This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json) Hash identifier: wBFH25TxEqEeeD9txJhhyDYNcvRcys7aZrp8x/aiibk= Subject key identifier: 32:60:99:F2:D5:FE:9E:5F:3F:4F:B3:E5:14:F6:A1:2A:28:9F:7A:AC Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Certificate serial: 019B20CFEE1C10DB6129EA1D79C6EF535D98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 07:00:56 +0000 Manifest this update: Mon 15 Dec 2025 07:00:56 +0000 Manifest next update: Tue 16 Dec 2025 07:00:56 +0000 Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: gOlLGFNQq8QLcpgx9kd2Brj4cDFsXLias5EAXd/Kvxk=) 2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:ee:1c:10:db:61:29:ea:1d:79:c6:ef:53:5d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Validity Not Before: Dec 15 07:00:56 2025 GMT Not After : Dec 16 07:00:56 2025 GMT Subject: CN=326099f2d5fe9e5f3f4fb3e514f6a12a289f7aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:81:e8:a1:95:69:64:40:89:15:72:09:cd: 31:ae:cb:3a:1a:35:3e:ae:9b:38:64:8e:9e:8b:fb: 2b:c9:1f:1f:53:b8:35:00:fe:0c:c3:31:f8:35:4d: 43:57:70:4e:92:c8:3d:0a:48:d6:d9:8e:7c:d3:69: 67:bf:ca:91:22:c0:3d:34:98:8a:fe:85:23:0f:d2: 5d:93:0e:0d:e5:3c:fb:98:35:b9:ff:13:07:3e:22: 1c:fe:e4:3c:49:7a:2c:74:87:6b:46:9a:9c:94:6d: eb:a9:bb:6c:a1:d7:7c:7c:1e:1d:32:c0:95:b7:3c: 56:08:ee:4a:b4:93:be:5a:2c:40:15:4e:64:92:f9: 2c:19:03:d3:dc:5d:3c:e4:7d:f2:e9:c2:87:78:75: 44:e6:39:ac:fd:a9:82:cc:dc:c3:e7:be:18:d3:be: a8:1a:13:7f:9c:7f:40:f8:38:47:3a:84:9b:6c:b6: ee:34:70:92:fc:56:07:de:df:64:27:c3:a7:4a:e6: 83:93:a1:3a:cc:5a:7f:22:f3:e1:01:09:fb:5f:9b: fc:b4:a1:61:8e:c9:5d:a1:d3:7f:4f:ce:e1:86:5f: 2e:a3:ec:a7:8c:7d:ed:17:d0:3a:5d:5a:ee:54:64: 8e:b9:66:7d:21:7c:dc:ce:da:5f:38:3e:91:68:db: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:60:99:F2:D5:FE:9E:5F:3F:4F:B3:E5:14:F6:A1:2A:28:9F:7A:AC X509v3 Authority Key Identifier: keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:23:c7:40:a0:b8:1a:09:78:37:be:15:12:66:19:23:d8:2e: 85:aa:1c:8a:64:9b:56:74:ae:cb:a1:4e:8c:6d:a2:60:60:cf: e4:88:61:75:00:17:d4:da:95:ed:77:92:7d:9f:1d:a5:bf:5d: 0a:fd:8b:47:6a:af:ed:60:84:20:39:1b:2b:c7:6e:bc:1d:64: 8e:7e:4c:e3:91:2b:38:e5:93:4c:b4:c6:6c:3e:c0:dd:88:63: 9d:75:06:bf:71:35:8c:13:aa:34:fc:e9:33:54:78:94:76:04: 84:90:2f:0d:15:e9:10:92:2f:e8:6b:f7:a2:ba:f8:b3:60:5c: d4:40:dc:90:0a:09:64:a1:61:5a:6d:4e:1d:b7:0f:fb:c2:a6: 69:f4:c8:c9:ef:9a:7e:c0:40:d2:54:19:2a:76:79:75:13:68: 20:10:cf:96:27:57:2b:9e:63:81:32:e5:8d:bd:41:21:bd:bd: 9f:a3:0c:f0:71:3a:8a:f2:67:8a:fa:6a:b4:bb:a1:b8:27:b9: 07:aa:fa:c0:f7:5b:9c:5d:cd:a0:2c:3b:e0:7a:f4:99:b0:ee: cd:60:4a:37:5e:48:8e:62:a4:04:58:8d:60:c8:b5:2a:f8:48: c4:b3:b4:ef:9c:f7:7c:e5:77:c4:82:cd:05:97:74:c6:bd:b2: 9d:b1:b1:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz+4cENthKeodecbvU12YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl NDM3OTMwHhcNMjUxMjE1MDcwMDU2WhcNMjUxMjE2MDcwMDU2WjAzMTEwLwYDVQQD EygzMjYwOTlmMmQ1ZmU5ZTVmM2Y0ZmIzZTUxNGY2YTEyYTI4OWY3YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0umB6KGVaWRAiRVyCc0xrss6GjU+ rps4ZI6ei/sryR8fU7g1AP4MwzH4NU1DV3BOksg9CkjW2Y5802lnv8qRIsA9NJiK /oUjD9Jdkw4N5Tz7mDW5/xMHPiIc/uQ8SXosdIdrRpqclG3rqbtsodd8fB4dMsCV tzxWCO5KtJO+WixAFU5kkvksGQPT3F085H3y6cKHeHVE5jms/amCzNzD574Y076o GhN/nH9A+DhHOoSbbLbuNHCS/FYH3t9kJ8OnSuaDk6E6zFp/IvPhAQn7X5v8tKFh jsldodN/T87hhl8uo+ynjH3tF9A6XVruVGSOuWZ9IXzcztpfOD6RaNtQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJgmfLV/p5fP0+z5RT2oSoon3qsMB8GA1UdIwQY MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4 LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSPHQKC4 Ggl4N74VEmYZI9guhaocimSbVnSuy6FOjG2iYGDP5IhhdQAX1NqV7XeSfZ8dpb9d Cv2LR2qv7WCEIDkbK8duvB1kjn5M45ErOOWTTLTGbD7A3YhjnXUGv3E1jBOqNPzp M1R4lHYEhJAvDRXpEJIv6Gv3orr4s2Bc1EDckAoJZKFhWm1OHbcP+8KmafTIye+a fsBA0lQZKnZ5dRNoIBDPlidXK55jgTLljb1BIb29n6MM8HE6ivJnivpqtLuhuCe5 B6r6wPdbnF3NoCw74Hr0mbDuzWBKN15IjmKkBFiNYMi1KvhIxLO075z3fOV3xILN BZd0xr2ynbGxPA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:54:06 2025 by rpki-client