This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json) Hash identifier: SA1MIwzV4YnJpz1rFNlSG1FqrGI/f3D7xf/lxD9NNf4= Subject key identifier: 3C:E7:04:EB:A7:51:8E:A5:BE:35:5F:38:A1:4D:2C:B0:30:87:FD:96 Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Certificate serial: 019B48B975A592AD52D430D7FE01A1EFC6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft Manifest number: 086B Signing time: Tue 23 Dec 2025 01:01:12 +0000 Manifest this update: Tue 23 Dec 2025 01:01:12 +0000 Manifest next update: Wed 24 Dec 2025 01:01:12 +0000 Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: aYg/V/8+KAJX5VjxhG4lRK9jZucsIWEHW3Rarv1L0GA=) 2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:75:a5:92:ad:52:d4:30:d7:fe:01:a1:ef:c6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2 Validity Not Before: Dec 23 01:01:12 2025 GMT Not After : Dec 24 01:01:12 2025 GMT Subject: CN=3ce704eba7518ea5be355f38a14d2cb03087fd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:46:d4:16:55:88:e0:72:ce:a7:79:59:45: 5d:f1:0e:89:c6:41:57:22:92:9c:c9:ea:e3:a9:17: 01:af:d3:9f:f1:84:0d:fd:25:c4:94:77:bd:f0:ff: 8c:a1:53:62:f4:a2:99:12:95:aa:9e:e7:95:79:88: 96:25:59:bb:5e:0f:fd:1a:2f:bd:7c:87:74:54:0c: ac:48:cc:58:2f:fe:a6:24:5b:2b:0d:fa:95:d9:5a: dd:3c:ed:b4:f2:43:37:bd:e6:68:d3:e7:c3:67:f8: 09:80:77:2a:14:32:dc:bf:c3:33:01:a2:90:bb:15: 72:df:20:a8:58:5b:f5:db:5f:09:38:0d:b1:92:8e: 3a:ae:30:be:fb:09:99:3d:c2:1b:bc:4d:20:a5:85: 2f:ca:f5:1c:de:da:9f:76:c3:8c:f4:72:b1:48:42: 6d:37:b1:61:1e:18:0e:38:83:59:9e:d0:f3:87:97: eb:bb:41:20:a2:9e:bf:06:53:fa:be:cb:7d:08:b5: 65:1a:0b:8d:04:b8:b8:ad:10:60:d6:ea:d6:4e:eb: d3:41:a4:48:c2:1a:d2:12:a8:8f:12:43:63:d8:4b: cc:08:69:71:ce:73:ad:26:0a:21:d0:08:a9:51:ee: ab:48:47:2e:a4:c9:34:53:bc:1f:75:e8:8c:99:b6: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E7:04:EB:A7:51:8E:A5:BE:35:5F:38:A1:4D:2C:B0:30:87:FD:96 X509v3 Authority Key Identifier: keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:59:11:a3:7a:60:9e:27:a3:51:16:99:2a:38:b2:5a:63:81: 19:10:11:e5:ac:1a:85:48:fc:83:a6:46:45:37:56:19:3d:77: b8:0b:68:e3:79:a6:36:84:50:30:5a:79:92:4e:08:ce:80:87: a5:50:53:24:5d:d0:9d:17:78:bc:ef:f2:d1:38:03:13:b6:23: 4e:de:52:ff:c7:93:01:7d:20:92:75:cc:0e:5f:ff:b6:26:bd: ff:11:82:cf:24:93:40:ab:79:63:2f:03:ef:fc:3d:10:b5:7a: 57:04:05:b1:87:dc:28:1c:f9:67:3c:a9:c8:34:e6:62:c7:30: 8d:7e:f3:c2:2d:b8:ec:6c:e7:41:25:d1:da:3a:62:9c:64:4e: 07:d9:fc:aa:aa:f7:21:3f:0b:c8:2e:75:ff:bd:99:33:12:be: 10:a0:b0:9f:75:4c:86:7c:82:0d:67:0c:5a:53:bd:4b:e3:5d: 0f:8a:fa:5c:0e:6c:e3:8a:d6:2d:2f:d9:79:ee:1b:64:59:f6: 72:fd:5f:24:19:0b:13:28:f9:c6:e1:b0:41:40:6d:f4:f4:35: 63:78:db:73:a4:1c:76:a2:09:3d:9a:8f:59:dc:3a:76:64:6a: eb:54:bc:0f:aa:9d:8b:d2:ba:32:e2:4d:f9:cb:b9:be:08:22: a5:e1:6d:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuXWlkq1S1DDX/gGh78apMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4 YWNiZTIwHhcNMjUxMjIzMDEwMTEyWhcNMjUxMjI0MDEwMTEyWjAzMTEwLwYDVQQD EygzY2U3MDRlYmE3NTE4ZWE1YmUzNTVmMzhhMTRkMmNiMDMwODdmZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WtG1BZViOByzqd5WUVd8Q6JxkFX IpKcyerjqRcBr9Of8YQN/SXElHe98P+MoVNi9KKZEpWqnueVeYiWJVm7Xg/9Gi+9 fId0VAysSMxYL/6mJFsrDfqV2VrdPO208kM3veZo0+fDZ/gJgHcqFDLcv8MzAaKQ uxVy3yCoWFv1218JOA2xko46rjC++wmZPcIbvE0gpYUvyvUc3tqfdsOM9HKxSEJt N7FhHhgOOINZntDzh5fru0Egop6/BlP6vst9CLVlGguNBLi4rRBg1urWTuvTQaRI whrSEqiPEkNj2EvMCGlxznOtJgoh0AipUe6rSEcupMk0U7wfdeiMmbZ1oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDznBOunUY6lvjVfOKFNLLAwh/2WMB8GA1UdIwQY MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFkRo3pg niejURaZKjiyWmOBGRAR5awahUj8g6ZGRTdWGT13uAto43mmNoRQMFp5kk4IzoCH pVBTJF3QnRd4vO/y0TgDE7YjTt5S/8eTAX0gknXMDl//tia9/xGCzySTQKt5Yy8D 7/w9ELV6VwQFsYfcKBz5ZzypyDTmYscwjX7zwi247GznQSXR2jpinGROB9n8qqr3 IT8LyC51/72ZMxK+EKCwn3VMhnyCDWcMWlO9S+NdD4r6XA5s44rWLS/Zee4bZFn2 cv1fJBkLEyj5xuGwQUBt9PQ1Y3jbc6QcdqIJPZqPWdw6dmRq61S8D6qdi9K6MuJN +cu5vggipeFtaw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:29:58 2025 by rpki-client