This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json) Hash identifier: 1i6Kbwz6cWLzl4cdoO1UK5Nj3HYIAFrTquLZRBrE8bo= Subject key identifier: 87:51:89:EF:C7:EA:DC:6A:69:75:FC:A0:4B:D0:09:00:36:54:AD:22 Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Certificate serial: 019B372186AD56F38C38D33E6A949694F8D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft Manifest number: 0BD1 Signing time: Fri 19 Dec 2025 15:01:42 +0000 Manifest this update: Fri 19 Dec 2025 15:01:42 +0000 Manifest next update: Sat 20 Dec 2025 15:01:42 +0000 Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=) 2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: W30tExnUR23WxrfmAVOv27lWTLWc/DJUIfvkm0QN+f0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:86:ad:56:f3:8c:38:d3:3e:6a:94:96:94:f8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Validity Not Before: Dec 19 15:01:42 2025 GMT Not After : Dec 20 15:01:42 2025 GMT Subject: CN=875189efc7eadc6a6975fca04bd009003654ad22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:e4:a6:ba:d9:17:67:d7:cb:0c:e4:e3:e1: c6:96:18:33:b5:47:92:4f:94:02:93:8f:81:93:14: 8d:8a:c2:a1:c7:9a:38:c5:cc:83:dd:c6:9e:f8:78: 1b:f1:03:41:ca:eb:2d:4d:5c:38:72:b2:4d:57:6f: 8a:81:06:5d:e2:50:76:ce:d5:e5:d9:c1:a2:ce:7f: 40:b9:89:6a:a8:55:87:6e:6e:d5:cc:02:30:93:8e: ea:db:ae:02:e9:56:35:c9:bb:27:47:ee:ce:8d:91: 01:cd:50:85:b0:e2:f5:c2:d8:8d:e4:1f:4b:8b:ce: 85:48:7a:bc:38:44:ee:7c:d9:6d:ca:ee:25:67:92: 79:33:74:49:d1:bf:4a:2c:ba:9d:f8:9c:f8:6a:02: 83:88:8e:bf:0a:2c:11:ec:4f:e9:de:d6:f0:58:8d: 43:82:54:d4:01:c4:94:fe:2b:2e:5d:40:54:42:89: 3a:35:2b:12:be:9d:bc:b4:09:5b:e9:ff:67:d9:a7: 57:a4:13:8c:92:aa:3e:c0:0e:e1:a1:b0:34:2a:da: 50:1b:aa:ca:76:23:ee:63:1f:6c:5f:5c:ef:0e:fe: 52:45:4f:de:90:49:4d:3b:59:21:f4:02:fa:ab:b8: 8c:c5:c1:0c:fb:de:ce:ff:aa:d4:6e:59:67:a0:62: 26:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:89:EF:C7:EA:DC:6A:69:75:FC:A0:4B:D0:09:00:36:54:AD:22 X509v3 Authority Key Identifier: keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:ea:cb:8b:56:87:3b:28:b6:6e:fc:9e:31:7d:73:03:9b:95: 3d:4f:2d:e4:72:33:a6:0b:7f:ef:4d:2a:ab:95:5d:0e:a7:eb: 65:34:87:aa:5c:34:eb:ed:1f:89:1e:16:07:fb:5f:1a:95:53: 01:a6:7c:62:e5:2e:14:7f:3f:87:9a:35:e3:87:1b:a9:16:40: 1c:c5:e5:c5:84:c5:17:c3:07:a2:45:31:c5:48:41:62:e7:99: 94:c7:1b:a9:bb:04:24:f7:65:29:ae:4b:fd:9d:c2:b2:27:5d: 10:a8:fe:91:47:27:b3:6f:89:99:96:ac:ef:20:2e:bf:c4:c7: 57:5c:ee:65:49:85:23:80:f6:c1:90:16:e8:bb:1a:3c:a1:3a: ca:29:40:b8:42:0c:61:5e:43:18:a3:a6:cd:d7:0f:6b:d5:fc: a6:d8:0e:5a:70:cd:a1:eb:bc:e8:ff:d6:c5:f0:c3:82:8b:b4: ee:6f:8f:1d:c7:e5:fe:47:51:48:8e:5c:48:eb:80:08:33:97: 50:ba:1f:46:4a:45:49:8d:be:3d:f9:7b:83:b3:a8:3c:fa:1f: 03:24:bd:f5:f4:ec:73:f9:3e:85:9a:9b:03:c0:d9:51:be:ae: c1:15:65:92:9b:2f:1d:c6:a4:7a:33:2b:f4:ce:e7:4e:8b:cd: 69:73:77:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYatVvOMONM+apSWlPjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm Y2M1ZTIwHhcNMjUxMjE5MTUwMTQyWhcNMjUxMjIwMTUwMTQyWjAzMTEwLwYDVQQD Eyg4NzUxODllZmM3ZWFkYzZhNjk3NWZjYTA0YmQwMDkwMDM2NTRhZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLTkprrZF2fXywzk4+HGlhgztUeS T5QCk4+BkxSNisKhx5o4xcyD3cae+Hgb8QNByustTVw4crJNV2+KgQZd4lB2ztXl 2cGizn9AuYlqqFWHbm7VzAIwk47q264C6VY1ybsnR+7OjZEBzVCFsOL1wtiN5B9L i86FSHq8OETufNltyu4lZ5J5M3RJ0b9KLLqd+Jz4agKDiI6/CiwR7E/p3tbwWI1D glTUAcSU/isuXUBUQok6NSsSvp28tAlb6f9n2adXpBOMkqo+wA7hobA0KtpQG6rK diPuYx9sX1zvDv5SRU/ekElNO1kh9AL6q7iMxcEM+97O/6rUbllnoGImuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdRie/H6txqaXX8oEvQCQA2VK0iMB8GA1UdIwQY MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4urLi1aH Oyi2bvyeMX1zA5uVPU8t5HIzpgt/700qq5VdDqfrZTSHqlw06+0fiR4WB/tfGpVT AaZ8YuUuFH8/h5o144cbqRZAHMXlxYTFF8MHokUxxUhBYueZlMcbqbsEJPdlKa5L /Z3CsiddEKj+kUcns2+JmZas7yAuv8THV1zuZUmFI4D2wZAW6LsaPKE6yilAuEIM YV5DGKOmzdcPa9X8ptgOWnDNoeu86P/WxfDDgou07m+PHcfl/kdRSI5cSOuACDOX ULofRkpFSY2+Pfl7g7OoPPofAyS99fTsc/k+hZqbA8DZUb6uwRVlkpsvHcakejMr 9M7nTovNaXN3oA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:56:51 2025 by rpki-client