This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft File: OdAejKCv5BTBV-H7-1OUhnzlHts.mft (raw, json) Hash identifier: jps6hboX9Ki7LC0r5o1HI/1HcBcYKB2dyj2MYtDvTwE= Subject key identifier: BA:C9:16:B7:BC:B3:26:E7:DC:ED:9C:66:14:B3:A1:77:54:7C:E9:53 Authority key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB Certificate issuer: /CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Certificate serial: 019B243E91DFA6666DE2E6A0E2C4063D0343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft Manifest number: 44 Signing time: Mon 15 Dec 2025 23:00:38 +0000 Manifest this update: Mon 15 Dec 2025 23:00:38 +0000 Manifest next update: Tue 16 Dec 2025 23:00:38 +0000 Files and hashes: 1: 2G4Xf8pLqEWjirvogul_LDd5FPI.roa (hash: /5ZBPi9hR3OWcYF4JvFkWR9sLIrIvmMOKZx6ycQkpcU=) 2: OdAejKCv5BTBV-H7-1OUhnzlHts.crl (hash: yTpWMLhQatjSrnoFRaaqeQ2o29/594/zM7m+DCcuu1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:91:df:a6:66:6d:e2:e6:a0:e2:c4:06:3d:03:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Validity Not Before: Dec 15 23:00:38 2025 GMT Not After : Dec 16 23:00:38 2025 GMT Subject: CN=bac916b7bcb326e7dced9c6614b3a177547ce953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:45:52:ea:63:91:ad:37:8f:ce:a9:dc:7f:fb: 80:38:57:e9:b7:e9:3a:ae:39:b8:06:e9:9b:7c:bf: 1e:dd:c0:3b:5c:1f:d5:ea:9a:2a:0a:2f:bc:3c:17: 79:19:82:73:77:5b:04:f8:bb:45:3c:64:ae:ed:98: 43:0d:10:06:91:cc:75:63:f7:33:1e:09:4b:1c:4d: a6:0e:dc:b8:1f:3c:ac:e3:37:35:4a:85:f0:bd:b3: 53:81:b7:2c:6e:a8:e6:97:b5:4f:fc:ad:d4:b0:58: 4c:4a:c5:6e:d4:04:54:9e:1f:9c:8b:14:5d:b2:42: f0:96:5f:a7:c8:3a:19:95:e5:75:a8:0c:33:02:c2: 0c:d9:48:54:23:58:79:de:dd:67:08:51:e9:81:2d: d4:8d:eb:bb:2a:93:10:be:2d:d0:da:ba:03:d1:21: 2e:f4:89:d7:ed:14:4e:c9:45:a5:98:0b:ff:df:ee: b7:74:8e:2f:b6:31:df:f3:60:31:7a:0c:2e:fc:7b: d3:65:e8:1c:d3:a3:34:95:f9:e1:89:49:96:18:f8: e1:00:3a:f6:41:52:ea:05:1d:7b:e9:d7:ab:1a:57: c7:09:b7:f4:b2:ad:f3:54:8c:0b:f7:b2:f3:69:21: 80:ab:93:cb:94:da:9b:f6:bd:77:d2:4a:16:1f:ac: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C9:16:B7:BC:B3:26:E7:DC:ED:9C:66:14:B3:A1:77:54:7C:E9:53 X509v3 Authority Key Identifier: keyid:39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:64:6f:06:04:8a:53:f9:6e:f8:b7:b7:99:22:9a:93:63:14: 0a:fd:22:f4:e1:e9:f0:98:01:78:c7:21:9b:1c:d7:fe:ab:13: 98:a1:c5:d2:5e:29:be:43:ef:d2:62:3f:27:90:48:15:73:ee: 3f:1f:a1:00:4a:a8:10:cf:52:11:b0:88:84:9e:b8:02:01:d7: 2f:c0:cf:0b:45:3a:d7:63:de:b9:be:8e:22:7e:47:ee:6b:1b: 8e:57:f7:68:9f:0f:fb:05:99:f3:e7:db:64:67:bb:2b:73:c7: 3e:ba:11:89:ee:14:d4:c6:1e:70:4d:6a:2f:9b:b9:e9:eb:3a: de:70:34:dd:de:09:b7:25:ae:a2:ac:cc:df:ca:ce:ed:ed:29: c0:97:ce:8f:d3:7d:11:e9:91:47:04:0c:e1:e6:d9:60:59:8c: 53:d3:fe:f6:a4:10:4d:08:5e:6a:20:3f:9a:fb:f5:a7:14:04: ef:e3:bc:45:ed:de:f6:bc:cd:14:cb:11:ac:44:3a:1c:24:81: 8e:7c:76:4a:b7:3b:5c:d8:a3:36:67:78:6f:6e:54:5a:ae:b7: f3:72:4e:e8:17:3e:d1:0f:d6:28:ac:91:17:6e:29:6b:67:78: 4c:be:7b:0e:52:1a:14:34:d2:57:1c:b5:17:50:04:20:5f:c3: b9:5e:9c:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPpHfpmZt4uag4sQGPQNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZDAxZThjYTBhZmU0MTRjMTU3ZTFmYmZiNTM5NDg2N2Nl NTFlZGIwHhcNMjUxMjE1MjMwMDM4WhcNMjUxMjE2MjMwMDM4WjAzMTEwLwYDVQQD EyhiYWM5MTZiN2JjYjMyNmU3ZGNlZDljNjYxNGIzYTE3NzU0N2NlOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UVS6mORrTePzqncf/uAOFfpt+k6 rjm4BumbfL8e3cA7XB/V6poqCi+8PBd5GYJzd1sE+LtFPGSu7ZhDDRAGkcx1Y/cz HglLHE2mDty4Hzys4zc1SoXwvbNTgbcsbqjml7VP/K3UsFhMSsVu1ARUnh+cixRd skLwll+nyDoZleV1qAwzAsIM2UhUI1h53t1nCFHpgS3Ujeu7KpMQvi3Q2roD0SEu 9InX7RROyUWlmAv/3+63dI4vtjHf82Axegwu/HvTZegc06M0lfnhiUmWGPjhADr2 QVLqBR176derGlfHCbf0sq3zVIwL97LzaSGAq5PLlNqb9r130koWH6zbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrJFre8sybn3O2cZhSzoXdUfOlTMB8GA1UdIwQY MBaAFDnQHoygr+QUwVfh+/tTlIZ85R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTIt MmU2MjQ2YzIxOWY3LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTItMmU2MjQ2YzIxOWY3 LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2RvBgSK U/lu+Le3mSKak2MUCv0i9OHp8JgBeMchmxzX/qsTmKHF0l4pvkPv0mI/J5BIFXPu Px+hAEqoEM9SEbCIhJ64AgHXL8DPC0U612Peub6OIn5H7msbjlf3aJ8P+wWZ8+fb ZGe7K3PHProRie4U1MYecE1qL5u56es63nA03d4JtyWuoqzM38rO7e0pwJfOj9N9 EemRRwQM4ebZYFmMU9P+9qQQTQheaiA/mvv1pxQE7+O8Re3e9rzNFMsRrEQ6HCSB jnx2Src7XNijNmd4b25UWq6383JO6Bc+0Q/WKKyRF24pa2d4TL57DlIaFDTSVxy1 F1AEIF/DuV6cXQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:55:41 2025 by rpki-client