This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json) Hash identifier: /x6Fvu+gvg5wDEVLbCm4MVhOy3Xesn2vtwq2crVONNA= Subject key identifier: 20:66:92:15:52:18:AC:07:24:AD:F3:13:66:8F:0D:B2:8D:B9:DF:7D Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e Certificate serial: 019B1D2A5C18D8D5120B695499131C133017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft Manifest number: 0CE9 Signing time: Sun 14 Dec 2025 14:01:13 +0000 Manifest this update: Sun 14 Dec 2025 14:01:13 +0000 Manifest next update: Mon 15 Dec 2025 14:01:13 +0000 Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=) 2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: Fj7tBLx/fwnFoG0ZFshBmTUOVZznrgAsR8XLlUdDClQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:5c:18:d8:d5:12:0b:69:54:99:13:1c:13:30:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e Validity Not Before: Dec 14 14:01:13 2025 GMT Not After : Dec 15 14:01:13 2025 GMT Subject: CN=206692155218ac0724adf313668f0db28db9df7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:cb:d7:22:54:80:33:6e:d0:f5:1d:d5:4e: 35:36:a0:07:01:1a:89:11:2c:61:43:72:1f:3e:9b: cd:7e:5c:d5:0e:34:21:1e:6b:c4:9b:f0:76:91:f5: 26:43:6d:b0:83:3d:3b:31:9a:06:82:39:31:be:91: 46:f2:fc:01:e4:f1:e4:96:89:cc:54:73:44:d5:64: bc:99:23:e4:ab:73:50:21:3b:09:c8:bf:da:45:dd: a4:02:ed:e0:93:69:cf:75:f5:d5:07:b5:57:2b:2d: 16:f3:17:16:6d:08:c3:bb:21:bb:cc:a4:bf:5b:e8: 5a:2e:de:0f:4b:55:ef:b5:7d:dd:5b:4d:41:0f:d4: ab:9e:77:5a:1e:53:43:4e:21:47:66:81:8f:59:1c: ef:10:1e:59:74:6c:87:a2:86:46:84:15:4d:61:b8: 87:ed:36:1c:85:83:9d:3e:46:e6:3b:64:df:80:28: 7a:76:0f:4a:8e:03:4a:7b:3c:2d:f2:95:bf:d0:86: fe:f5:f3:1e:a9:49:aa:c4:0f:42:7a:90:61:57:c6: 0e:3f:35:0d:9d:96:41:98:35:85:bf:25:74:2b:f3: d4:4e:3f:29:87:61:2c:d7:00:f7:58:e0:87:e2:76: 33:81:f0:c0:19:9b:7d:eb:d5:6b:70:86:9d:58:af: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:66:92:15:52:18:AC:07:24:AD:F3:13:66:8F:0D:B2:8D:B9:DF:7D X509v3 Authority Key Identifier: keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:1f:31:30:c9:98:1f:77:61:43:d7:a3:57:ed:b0:93:42:7c: b2:0f:72:02:93:7b:f7:64:fc:c6:2b:99:23:ee:6b:3c:05:a6: 43:27:4a:d6:dc:bc:5c:c0:b4:39:04:4e:cf:64:12:2c:6d:58: 84:b5:24:56:6f:1e:74:30:3e:f4:1f:ce:26:c8:8b:ce:e5:43: da:41:72:6b:24:3a:f8:d5:2b:5f:6e:db:b6:22:c3:90:33:bf: 68:37:da:b5:c0:8c:86:15:24:7b:35:3a:99:5e:c0:41:f8:99: ff:9b:c4:cf:17:f6:d0:72:38:ad:e8:e1:4e:de:4c:45:f2:7c: 88:8c:c1:1e:20:93:c0:8f:84:74:5e:31:33:94:45:f1:d1:e8: b8:5c:57:64:ec:52:d0:24:a0:57:f6:0e:86:c0:d9:36:53:9a: 82:6c:29:b3:78:12:12:68:6d:38:a5:06:31:b2:9e:28:cd:12: 85:a7:95:98:c1:e4:97:a9:71:c2:c4:41:97:c3:14:a6:fb:1b: 0b:37:13:3e:0b:42:73:27:74:09:9e:06:b5:f3:3b:12:fe:6b: a6:bd:5c:d8:91:e6:f0:b2:3f:28:19:ea:21:b2:7c:a3:21:02: 04:45:ee:57:bd:9d:4a:bf:5c:6d:09:42:be:08:a4:8a:a3:d6: 6a:48:f7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKlwY2NUSC2lUmRMcEzAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGU0NTZkNGQ0MDVjNmY0MjkyZDYzNjg4Njc2Y2UxNTBl N2YwN2UwHhcNMjUxMjE0MTQwMTEzWhcNMjUxMjE1MTQwMTEzWjAzMTEwLwYDVQQD EygyMDY2OTIxNTUyMThhYzA3MjRhZGYzMTM2NjhmMGRiMjhkYjlkZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhrL1yJUgDNu0PUd1U41NqAHARqJ ESxhQ3IfPpvNflzVDjQhHmvEm/B2kfUmQ22wgz07MZoGgjkxvpFG8vwB5PHklonM VHNE1WS8mSPkq3NQITsJyL/aRd2kAu3gk2nPdfXVB7VXKy0W8xcWbQjDuyG7zKS/ W+haLt4PS1XvtX3dW01BD9SrnndaHlNDTiFHZoGPWRzvEB5ZdGyHooZGhBVNYbiH 7TYchYOdPkbmO2TfgCh6dg9KjgNKezwt8pW/0Ib+9fMeqUmqxA9CepBhV8YOPzUN nZZBmDWFvyV0K/PUTj8ph2Es1wD3WOCH4nYzgfDAGZt969VrcIadWK9a1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBmkhVSGKwHJK3zE2aPDbKNud99MB8GA1UdIwQY MBaAFKHeRW1NQFxvQpLWNohnbOFQ5/B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUt MGM5ZTBjZjdlOWZjLzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUtMGM5ZTBjZjdlOWZj LzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3R8xMMmY H3dhQ9ejV+2wk0J8sg9yApN792T8xiuZI+5rPAWmQydK1ty8XMC0OQROz2QSLG1Y hLUkVm8edDA+9B/OJsiLzuVD2kFyayQ6+NUrX27btiLDkDO/aDfatcCMhhUkezU6 mV7AQfiZ/5vEzxf20HI4rejhTt5MRfJ8iIzBHiCTwI+EdF4xM5RF8dHouFxXZOxS 0CSgV/YOhsDZNlOagmwps3gSEmhtOKUGMbKeKM0ShaeVmMHkl6lxwsRBl8MUpvsb CzcTPgtCcyd0CZ4GtfM7Ev5rpr1c2JHm8LI/KBnqIbJ8oyECBEXuV72dSr9cbQlC vgikiqPWakj3ug== -----END CERTIFICATE-----Generated at Sun Dec 14 21:55:58 2025 by rpki-client