This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json) Hash identifier: Bl5ZT8+HKqYRAbxhD4UEYnY4aj3yKDsl0ojyvBEg+sc= Subject key identifier: 56:EE:DC:61:59:37:60:3A:E2:30:00:EB:D6:C2:DE:A7:D3:97:43:ED Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Certificate serial: 019AF31D0876B2FC1DB4C674660FA8CF1080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft Manifest number: CB Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: NXn8cd20MhYvmu99i5nnv+/TlIn91dM5nC3jenVHFJs=) 2: saWdrzat9gNhwDjToVtk8WsFYgw.roa (hash: gICbNWmSBInV+7Bf/50oOLEAVR12IrqsEIFbrP0sB00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:08:76:b2:fc:1d:b4:c6:74:66:0f:a8:cf:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=56eedc615937603ae23000ebd6c2dea7d39743ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:4f:19:b1:2b:82:5c:25:da:b6:8c:4e:3b: f6:1d:20:5a:5a:85:f3:49:b5:ea:e9:41:77:b7:c3: e5:ca:f6:07:1c:8a:a2:af:98:08:7f:bf:80:28:a5: a8:d5:c0:71:97:76:e2:c8:bc:94:bb:39:a8:a2:91: 89:76:1d:10:a3:8d:04:22:2e:50:c1:ef:5d:b4:dd: 8c:d9:c7:3b:e1:84:a5:bb:54:40:61:fb:08:0c:0f: 98:7c:ab:4f:63:a2:4e:12:f4:3c:12:24:4d:96:bc: c7:b8:e2:de:7f:c9:af:f2:3f:55:d1:2a:49:db:72: 26:9c:85:f2:22:4a:fd:fc:f6:c7:7d:34:5d:6f:6e: f1:eb:3d:e1:6a:ab:dd:d5:6b:c4:b6:9b:02:8c:6a: 8e:5e:66:8d:7e:43:51:13:e3:8c:90:fc:b2:79:49: e5:bd:1b:3c:13:5c:7f:b1:a3:9f:50:6c:48:6b:f0: 39:a8:27:f2:67:47:1a:32:bb:70:8b:d4:ca:fc:17: 70:5c:41:e1:d5:93:f0:98:c3:d6:f3:58:12:1a:bc: 1c:9c:6f:03:71:83:0b:24:78:96:ae:1d:95:46:46: 8c:13:69:49:93:87:2a:78:39:0e:15:99:29:f4:7c: 90:bb:c7:0e:f1:69:7d:27:8c:1c:a6:ed:f0:a4:bd: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EE:DC:61:59:37:60:3A:E2:30:00:EB:D6:C2:DE:A7:D3:97:43:ED X509v3 Authority Key Identifier: keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:61:82:cc:d5:cc:b4:70:d7:0f:61:97:ff:41:2c:45:43:4b: eb:74:3f:e3:ad:e9:69:82:df:75:66:50:44:47:a7:ff:77:2c: 10:c0:5e:db:7d:7b:72:e5:68:50:95:7b:e5:f2:4c:3c:72:85: 92:17:e4:d7:0d:1f:c2:c9:09:cc:bc:94:88:4f:40:03:24:98: 17:86:84:12:25:2e:54:b8:d1:e6:59:01:5b:fc:a3:26:82:b0: 72:a9:f7:eb:ed:e5:18:36:fb:68:9a:09:aa:e2:96:78:aa:dc: fd:bd:c5:12:36:0a:5c:b2:3b:f7:16:db:a5:85:fc:2c:e5:c5: a3:6d:67:d6:d2:87:13:10:f0:94:0c:fb:e2:b6:d9:00:8f:ae: d5:b6:90:1e:cb:4a:39:b8:a2:7f:d9:36:a8:14:56:2c:5f:fe: 9d:e9:9b:6d:df:a6:bc:09:37:90:0f:b2:c5:f4:8b:6a:08:b5: 5b:bc:e6:48:b3:2e:52:af:5a:7b:89:93:86:a5:3e:ca:b0:49: 43:45:65:04:6d:9d:32:ef:43:e8:95:f8:94:51:44:7c:c9:de: fa:c0:74:e0:0e:f8:45:90:2c:37:46:bb:f4:7f:f6:4a:33:77: d5:13:62:19:97:4d:74:39:a3:dd:c4:b8:c4:74:c2:db:ce:bf: 54:b2:bc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQh2svwdtMZ0Zg+ozxCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk MWU1MDgwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD Eyg1NmVlZGM2MTU5Mzc2MDNhZTIzMDAwZWJkNmMyZGVhN2QzOTc0M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVlPGbErglwl2raMTjv2HSBaWoXz SbXq6UF3t8PlyvYHHIqir5gIf7+AKKWo1cBxl3biyLyUuzmoopGJdh0Qo40EIi5Q we9dtN2M2cc74YSlu1RAYfsIDA+YfKtPY6JOEvQ8EiRNlrzHuOLef8mv8j9V0SpJ 23ImnIXyIkr9/PbHfTRdb27x6z3haqvd1WvEtpsCjGqOXmaNfkNRE+OMkPyyeUnl vRs8E1x/saOfUGxIa/A5qCfyZ0caMrtwi9TK/BdwXEHh1ZPwmMPW81gSGrwcnG8D cYMLJHiWrh2VRkaME2lJk4cqeDkOFZkp9HyQu8cO8Wl9J4wcpu3wpL0JbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbu3GFZN2A64jAA69bC3qfTl0PtMB8GA1UdIwQY MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2GCzNXM tHDXD2GX/0EsRUNL63Q/463paYLfdWZQREen/3csEMBe2317cuVoUJV75fJMPHKF khfk1w0fwskJzLyUiE9AAySYF4aEEiUuVLjR5lkBW/yjJoKwcqn36+3lGDb7aJoJ quKWeKrc/b3FEjYKXLI79xbbpYX8LOXFo21n1tKHExDwlAz74rbZAI+u1baQHstK Obiif9k2qBRWLF/+nembbd+mvAk3kA+yxfSLagi1W7zmSLMuUq9ae4mThqU+yrBJ Q0VlBG2dMu9D6JX4lFFEfMne+sB04A74RZAsN0a79H/2SjN31RNiGZdNdDmj3cS4 xHTC286/VLK8GA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:45 2025 by rpki-client