This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json) Hash identifier: GLk2aZ3m+6PHFOhgQ2/6ktJSHLUYTQXANqAkQ/uqzPE= Subject key identifier: FC:BC:99:AC:7F:67:94:0F:47:AA:CF:E5:F7:05:30:89:C9:FF:38:02 Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Certificate serial: 019AF5AEAA568874C3F1A3F658E02EBD1313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 22:00:55 +0000 Manifest this update: Sat 06 Dec 2025 22:00:55 +0000 Manifest next update: Sun 07 Dec 2025 22:00:55 +0000 Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=) 2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: ac68SlYEFyceBPNREYOCnp5zTTbabhT4g2+6TvVOxpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:aa:56:88:74:c3:f1:a3:f6:58:e0:2e:bd:13:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Validity Not Before: Dec 6 22:00:55 2025 GMT Not After : Dec 7 22:00:55 2025 GMT Subject: CN=fcbc99ac7f67940f47aacfe5f7053089c9ff3802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:98:3b:c0:7c:da:59:9a:d5:56:cf:70:cc: 63:18:8a:27:bf:56:39:f3:bf:54:8c:13:ed:61:3d: 59:76:4f:ba:33:6f:c0:b5:9a:bf:4e:45:81:99:06: 3c:56:b0:4e:65:99:cd:72:a3:cb:c1:f4:25:0c:71: f8:1e:0b:4c:b2:ee:f6:80:59:2a:a0:f8:8a:01:39: a9:f2:1f:0c:db:39:70:2d:7a:06:d8:91:f5:8d:3c: 15:78:83:ed:c6:59:aa:76:b3:0c:29:65:14:44:d4: 78:22:1c:09:1d:0a:ad:39:45:a9:04:a1:80:98:67: 54:04:8b:cf:e5:87:b5:ce:37:e1:64:79:42:a6:2a: fe:a6:68:1e:16:b9:41:34:7e:42:27:06:d1:95:85: 6a:5d:90:b8:96:87:39:d7:0f:9f:f6:1c:2d:2d:66: 96:39:22:9f:e8:2f:ad:f5:3d:0b:db:9b:c6:26:a0: 33:25:8b:e1:aa:93:64:e2:a7:40:b3:06:1e:e1:07: 76:de:2a:fd:f2:e2:74:63:1f:77:f3:bc:64:90:5a: 44:bb:a0:72:5c:5c:67:df:46:6a:7f:58:b7:11:3d: 71:9e:d2:df:6a:a6:30:70:a5:cc:ac:33:fa:d4:a3: 51:72:11:e1:41:a8:89:3a:7e:db:35:f3:2f:33:0c: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BC:99:AC:7F:67:94:0F:47:AA:CF:E5:F7:05:30:89:C9:FF:38:02 X509v3 Authority Key Identifier: keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:74:67:89:9c:98:75:66:07:24:ab:da:b7:36:f9:43:81:b5: 85:d0:db:da:30:15:f0:25:c8:7c:f5:05:4d:e4:7b:3f:79:a8: 7c:9d:06:d4:74:32:ad:45:b0:56:86:9d:bb:c2:5b:7e:e2:f3: 49:17:32:30:9e:8a:5b:1c:ee:59:a6:40:ff:75:a9:ec:94:ea: 96:af:a6:6e:bc:7c:78:63:26:9e:07:aa:4c:9d:49:a0:39:ae: 62:41:68:42:59:a2:84:56:d1:6e:03:a3:73:52:cd:1c:e3:9b: 21:43:d6:55:b2:f5:27:7b:02:5c:99:5c:55:2a:97:73:be:50: 2c:98:6e:ed:d6:d5:79:6c:b4:6d:d5:92:e1:c6:d7:ed:55:dd: 77:c8:12:4d:3a:e2:16:da:88:86:81:15:a9:29:24:ea:ce:38: 44:9a:fb:cf:b3:9d:7d:41:e4:95:1d:b5:30:a1:f8:5a:62:44: 95:e9:28:d1:bd:0a:95:11:6c:f4:0f:09:b0:48:57:fb:74:0e: 6a:3c:b0:97:b5:b2:01:76:69:60:59:01:9f:5f:32:8e:0a:95: 14:03:5b:41:0a:03:e1:5a:b7:5b:13:cb:e8:af:d7:a9:cf:d5: c7:a7:44:85:5a:ff:e5:fa:cf:6e:b0:98:87:ac:09:15:0b:8b: bf:54:50:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqpWiHTD8aP2WOAuvRMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm ZDc0NDEwHhcNMjUxMjA2MjIwMDU1WhcNMjUxMjA3MjIwMDU1WjAzMTEwLwYDVQQD EyhmY2JjOTlhYzdmNjc5NDBmNDdhYWNmZTVmNzA1MzA4OWM5ZmYzODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2mYO8B82lma1VbPcMxjGIonv1Y5 879UjBPtYT1Zdk+6M2/AtZq/TkWBmQY8VrBOZZnNcqPLwfQlDHH4HgtMsu72gFkq oPiKATmp8h8M2zlwLXoG2JH1jTwVeIPtxlmqdrMMKWUURNR4IhwJHQqtOUWpBKGA mGdUBIvP5Ye1zjfhZHlCpir+pmgeFrlBNH5CJwbRlYVqXZC4loc51w+f9hwtLWaW OSKf6C+t9T0L25vGJqAzJYvhqpNk4qdAswYe4Qd23ir98uJ0Yx9387xkkFpEu6By XFxn30Zqf1i3ET1xntLfaqYwcKXMrDP61KNRchHhQaiJOn7bNfMvMwwB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy8max/Z5QPR6rP5fcFMInJ/zgCMB8GA1UdIwQY MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXRniZyY dWYHJKvatzb5Q4G1hdDb2jAV8CXIfPUFTeR7P3mofJ0G1HQyrUWwVoadu8JbfuLz SRcyMJ6KWxzuWaZA/3Wp7JTqlq+mbrx8eGMmngeqTJ1JoDmuYkFoQlmihFbRbgOj c1LNHOObIUPWVbL1J3sCXJlcVSqXc75QLJhu7dbVeWy0bdWS4cbX7VXdd8gSTTri FtqIhoEVqSkk6s44RJr7z7OdfUHklR21MKH4WmJEleko0b0KlRFs9A8JsEhX+3QO ajywl7WyAXZpYFkBn18yjgqVFANbQQoD4Vq3WxPL6K/Xqc/Vx6dEhVr/5frPbrCY h6wJFQuLv1RQkw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:24 2025 by rpki-client