This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json) Hash identifier: 6gGw+/km0cn478F6k8RQS3DvAMkg7oqf9vj+gBJeFf8= Subject key identifier: B6:53:1C:97:71:F6:D1:02:74:65:0E:AF:EB:16:1D:E7:CC:E4:A9:A5 Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6 Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6 Certificate serial: 019AF49BFFF93BCD643D03CA6CF289368D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft Manifest number: 084B Signing time: Sat 06 Dec 2025 17:00:55 +0000 Manifest this update: Sat 06 Dec 2025 17:00:55 +0000 Manifest next update: Sun 07 Dec 2025 17:00:55 +0000 Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: glBtnNZp1T1xMkBC7HXFrOTwd3ObX4GROCDIxMvSkp4=) 2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ff:f9:3b:cd:64:3d:03:ca:6c:f2:89:36:8d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6 Validity Not Before: Dec 6 17:00:55 2025 GMT Not After : Dec 7 17:00:55 2025 GMT Subject: CN=b6531c9771f6d10274650eafeb161de7cce4a9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:93:0e:3d:07:a8:b5:02:a6:ac:97:ca:f5: a8:0f:fc:e5:e8:c5:10:11:e1:a3:75:62:08:7a:1a: d9:c4:96:6e:b6:5f:17:8b:e4:ae:e7:c0:95:00:46: 48:16:6e:fd:bb:ad:d1:a5:bd:91:77:14:fb:36:fa: 31:c0:fb:bc:74:33:7d:0d:66:c3:82:f0:8a:21:dc: 9f:ed:d8:1a:7a:7e:39:b7:6b:7e:43:62:4e:4c:fa: 97:d8:56:79:5d:ff:93:d3:87:36:04:93:7f:a3:8c: 6a:1b:11:87:c0:1d:38:f4:47:ee:e7:41:ab:73:16: e4:bc:42:28:c1:77:9c:d0:9c:92:fc:d3:2b:55:52: eb:89:b9:7f:a8:fa:da:fe:08:81:bd:d8:73:29:3e: 29:e0:f8:12:ac:3b:b8:d9:0f:d8:4b:64:d9:7c:93: 3e:e8:0e:e7:0f:b3:39:ea:97:0d:bf:e6:01:01:1b: 1d:5b:e5:4e:bf:59:fc:94:a4:3a:2f:d5:da:79:ec: 49:4b:35:7e:8e:a0:e5:ab:8a:cd:f3:e5:3f:f4:03: 34:47:dc:8d:cd:9b:f3:30:84:eb:ee:b9:35:d3:26: f9:20:ad:64:93:b4:f0:2e:84:c3:a8:15:9d:b6:8f: ca:35:30:2d:2f:ab:9c:5a:cf:b7:95:3b:ae:9c:32: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:1C:97:71:F6:D1:02:74:65:0E:AF:EB:16:1D:E7:CC:E4:A9:A5 X509v3 Authority Key Identifier: keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:66:42:41:d2:a3:ff:f0:77:1e:57:58:22:b2:85:39:3f:4e: 0b:72:d4:cc:55:3b:8a:af:9b:16:f2:86:8b:a1:ca:fc:d2:2f: 13:5f:fe:76:e3:45:4b:e6:3d:6b:5e:e7:d5:1e:8a:43:21:07: f4:04:b1:ad:d9:9f:05:f1:44:ed:f5:58:1f:4a:57:7c:bd:87: 05:5e:0c:d6:03:80:00:f4:10:d0:73:9e:a6:fc:a2:89:ad:ca: 7e:72:65:7b:89:7c:b2:d9:23:b8:47:57:91:51:a7:d0:85:1b: ab:fb:2f:33:d2:35:45:af:9f:2f:f5:09:f2:46:d2:6e:e6:e1: 37:af:82:b9:3a:49:6e:d9:1b:43:b9:12:6e:b2:39:8c:28:81: 2e:34:af:e8:79:59:2a:e0:3d:21:a8:1b:cc:97:bc:14:f8:92: 92:ed:5d:44:fb:ca:5b:09:5d:99:2b:d6:e4:c6:71:f3:cb:aa: 7f:47:d0:0c:bc:b3:2b:d6:1a:5d:5d:90:29:37:3b:1d:55:6b: db:f5:f3:93:f8:b4:9b:68:79:4a:86:c6:6b:96:83:fc:d1:e1: 46:55:43:36:0a:2b:f1:2e:11:5d:7e:2f:c1:b5:5a:05:9b:be: ed:c4:07:1d:cd:10:a2:97:1b:ac:d9:6a:82:13:3f:9c:ca:06: c1:d6:25:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m//5O81kPQPKbPKJNo18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTg3MDBlYTljN2JlMmRmNTY4OGFmZmJlZGQ4YTRlNTUz OTJkZTYwHhcNMjUxMjA2MTcwMDU1WhcNMjUxMjA3MTcwMDU1WjAzMTEwLwYDVQQD EyhiNjUzMWM5NzcxZjZkMTAyNzQ2NTBlYWZlYjE2MWRlN2NjZTRhOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8WTDj0HqLUCpqyXyvWoD/zl6MUQ EeGjdWIIehrZxJZutl8Xi+Su58CVAEZIFm79u63Rpb2RdxT7NvoxwPu8dDN9DWbD gvCKIdyf7dgaen45t2t+Q2JOTPqX2FZ5Xf+T04c2BJN/o4xqGxGHwB049Efu50Gr cxbkvEIowXec0JyS/NMrVVLribl/qPra/giBvdhzKT4p4PgSrDu42Q/YS2TZfJM+ 6A7nD7M56pcNv+YBARsdW+VOv1n8lKQ6L9XaeexJSzV+jqDlq4rN8+U/9AM0R9yN zZvzMITr7rk10yb5IK1kk7TwLoTDqBWdto/KNTAtL6ucWs+3lTuunDJnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZTHJdx9tECdGUOr+sWHefM5KmlMB8GA1UdIwQY MBaAFDkYcA6px74t9WiK/77dik5VOS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWIt MWM4YmUyNWViNjg2LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWItMWM4YmUyNWViNjg2 LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGZCQdKj //B3HldYIrKFOT9OC3LUzFU7iq+bFvKGi6HK/NIvE1/+duNFS+Y9a17n1R6KQyEH 9ASxrdmfBfFE7fVYH0pXfL2HBV4M1gOAAPQQ0HOepvyiia3KfnJle4l8stkjuEdX kVGn0IUbq/svM9I1Ra+fL/UJ8kbSbubhN6+CuTpJbtkbQ7kSbrI5jCiBLjSv6HlZ KuA9IagbzJe8FPiSku1dRPvKWwldmSvW5MZx88uqf0fQDLyzK9YaXV2QKTc7HVVr 2/Xzk/i0m2h5SobGa5aD/NHhRlVDNgor8S4RXX4vwbVaBZu+7cQHHc0QopcbrNlq ghM/nMoGwdYlNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:48 2025 by rpki-client