This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json) Hash identifier: w48P1VGMbSL4w9+KALtHMlTIiWRM/T7kqWul86CPZMo= Subject key identifier: 69:C7:70:CC:B9:C8:5F:ED:F5:18:2C:FE:67:D7:41:72:9D:E0:98:A2 Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Certificate serial: 019B115CF6A80F33210AD05B9A59E4244A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft Manifest number: 06BE Signing time: Fri 12 Dec 2025 07:01:03 +0000 Manifest this update: Fri 12 Dec 2025 07:01:03 +0000 Manifest next update: Sat 13 Dec 2025 07:01:03 +0000 Files and hashes: 1: InB_IX31uvHxMubFeh7gf9PNz5I.roa (hash: GynuEhjsTsyBFx3Fyz2fqy0AYWXC0AnBi+qBO5MvYRk=) 2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: BLtMdVZ+vGVTz8Ql0bj+IUfXCc0gJThQL2R5wTZqTKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:f6:a8:0f:33:21:0a:d0:5b:9a:59:e4:24:4a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Validity Not Before: Dec 12 07:01:03 2025 GMT Not After : Dec 13 07:01:03 2025 GMT Subject: CN=69c770ccb9c85fedf5182cfe67d741729de098a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:b5:d0:42:d1:c3:19:f4:17:c2:d0:f9:49: 8a:9a:ef:5f:16:c4:eb:80:d0:d5:34:0f:7a:7e:b8: 8a:84:d7:94:a4:3f:86:f4:4d:b1:e2:a3:ca:e5:ff: 1c:a6:a2:1f:2d:7f:20:1d:da:69:eb:46:cf:15:70: 36:48:81:d9:e5:4b:6c:c0:94:12:fd:4c:fd:77:ed: e3:78:00:a6:14:15:3d:01:fc:08:99:a9:72:66:9c: d7:f7:e2:2f:7a:d1:47:5c:92:0c:9c:58:a9:e1:bd: d7:e7:ea:15:c0:9c:e8:93:88:d0:52:e8:5e:46:78: 25:d0:39:60:14:81:c2:03:60:27:7b:6c:54:eb:9b: 1a:65:fd:3d:0a:97:95:b7:00:92:d1:96:d9:0a:e2: 5b:33:03:91:c2:6d:88:22:b7:26:57:0f:f0:1f:b6: 09:68:06:8f:74:f4:ea:43:7b:cb:de:63:51:eb:43: 93:89:e7:91:35:fa:a1:c1:6d:0a:c5:11:ca:d5:e0: 9c:b9:ca:e0:d7:7d:b4:44:58:fb:23:df:70:bf:bd: 78:f5:a9:f1:87:2a:de:0c:69:5a:72:1a:0a:44:b0: 23:c2:5d:9a:5f:a8:f4:66:03:3c:b7:1e:79:a4:e5: ea:83:75:68:c6:ec:94:52:52:eb:82:4f:56:59:1b: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C7:70:CC:B9:C8:5F:ED:F5:18:2C:FE:67:D7:41:72:9D:E0:98:A2 X509v3 Authority Key Identifier: keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bb:fd:a5:cf:98:08:93:ad:f0:e0:d8:4b:fc:fa:77:78:2c: 21:79:83:ed:73:b8:d9:c4:61:5b:7a:5f:9f:eb:52:b5:5d:f3: d0:78:9f:98:f6:57:db:29:f7:00:b3:56:4c:72:fc:40:a6:a0: 5e:d2:8c:c4:7a:9b:94:30:a4:c7:85:56:21:3c:0a:74:6b:dc: 74:2b:dc:f5:e4:ca:8e:c3:41:b0:8c:d2:9d:eb:0a:bc:3c:bc: 9a:36:de:29:91:ab:1c:0c:13:81:1a:be:6e:5e:be:29:7a:a9: d4:67:fb:07:8f:25:e4:64:2c:16:c0:31:d1:bf:29:25:fa:21: 63:eb:01:9f:31:db:98:1d:8e:66:dc:23:b9:d4:c3:bf:d7:89: f5:03:ec:06:95:c8:46:01:0e:e9:4f:b9:7c:25:5d:82:f9:0a: d5:9b:97:5e:e5:c3:e0:f6:c5:c2:d0:77:1f:bd:ff:65:94:7c: 1f:8e:0d:7d:a9:0a:8e:5f:ec:32:5a:9a:6d:20:00:a5:a2:7b: 03:ff:3e:7d:8a:87:66:a1:78:39:04:2d:06:e2:37:45:ea:46: a3:c6:5a:e8:e8:dd:fb:33:0c:12:b7:26:cb:4e:64:7d:00:cb: 5a:2b:1e:bb:ec:e2:a8:e3:7f:51:1d:a2:e3:80:a6:9b:41:d2: f3:47:ee:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXPaoDzMhCtBbmlnkJEpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1 NDE5MWIwHhcNMjUxMjEyMDcwMTAzWhcNMjUxMjEzMDcwMTAzWjAzMTEwLwYDVQQD Eyg2OWM3NzBjY2I5Yzg1ZmVkZjUxODJjZmU2N2Q3NDE3MjlkZTA5OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ry10ELRwxn0F8LQ+UmKmu9fFsTr gNDVNA96friKhNeUpD+G9E2x4qPK5f8cpqIfLX8gHdpp60bPFXA2SIHZ5UtswJQS /Uz9d+3jeACmFBU9AfwImalyZpzX9+IvetFHXJIMnFip4b3X5+oVwJzok4jQUuhe Rngl0DlgFIHCA2Ane2xU65saZf09CpeVtwCS0ZbZCuJbMwORwm2IIrcmVw/wH7YJ aAaPdPTqQ3vL3mNR60OTieeRNfqhwW0KxRHK1eCcucrg1320RFj7I99wv7149anx hyreDGlachoKRLAjwl2aX6j0ZgM8tx55pOXqg3VoxuyUUlLrgk9WWRsByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnHcMy5yF/t9Rgs/mfXQXKd4JiiMB8GA1UdIwQY MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt M2UwNmEwMTgyNjE0LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0 LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrv9pc+Y CJOt8ODYS/z6d3gsIXmD7XO42cRhW3pfn+tStV3z0HifmPZX2yn3ALNWTHL8QKag XtKMxHqblDCkx4VWITwKdGvcdCvc9eTKjsNBsIzSnesKvDy8mjbeKZGrHAwTgRq+ bl6+KXqp1Gf7B48l5GQsFsAx0b8pJfohY+sBnzHbmB2OZtwjudTDv9eJ9QPsBpXI RgEO6U+5fCVdgvkK1ZuXXuXD4PbFwtB3H73/ZZR8H44NfakKjl/sMlqabSAApaJ7 A/8+fYqHZqF4OQQtBuI3RepGo8Za6Ojd+zMMErcmy05kfQDLWiseu+ziqON/UR2i 44Cmm0HS80fu8Q== -----END CERTIFICATE-----Generated at Fri Dec 12 10:38:18 2025 by rpki-client