This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json) Hash identifier: piWB5uDAJDoGumYTogDjVMFNU/Qt54LemBekJT4vWfs= Subject key identifier: 07:FF:53:00:C1:A4:76:13:B9:00:2F:B0:A5:64:F4:26:91:A2:E3:3D Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb Certificate serial: 019B40FF9A336E81705521D515EA554FC12A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft Manifest number: 0369 Signing time: Sun 21 Dec 2025 13:00:51 +0000 Manifest this update: Sun 21 Dec 2025 13:00:51 +0000 Manifest next update: Mon 22 Dec 2025 13:00:51 +0000 Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: NjHrbl5eT9Se/rUcgUZcppjk1J5Fv6J5y/1LoixM1EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:9a:33:6e:81:70:55:21:d5:15:ea:55:4f:c1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb Validity Not Before: Dec 21 13:00:51 2025 GMT Not After : Dec 22 13:00:51 2025 GMT Subject: CN=07ff5300c1a47613b9002fb0a564f42691a2e33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:c5:44:61:8d:24:9d:d0:44:eb:3a:44:c7: 97:2f:99:d1:42:af:1a:78:b3:67:c1:3d:73:fc:56: ec:64:c6:cb:89:d7:1e:ed:7f:7b:dd:d1:d3:ac:c5: 00:d5:44:34:11:ab:5a:71:bc:55:17:43:54:59:1a: 7c:d3:58:47:7f:64:ba:38:4e:14:58:e6:42:09:91: 38:5b:52:b6:d6:10:76:59:e6:b8:97:3e:4f:eb:43: d7:79:16:c5:6f:bb:91:7d:62:97:cd:66:73:8e:94: 47:0d:7e:7f:62:1c:4b:b6:ab:1f:5b:5c:a9:a6:b6: 59:88:35:03:e8:99:e6:29:cd:89:43:a3:83:db:db: b7:02:86:80:06:a6:e1:28:7e:8b:42:e2:8b:1b:1a: 33:3a:8c:2a:ef:e0:39:d2:3c:43:30:1a:5a:db:1d: 76:f2:5d:9b:86:f9:2a:86:32:92:48:4a:cd:59:76: da:37:af:30:d1:e4:2f:ce:bb:cb:ba:0e:b7:f5:0e: 20:a8:91:e1:46:fe:69:5c:bd:ac:06:9b:15:9d:25: a5:f0:df:46:07:0a:f6:f1:38:60:39:37:52:85:6c: 73:2e:bc:20:ea:78:3e:40:04:cb:a0:83:47:1d:7f: 8d:e3:cb:45:ef:a3:aa:dc:38:3a:6c:58:e2:6c:19: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FF:53:00:C1:A4:76:13:B9:00:2F:B0:A5:64:F4:26:91:A2:E3:3D X509v3 Authority Key Identifier: keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9f:b5:4c:87:39:f1:02:e7:45:9e:f8:2f:58:47:e9:d3:5b: 9b:1e:cb:2d:fa:2c:0d:f6:e7:80:cb:74:c8:1e:b1:87:9c:f9: 8c:2d:ae:b7:7f:55:ed:67:14:9c:1e:61:a9:7e:1b:18:52:51: b9:dc:17:02:fc:09:13:5a:d2:87:5e:1a:7b:0e:4a:43:c0:52: 99:f6:aa:f8:75:d3:e4:21:a3:71:45:8e:bd:27:ae:7a:65:d2: e8:d2:db:c7:72:5b:d3:85:67:79:4d:c6:47:0c:fa:6f:69:fe: c9:97:8a:b0:84:62:9c:3f:bd:0b:ef:40:d4:10:f2:f2:2a:4e: 3d:f5:c8:9d:19:b6:42:3a:0c:e2:3a:ce:38:66:8e:2d:62:61: a6:5e:4f:a3:06:0a:b4:27:52:46:91:c4:1c:c0:07:7f:fb:3f: 52:7c:4f:ea:e1:ec:7b:1c:c3:0c:b3:e6:6d:70:0c:3d:bf:ca: df:d6:7d:af:db:ec:65:3a:aa:60:fb:1c:ec:4e:f6:b3:d0:b7: 3f:bf:f0:81:6b:ba:28:c1:fc:75:10:9c:31:e4:31:e2:a1:f4: 46:1b:6a:b9:e4:2a:ec:b0:e0:08:45:4e:ed:61:1a:56:06:f5: 2d:fd:be:cb:d9:2f:28:fa:b7:7f:6e:7c:7b:11:ca:ac:c9:e0: 80:71:b3:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/5ozboFwVSHVFepVT8EqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDE1NTI5YTQ1MWM5NWNjZDkzNGFjNTZlYzA5ZDUxODc1 MDY2Y2IwHhcNMjUxMjIxMTMwMDUxWhcNMjUxMjIyMTMwMDUxWjAzMTEwLwYDVQQD EygwN2ZmNTMwMGMxYTQ3NjEzYjkwMDJmYjBhNTY0ZjQyNjkxYTJlMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrXFRGGNJJ3QROs6RMeXL5nRQq8a eLNnwT1z/FbsZMbLidce7X973dHTrMUA1UQ0EatacbxVF0NUWRp801hHf2S6OE4U WOZCCZE4W1K21hB2Wea4lz5P60PXeRbFb7uRfWKXzWZzjpRHDX5/YhxLtqsfW1yp prZZiDUD6JnmKc2JQ6OD29u3AoaABqbhKH6LQuKLGxozOowq7+A50jxDMBpa2x12 8l2bhvkqhjKSSErNWXbaN68w0eQvzrvLug639Q4gqJHhRv5pXL2sBpsVnSWl8N9G Bwr28ThgOTdShWxzLrwg6ng+QATLoINHHX+N48tF76Oq3Dg6bFjibBl93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf/UwDBpHYTuQAvsKVk9CaRouM9MB8GA1UdIwQY MBaAFKHRVSmkUclczZNKxW7AnVGHUGbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjkt ZDZkZGFjZjZhM2VjLzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjktZDZkZGFjZjZhM2Vj LzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5+1TIc5 8QLnRZ74L1hH6dNbmx7LLfosDfbngMt0yB6xh5z5jC2ut39V7WcUnB5hqX4bGFJR udwXAvwJE1rSh14aew5KQ8BSmfaq+HXT5CGjcUWOvSeuemXS6NLbx3Jb04VneU3G Rwz6b2n+yZeKsIRinD+9C+9A1BDy8ipOPfXInRm2QjoM4jrOOGaOLWJhpl5PowYK tCdSRpHEHMAHf/s/UnxP6uHsexzDDLPmbXAMPb/K39Z9r9vsZTqqYPsc7E72s9C3 P7/wgWu6KMH8dRCcMeQx4qH0RhtqueQq7LDgCEVO7WEaVgb1Lf2+y9kvKPq3f258 exHKrMnggHGzFg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:34:40 2025 by rpki-client