2:8a:00:49:5c:bf:77:f4:d3:2a:42:62:b1:fd:7b:d1:e6: d6:90:d4:0b:50:c2:a9:9b:bd:ca:d6:80:cf:ad:f2:7f:e0:55: c1:f9:00:2f:c7:77:49:f0:17:f9:6e:f3:08:43:de:7f:60:e9: fc:f4:46:24:5c:5e:45:73:b2:43:2e:6a:50:64:a3:0d:13:72: 3a:df:61:e8:50:74:fc:88:f1:bc:12:9d:1f:c0:11:74:63:84: 76:cc:65:4d:02:9d:96:e8:3d:83:44:74:7e:1d:23:66:b9:62: 4f:46:b2:ac:18:71:3e:23:d3:d4:05:0a:54:fd:70:b4:7a:ed: 44:2b:18:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkopGC2I2V5sBtlv5wEjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl NDM3OTMwHhcNMjUxMjIyMDEwMDM1WhcNMjUxMjIzMDEwMDM1WjAzMTEwLwYDVQQD Eyg2Njg0Y2MyOTZlMmYzN2E2OGU5MDc4ZDFlYTBiOGM0ZDJlNmEyODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraDAPdLiQNLiuvFmWErLgdj4GDNB kVa1lzceh+yUyRLcQ1bNVTFY0pO5w8fKErVPMMVdUvllV9qFAVOF7Fjiwl9U2pCW qX9/Bg6SjsLo5Hxfswoapak/InVp/r11FXqB7YsMUM0Kj37E8M3N5TN1JXweglFM 9d+TTFBZI7tMD8PXvmCovMlYESrIJcgBrAdLJNSEcj1B8lmDP6Fxy6EfNXF9UnfQ LDVUXiWSqrEzLOw5/O00RXShaQVeuWveGisKUL8JLF39+kgHSfAWusnuNDyR7oMr e7p5FC24rNIqr4REDfrRDgP1CnPavMXOmbtZzYE439zYoHdesj75gpdtEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaEzCluLzemjpB40eoLjE0uaihTMB8GA1UdIwQY MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4 LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrguAyEL fl2PLim+qW38ndUe+5MwRUNFLX0p8XJoT6WHcFq/boGcA86ZBhMQZFvf+x1EdfNb NEZdgOkFjZlimWqRyaHz1xG7l1FAEkZPkEfEUZSNx7CGfVIl1wM269kRrII9Ffzz pQS4Pk+Cv3KVXzKmdHhGtB8B4JN+iObOF/KKAElcv3f00ypCYrH9e9Hm1pDUC1DC qZu9ytaAz63yf+BVwfkAL8d3SfAX+W7zCEPef2Dp/PRGJFxeRXOyQy5qUGSjDRNy Ot9h6FB0/IjxvBKdH8ARdGOEdsxlTQKdlug9g0R0fh0jZrliT0ayrBhxPiPT1AUK VP1wtHrtRCsY5Q== -----END CERTIFICATE-----Generated at Mon Dec 22 10:37:11 2025 by rpki-client