This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json) Hash identifier: h80xLA1tmc8GySs1gkOFZGmeP6wDSSKKBFtYiA1BNjY= Subject key identifier: 49:5A:D9:AA:63:8D:5A:F6:CE:41:14:2F:75:2C:29:03:9E:30:BF:76 Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Certificate serial: 019B10140EC1EF5F750D0AB0C64F9709659A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 01:01:48 +0000 Manifest this update: Fri 12 Dec 2025 01:01:48 +0000 Manifest next update: Sat 13 Dec 2025 01:01:48 +0000 Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=) 2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: w7eCms/VmmO380j0VJqUYFkppY7R5KO6B1fC8H3+jww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:0e:c1:ef:5f:75:0d:0a:b0:c6:4f:97:09:65:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Validity Not Before: Dec 12 01:01:48 2025 GMT Not After : Dec 13 01:01:48 2025 GMT Subject: CN=495ad9aa638d5af6ce41142f752c29039e30bf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:5c:f6:19:4d:0e:30:31:67:76:45:34:ba: e9:d2:ab:1e:76:25:6b:8f:a1:dd:3b:a4:42:39:91: e9:1e:f1:2a:86:23:4f:41:06:ba:35:ba:a4:af:4b: 88:36:b0:c3:4a:ce:f8:5e:bd:dc:d0:eb:9c:cd:40: 42:2f:5f:5a:1e:e6:89:45:e0:2b:02:58:cc:43:e4: 11:24:5b:eb:0d:b3:b1:6e:7b:da:7b:c9:1a:33:6a: ed:62:8e:eb:54:00:62:1e:4c:51:02:d0:fc:52:25: 01:56:e7:5a:f9:d0:fc:3b:7a:1c:5a:8a:08:24:0a: c8:bc:3f:c6:aa:d6:7a:27:bc:71:e8:70:fd:db:81: 00:83:16:5b:ba:14:c5:46:8a:fe:63:86:a0:41:3c: b8:9b:02:be:bf:89:89:0c:43:c2:21:48:ab:f0:00: e5:be:03:17:b9:13:1c:1c:21:4a:4f:6c:dc:90:65: fe:ec:39:00:04:4f:35:f5:9c:e7:0e:65:c3:d1:31: d3:8c:04:7b:b9:7a:e2:a4:8f:44:47:bf:96:6d:7d: 28:40:f6:a4:db:28:f6:81:15:10:ef:f2:66:fe:bc: a5:71:da:d7:3c:4b:9d:8a:58:41:c7:15:c8:d6:1a: d1:fb:f2:ad:31:22:b6:ff:e6:21:3f:f0:03:8e:11: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5A:D9:AA:63:8D:5A:F6:CE:41:14:2F:75:2C:29:03:9E:30:BF:76 X509v3 Authority Key Identifier: keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:17:a7:a7:3a:52:fe:54:66:4b:1f:8b:00:c7:87:08:b6:b0: 3f:d1:21:f1:a1:a7:55:2d:13:63:e7:23:2e:46:ce:17:b8:5a: 88:1b:fe:8f:75:33:99:8e:6e:67:4b:23:74:b8:81:05:44:e6: aa:b8:c6:33:66:2e:5f:29:b6:c9:f6:a2:09:2e:5e:af:e3:f7: 7a:da:19:aa:0c:4c:72:d6:ac:30:7c:e5:fc:89:01:8c:cf:b2: 05:41:e6:97:01:70:cc:0d:a5:b3:f4:e0:4f:da:7f:01:f5:67: 7c:35:08:5f:4f:f0:12:83:cc:18:79:9e:0a:9f:d9:13:e5:a9: e0:7d:a5:69:12:36:b0:b6:48:26:58:1c:7b:e5:2f:61:24:07: 08:88:34:68:f5:ad:e2:c5:fd:2e:77:cc:68:03:0b:28:b9:b5: c9:ab:6e:22:d7:49:4c:29:35:33:45:0a:9a:22:0f:62:b1:d4: 33:31:01:2b:be:f3:57:63:a7:e9:fa:da:90:f0:51:9e:52:60: 54:cc:65:01:24:fb:16:2b:b2:8d:fb:8d:59:b8:13:e8:97:bb: 00:fa:c5:05:a5:a2:4f:0d:55:53:3c:7e:37:a4:bb:5b:25:b2: 8c:79:22:ec:e3:ca:d9:d1:58:06:23:16:69:57:55:fb:ec:4d: bc:d1:1c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFA7B7191DQqwxk+XCWWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz YmVhMWQwHhcNMjUxMjEyMDEwMTQ4WhcNMjUxMjEzMDEwMTQ4WjAzMTEwLwYDVQQD Eyg0OTVhZDlhYTYzOGQ1YWY2Y2U0MTE0MmY3NTJjMjkwMzllMzBiZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmppc9hlNDjAxZ3ZFNLrp0qsediVr j6HdO6RCOZHpHvEqhiNPQQa6Nbqkr0uINrDDSs74Xr3c0OuczUBCL19aHuaJReAr AljMQ+QRJFvrDbOxbnvae8kaM2rtYo7rVABiHkxRAtD8UiUBVuda+dD8O3ocWooI JArIvD/GqtZ6J7xx6HD924EAgxZbuhTFRor+Y4agQTy4mwK+v4mJDEPCIUir8ADl vgMXuRMcHCFKT2zckGX+7DkABE819ZznDmXD0THTjAR7uXripI9ER7+WbX0oQPak 2yj2gRUQ7/Jm/rylcdrXPEudilhBxxXI1hrR+/KtMSK2/+YhP/ADjhEneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEla2apjjVr2zkEUL3UsKQOeML92MB8GA1UdIwQY MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3 LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthenpzpS /lRmSx+LAMeHCLawP9Eh8aGnVS0TY+cjLkbOF7haiBv+j3UzmY5uZ0sjdLiBBUTm qrjGM2YuXym2yfaiCS5er+P3etoZqgxMctasMHzl/IkBjM+yBUHmlwFwzA2ls/Tg T9p/AfVnfDUIX0/wEoPMGHmeCp/ZE+Wp4H2laRI2sLZIJlgce+UvYSQHCIg0aPWt 4sX9LnfMaAMLKLm1yatuItdJTCk1M0UKmiIPYrHUMzEBK77zV2On6frakPBRnlJg VMxlAST7FiuyjfuNWbgT6Je7APrFBaWiTw1VUzx+N6S7WyWyjHki7OPK2dFYBiMW aVdV++xNvNEc5g== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:38 2025 by rpki-client