This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json) Hash identifier: SrMIspq/ddogLg1X6t7qI6tG1Lt81vTRJmsdSbfg5mg= Subject key identifier: 8E:73:25:03:07:CE:90:6D:34:CD:AF:C9:5B:82:45:1A:1C:87:82:B5 Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf Certificate serial: 019C446C71397D9A9D5DDD9B3DF6AF242BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft Manifest number: 1007 Signing time: Mon 09 Feb 2026 22:01:23 +0000 Manifest this update: Mon 09 Feb 2026 22:01:23 +0000 Manifest next update: Tue 10 Feb 2026 22:01:23 +0000 Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: htI/kk0ZgRCnkTZRYIChgUgcIuSA3geG2/7JnzoxnWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:71:39:7d:9a:9d:5d:dd:9b:3d:f6:af:24:2b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf Validity Not Before: Feb 9 22:01:23 2026 GMT Not After : Feb 10 22:01:23 2026 GMT Subject: CN=8e73250307ce906d34cdafc95b82451a1c8782b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:33:73:23:2e:ad:2b:78:07:6b:d3:34:75: a1:03:0f:33:fd:6c:29:5d:9c:88:b9:a1:a0:37:e5: 85:61:bd:17:1b:24:61:ad:5c:8d:3b:ab:1e:f7:f6: 1b:a0:e3:30:f3:ed:83:68:41:10:55:e8:79:24:f4: 97:f2:c0:16:de:11:76:e6:b0:9a:db:af:1d:a4:0d: c2:bb:a5:c0:9c:d0:7c:cb:9b:b6:73:3a:7d:cb:74: a9:06:1b:2f:f5:91:c7:e3:b2:27:9b:c9:a0:85:66: ad:18:8f:7d:d8:60:4e:e7:9f:6e:d4:d8:e4:b1:ac: 10:49:94:d0:50:d0:9c:ce:a6:f3:3e:41:71:44:55: dc:fd:a8:a7:ac:7d:b7:30:73:63:7f:7f:ab:3c:79: af:55:f8:bc:de:1c:ab:b5:c2:8f:af:55:87:0d:34: df:ab:80:0f:b4:63:f1:37:7d:39:13:bd:c4:9e:10: fe:fd:b2:ac:e7:b7:ba:f3:80:f4:10:96:c8:0f:25: 9f:16:b5:33:95:f3:59:ab:92:88:53:0e:dc:28:ea: 22:3a:42:6b:4e:74:59:18:16:f8:95:dc:77:80:74: 22:69:1c:b0:11:6e:ad:38:29:a3:dc:92:ce:f8:ca: c0:d0:9b:97:af:a6:5b:e2:c3:55:0c:b4:f9:7c:25: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:73:25:03:07:CE:90:6D:34:CD:AF:C9:5B:82:45:1A:1C:87:82:B5 X509v3 Authority Key Identifier: keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:15:3d:15:b6:eb:5a:fc:cd:ca:6d:24:ad:27:4b:76:52:2c: f5:9c:fe:8d:bb:b0:75:12:a3:9d:cc:ee:a5:82:08:8c:bc:83: d9:7e:f0:eb:e6:fb:a9:2d:78:ad:2b:71:6c:d9:50:99:b5:d0: 94:96:f3:bb:33:de:d4:64:01:e9:97:34:b8:4f:06:19:74:9c: 7e:3b:6d:72:44:a3:5e:f3:57:2f:4f:f7:32:22:31:9e:09:9f: 52:b6:15:7c:c2:52:56:93:da:58:03:57:e6:b9:1d:ba:b8:e7: 48:76:14:ba:5d:b4:1c:94:17:d0:b2:98:45:c4:9d:45:ae:3f: 18:1e:a3:05:d6:3c:6c:07:70:86:58:94:7f:93:34:c3:83:68: df:10:4b:7c:63:8a:9a:ed:f6:94:d7:37:68:99:d1:92:f1:e2: ba:fa:23:c2:23:51:db:a7:63:72:92:4c:e2:de:dd:fe:5c:f2: dc:14:ea:0f:c9:22:84:57:4f:83:a1:1c:3b:01:8c:98:4f:6e: a1:dd:02:89:11:dd:7c:91:46:cb:15:cb:a5:da:f6:9e:cc:f5: 3f:d4:52:74:e6:50:a2:1d:79:09:ed:2d:c5:09:e1:01:aa:e9: 3d:58:9d:1a:5b:ba:d6:40:19:9b:b5:22:40:1d:91:13:6c:ea: 6b:37:e9:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbHE5fZqdXd2bPfavJCupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzBmNGQxMzk0NWYxNmY5Yjc0YjEyNjQ3ZWExMmNjNWQy NzQ4Y2YwHhcNMjYwMjA5MjIwMTIzWhcNMjYwMjEwMjIwMTIzWjAzMTEwLwYDVQQD Eyg4ZTczMjUwMzA3Y2U5MDZkMzRjZGFmYzk1YjgyNDUxYTFjODc4MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIIzcyMurSt4B2vTNHWhAw8z/Wwp XZyIuaGgN+WFYb0XGyRhrVyNO6se9/YboOMw8+2DaEEQVeh5JPSX8sAW3hF25rCa 268dpA3Cu6XAnNB8y5u2czp9y3SpBhsv9ZHH47Inm8mghWatGI992GBO559u1Njk sawQSZTQUNCczqbzPkFxRFXc/ainrH23MHNjf3+rPHmvVfi83hyrtcKPr1WHDTTf q4APtGPxN305E73EnhD+/bKs57e684D0EJbIDyWfFrUzlfNZq5KIUw7cKOoiOkJr TnRZGBb4ldx3gHQiaRywEW6tOCmj3JLO+MrA0JuXr6Zb4sNVDLT5fCWF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5zJQMHzpBtNM2vyVuCRRoch4K1MB8GA1UdIwQY MBaAFDgw9NE5RfFvm3SxJkfqEsxdJ0jPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYt ZWNkZWMwYTQxMDI0LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYtZWNkZWMwYTQxMDI0 LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRU9Fbbr WvzNym0krSdLdlIs9Zz+jbuwdRKjnczupYIIjLyD2X7w6+b7qS14rStxbNlQmbXQ lJbzuzPe1GQB6Zc0uE8GGXScfjttckSjXvNXL0/3MiIxngmfUrYVfMJSVpPaWANX 5rkdurjnSHYUul20HJQX0LKYRcSdRa4/GB6jBdY8bAdwhliUf5M0w4No3xBLfGOK mu32lNc3aJnRkvHiuvojwiNR26djcpJM4t7d/lzy3BTqD8kihFdPg6EcOwGMmE9u od0CiRHdfJFGyxXLpdr2nsz1P9RSdOZQoh15Ce0txQnhAarpPVidGlu61kAZm7Ui QB2RE2zqazfp+w== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:54 2026 by rpki-client