This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json) Hash identifier: ekxKaUaZre3Ie4x2iKHNm8PzhRjP+V6/NKpyAD3Df/4= Subject key identifier: FE:7A:BF:11:4B:BB:E0:B9:84:DA:68:F6:3E:68:BE:3E:1C:E5:F5:94 Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02 Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702 Certificate serial: 019AF3896F8275137A3018EACA1DEAD889AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft Manifest number: 1470 Signing time: Sat 06 Dec 2025 12:01:01 +0000 Manifest this update: Sat 06 Dec 2025 12:01:01 +0000 Manifest next update: Sun 07 Dec 2025 12:01:01 +0000 Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=) 2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: ToJ1iup+BbRqBcbe1d/AALQ+84hYXZvZMy1Vy6IWTvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:6f:82:75:13:7a:30:18:ea:ca:1d:ea:d8:89:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702 Validity Not Before: Dec 6 12:01:01 2025 GMT Not After : Dec 7 12:01:01 2025 GMT Subject: CN=fe7abf114bbbe0b984da68f63e68be3e1ce5f594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:73:77:0b:07:2d:cd:64:80:12:a8:de:3e: b0:cc:2a:71:cc:fc:95:83:01:f5:5a:d2:ae:43:dc: 7d:ec:83:72:4b:20:83:4b:95:30:f0:f7:52:f2:f7: 1d:12:28:12:1f:54:b4:94:22:df:95:ba:a3:0c:77: 55:12:3d:1c:35:7e:3f:9f:23:6c:42:57:84:41:fc: b3:7e:ec:5b:d4:6a:27:84:da:61:dd:5e:56:23:58: fd:5f:ae:e3:9c:16:ea:4e:19:57:fa:03:13:1c:52: 14:90:86:92:73:28:ce:e6:cf:ac:02:c2:e8:07:21: 13:0c:c9:3b:a8:42:71:ae:90:e7:59:d9:03:d7:84: 2f:b4:76:5c:1c:95:67:14:04:25:d4:90:2f:da:7d: d9:88:1a:fa:8d:d7:1d:d9:d9:5c:c1:fc:1a:5b:66: cf:d5:f2:ae:5d:b3:3d:8a:fe:f3:2c:95:a5:ae:a9: e2:05:67:d9:9f:14:d0:3a:1c:63:cf:56:00:cf:ec: 49:fc:62:74:20:59:7b:19:73:d0:a5:81:e7:a5:fa: d1:d8:15:d5:b0:63:0f:0c:f5:65:6c:99:0f:2d:a8: f1:0f:c4:49:0f:45:d8:62:0c:49:49:39:00:d9:65: 9a:ff:5e:b7:8c:c0:28:6f:62:7b:66:ab:4e:03:a9: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:BF:11:4B:BB:E0:B9:84:DA:68:F6:3E:68:BE:3E:1C:E5:F5:94 X509v3 Authority Key Identifier: keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:10:63:1e:c2:77:7c:24:04:6c:15:6f:5b:cd:1b:fb:85:91: 90:e5:c4:20:50:f6:f7:be:a3:82:7c:46:66:78:76:8c:0c:23: 9b:b9:48:fc:12:f4:be:99:5d:15:bc:ce:d1:a7:76:be:2d:ae: fd:11:4d:64:69:d4:72:47:aa:c0:1e:b6:64:0f:53:87:54:fe: e8:0e:cd:a0:01:12:03:95:d3:86:a1:14:b0:cc:54:91:59:46: 5f:9e:07:56:f3:15:c2:37:6e:f6:e2:2f:af:15:08:89:c9:02: 4f:a2:56:90:89:54:b0:9e:66:1a:ec:9e:33:4c:34:1c:84:6e: 99:87:cf:e9:16:74:cf:90:50:39:ac:76:bc:ad:2c:2c:8c:ae: ce:40:b0:d2:2c:31:a0:20:63:bc:a8:10:d3:33:d2:cd:cc:a1: 3f:f3:93:0f:ec:37:74:f0:13:10:af:ec:35:1e:16:1d:fb:78: 02:87:81:a7:80:e8:52:26:f4:34:e3:35:7c:b6:2d:bf:ec:25: 88:32:39:9e:b2:c9:ba:4f:c5:3d:6c:73:bb:e8:7b:e4:95:1a: f7:30:6e:f2:63:7a:08:eb:73:30:bd:72:8c:fa:a3:15:6e:1e: 2a:77:93:90:22:7c:7c:ef:9c:5a:7b:3c:ef:51:12:a5:a2:13: e4:6d:03:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziW+CdRN6MBjqyh3q2ImvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk NjQ3MDIwHhcNMjUxMjA2MTIwMTAxWhcNMjUxMjA3MTIwMTAxWjAzMTEwLwYDVQQD EyhmZTdhYmYxMTRiYmJlMGI5ODRkYTY4ZjYzZTY4YmUzZTFjZTVmNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1NzdwsHLc1kgBKo3j6wzCpxzPyV gwH1WtKuQ9x97INySyCDS5Uw8PdS8vcdEigSH1S0lCLflbqjDHdVEj0cNX4/nyNs QleEQfyzfuxb1GonhNph3V5WI1j9X67jnBbqThlX+gMTHFIUkIaScyjO5s+sAsLo ByETDMk7qEJxrpDnWdkD14QvtHZcHJVnFAQl1JAv2n3ZiBr6jdcd2dlcwfwaW2bP 1fKuXbM9iv7zLJWlrqniBWfZnxTQOhxjz1YAz+xJ/GJ0IFl7GXPQpYHnpfrR2BXV sGMPDPVlbJkPLajxD8RJD0XYYgxJSTkA2WWa/163jMAob2J7ZqtOA6ln6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP56vxFLu+C5hNpo9j5ovj4c5fWUMB8GA1UdIwQY MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt YWFiODYyODYxYTA5LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5 LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhBjHsJ3 fCQEbBVvW80b+4WRkOXEIFD2976jgnxGZnh2jAwjm7lI/BL0vpldFbzO0ad2vi2u /RFNZGnUckeqwB62ZA9Th1T+6A7NoAESA5XThqEUsMxUkVlGX54HVvMVwjdu9uIv rxUIickCT6JWkIlUsJ5mGuyeM0w0HIRumYfP6RZ0z5BQOax2vK0sLIyuzkCw0iwx oCBjvKgQ0zPSzcyhP/OTD+w3dPATEK/sNR4WHft4AoeBp4DoUib0NOM1fLYtv+wl iDI5nrLJuk/FPWxzu+h75JUa9zBu8mN6COtzML1yjPqjFW4eKneTkCJ8fO+cWns8 71ESpaIT5G0DEg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:27 2025 by rpki-client