This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json) Hash identifier: 0fBjJRsyljJcDnfRotOQPyq74FAWJv4avcKi8aW5OEw= Subject key identifier: B9:73:B4:50:1D:D1:4C:D6:78:D7:28:4E:C8:26:58:F1:E4:64:92:9C Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Certificate serial: 019B435BF6895D6BB98513E72758A0ECC877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft Manifest number: 1187 Signing time: Mon 22 Dec 2025 00:00:58 +0000 Manifest this update: Mon 22 Dec 2025 00:00:58 +0000 Manifest next update: Tue 23 Dec 2025 00:00:58 +0000 Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: +QWuekEvlRL+XeiWXzJAF5mMM25ag2snJrkZ5cm8vSs=) 2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:f6:89:5d:6b:b9:85:13:e7:27:58:a0:ec:c8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Validity Not Before: Dec 22 00:00:58 2025 GMT Not After : Dec 23 00:00:58 2025 GMT Subject: CN=b973b4501dd14cd678d7284ec82658f1e464929c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:c0:ac:5c:4b:2f:b5:01:d9:9f:4f:9a:2a: 5d:9d:be:16:22:cb:26:10:17:ca:cc:d5:b2:6f:78: a1:ca:cf:f1:53:f8:96:46:96:f1:fd:f2:f4:58:f6: 6b:86:96:fe:51:d6:8d:1e:36:3c:a9:11:c9:30:32: 8b:0b:04:cd:36:a3:75:da:29:7a:84:63:12:4b:75: a3:12:b5:7e:fe:5d:f7:a7:a9:b1:32:fa:bf:63:95: 46:ba:44:77:13:22:48:a3:90:c2:cf:72:8c:84:47: 13:76:0d:6c:e2:88:ea:ba:77:db:00:20:bf:7a:6b: 55:f4:9e:36:e4:ba:3f:10:b4:64:bd:10:d2:08:0f: 5e:ed:0b:91:db:d8:ca:a0:f0:5d:56:c6:93:5f:00: 06:29:9b:1a:33:69:ef:5d:85:66:e7:28:b6:d4:81: af:27:29:6f:9b:b1:28:c2:e3:ee:e8:2d:bb:e1:dc: 1d:ca:c8:01:51:b7:ab:88:1b:ec:d4:b4:a0:7d:53: 5e:a9:f9:42:e9:db:1a:fc:a6:9a:99:51:fa:40:13: b6:e8:45:53:7f:2c:73:3d:1d:8e:0e:1e:06:bb:0a: 78:6b:55:c6:d3:01:65:96:02:e9:59:b9:c2:34:5a: 1b:79:26:7d:da:f9:9b:51:35:15:1f:9b:18:f6:b0: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:B4:50:1D:D1:4C:D6:78:D7:28:4E:C8:26:58:F1:E4:64:92:9C X509v3 Authority Key Identifier: keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:33:31:f6:48:9d:8d:ee:84:28:9e:24:c8:e7:f9:b8:8c: d5:5f:8b:8c:9f:30:c9:0a:cf:1f:bb:f7:9c:b9:e5:35:6c:0f: a0:97:78:c4:21:c6:31:dc:eb:cf:9b:5b:16:df:71:f6:0f:ea: 8c:e6:33:98:c8:fa:54:66:54:7f:33:e8:06:ce:c3:3f:e5:74: 78:76:78:0e:11:61:df:f1:42:16:f1:29:e3:ab:f3:99:9a:a9: a4:b0:06:93:c8:af:a5:6b:a7:2e:91:fe:94:c9:8a:bb:c3:b4: da:52:b3:96:0e:0a:a5:22:11:32:e5:d6:28:e5:23:a2:38:34: 62:7a:07:0c:59:40:25:2c:91:81:52:b0:3d:4c:d3:1d:92:0c: be:20:36:f2:f0:94:a0:39:55:fc:54:70:46:92:28:3b:00:0a: 2d:fd:7e:f4:f5:8e:35:b3:16:5f:ad:81:80:a5:48:40:55:a5: 8c:a4:f9:8e:81:b5:bb:b3:ff:32:fc:87:0e:61:f5:04:f9:32: 9b:5e:ff:3d:f9:c3:d1:d0:84:8a:6c:88:76:f5:92:d1:dc:e8: 54:79:54:ae:ee:6f:09:9e:c7:d0:4b:cb:d4:fb:8a:7f:0d:51: 7f:e5:e2:4b:7a:fa:ac:e9:a8:c5:1e:e7:6e:c4:c5:f0:b3:3d: f5:7f:b3:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW/aJXWu5hRPnJ1ig7Mh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz Yjk5MmIwHhcNMjUxMjIyMDAwMDU4WhcNMjUxMjIzMDAwMDU4WjAzMTEwLwYDVQQD EyhiOTczYjQ1MDFkZDE0Y2Q2NzhkNzI4NGVjODI2NThmMWU0NjQ5MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47DArFxLL7UB2Z9Pmipdnb4WIssm EBfKzNWyb3ihys/xU/iWRpbx/fL0WPZrhpb+UdaNHjY8qRHJMDKLCwTNNqN12il6 hGMSS3WjErV+/l33p6mxMvq/Y5VGukR3EyJIo5DCz3KMhEcTdg1s4ojqunfbACC/ emtV9J425Lo/ELRkvRDSCA9e7QuR29jKoPBdVsaTXwAGKZsaM2nvXYVm5yi21IGv Jylvm7EowuPu6C274dwdysgBUberiBvs1LSgfVNeqflC6dsa/KaamVH6QBO26EVT fyxzPR2ODh4Guwp4a1XG0wFllgLpWbnCNFobeSZ92vmbUTUVH5sY9rCkawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlztFAd0UzWeNcoTsgmWPHkZJKcMB8GA1UdIwQY MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt NWUzMGI4NmZkMWFiLzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKQzMfZI nY3uhCieJMjn+biM1V+LjJ8wyQrPH7v3nLnlNWwPoJd4xCHGMdzrz5tbFt9x9g/q jOYzmMj6VGZUfzPoBs7DP+V0eHZ4DhFh3/FCFvEp46vzmZqppLAGk8ivpWunLpH+ lMmKu8O02lKzlg4KpSIRMuXWKOUjojg0YnoHDFlAJSyRgVKwPUzTHZIMviA28vCU oDlV/FRwRpIoOwAKLf1+9PWONbMWX62BgKVIQFWljKT5joG1u7P/MvyHDmH1BPky m17/PfnD0dCEimyIdvWS0dzoVHlUru5vCZ7H0EvL1PuKfw1Rf+XiS3r6rOmoxR7n bsTF8LM99X+zHQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:49:26 2025 by rpki-client