This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json) Hash identifier: HMOireWibqoy3098z1n6aAK9gwa1EiUcg5/AsXMDA4Q= Subject key identifier: 9A:C3:1D:F7:A4:44:3F:C5:17:FE:BE:41:04:57:25:68:C1:53:C4:1A Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Certificate serial: 019B318C762ACC0951D1DE03F94F5F959574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft Manifest number: 0DFC Signing time: Thu 18 Dec 2025 13:00:47 +0000 Manifest this update: Thu 18 Dec 2025 13:00:47 +0000 Manifest next update: Fri 19 Dec 2025 13:00:47 +0000 Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: p8mBcGYhUPijqrlk5yBmmegIttXeDqDOXIscWu1I1hc=) 2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:76:2a:cc:09:51:d1:de:03:f9:4f:5f:95:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Validity Not Before: Dec 18 13:00:47 2025 GMT Not After : Dec 19 13:00:47 2025 GMT Subject: CN=9ac31df7a4443fc517febe4104572568c153c41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:70:13:75:35:00:de:0c:98:f9:63:7d:dc: ab:e7:2a:64:75:d5:e4:7f:b7:5a:01:c9:a5:c9:50: bc:aa:4d:0f:27:38:cf:f7:58:57:40:ff:77:ae:c8: 57:13:68:d3:b8:6e:59:63:93:cd:cb:27:02:88:0d: ff:a5:ba:5a:d4:e3:e0:c2:b9:d5:e4:62:dc:2a:2b: 78:d0:ac:a7:99:77:6b:0d:1e:ba:70:01:31:bf:bd: 63:2f:57:da:42:88:fc:11:dd:30:7b:8d:4e:9a:07: 47:b8:ee:7a:62:6d:a8:18:cf:f0:00:bf:6d:ef:44: 0b:ef:78:ce:98:45:41:db:4f:42:71:4e:93:22:e2: ab:a7:96:91:29:d4:2d:cb:78:11:d2:48:3e:21:e9: 77:05:b0:ad:fd:55:8f:7c:c1:35:ca:92:6a:ae:74: 83:ab:9b:00:38:2f:18:7e:76:33:98:65:6d:4e:84: 7a:cf:87:aa:de:04:73:a5:dd:4a:d0:40:69:88:9f: 1f:50:ef:c1:4c:96:18:78:e5:a8:29:9d:5b:89:d7: f0:35:1a:be:60:fa:12:6c:51:7a:d4:af:86:f4:23: 2e:f5:fc:75:87:7f:d7:a5:06:56:0b:83:6b:a2:e0: 1b:0a:c9:15:fb:fa:4a:64:c2:76:fd:c0:86:87:0b: c2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C3:1D:F7:A4:44:3F:C5:17:FE:BE:41:04:57:25:68:C1:53:C4:1A X509v3 Authority Key Identifier: keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f4:da:c7:b1:21:ef:1c:2d:87:da:3f:d6:94:d6:29:da:c0: 7e:64:cd:4b:6e:95:06:0b:3f:e2:67:4c:a3:20:4d:d2:9d:06: 6c:67:1e:69:45:f3:47:65:1e:12:7b:0f:44:f3:2e:6f:46:8c: b6:63:1e:f7:8e:dc:0e:61:9b:f5:ed:ce:5c:06:ed:c2:b3:92: 0e:6b:08:7c:81:c8:b2:2c:c2:70:60:45:6d:54:e2:88:2e:64: b5:57:fa:88:ac:6f:9f:77:6c:8e:d5:cf:09:84:22:69:7a:5d: 74:f0:1a:6d:fc:d4:8a:58:6e:b9:3b:d7:67:9b:28:f0:05:98: 06:29:d7:98:01:f7:9d:4e:70:3a:52:1e:95:61:8d:4c:55:16: 4e:e1:da:84:18:a6:6c:8e:6b:ce:06:f0:68:91:f6:52:df:4d: 77:f9:45:d7:64:bd:10:35:11:fd:1b:6e:dc:e1:6b:25:db:ff: 91:87:a6:ac:2f:37:82:92:6c:e8:1e:fa:0c:fb:47:c8:5e:39: 8c:82:34:81:0d:e7:53:83:b1:ca:3c:14:48:c5:48:44:e7:87: fc:8f:2d:aa:69:b5:23:11:cf:74:10:77:0f:35:77:af:76:36: 5e:c4:bb:53:7c:86:a7:7a:da:5f:9b:e1:05:8e:83:48:06:e2: 76:e7:51:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjHYqzAlR0d4D+U9flZV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWU5OTRhOTUwMTJkOTJmYjUxYTI4YzhhNjUwZWQ5Zjk3 NzM3YjgwHhcNMjUxMjE4MTMwMDQ3WhcNMjUxMjE5MTMwMDQ3WjAzMTEwLwYDVQQD Eyg5YWMzMWRmN2E0NDQzZmM1MTdmZWJlNDEwNDU3MjU2OGMxNTNjNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu1wE3U1AN4MmPljfdyr5ypkddXk f7daAcmlyVC8qk0PJzjP91hXQP93rshXE2jTuG5ZY5PNyycCiA3/pbpa1OPgwrnV 5GLcKit40KynmXdrDR66cAExv71jL1faQoj8Ed0we41OmgdHuO56Ym2oGM/wAL9t 70QL73jOmEVB209CcU6TIuKrp5aRKdQty3gR0kg+Iel3BbCt/VWPfME1ypJqrnSD q5sAOC8YfnYzmGVtToR6z4eq3gRzpd1K0EBpiJ8fUO/BTJYYeOWoKZ1bidfwNRq+ YPoSbFF61K+G9CMu9fx1h3/XpQZWC4NrouAbCskV+/pKZMJ2/cCGhwvCuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrDHfekRD/FF/6+QQRXJWjBU8QaMB8GA1UdIwQY MBaAFDkemUqVAS2S+1GijIplDtn5dze4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMt NDJmYjM2NzdkZjc3LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMtNDJmYjM2NzdkZjc3 LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/Tax7Eh 7xwth9o/1pTWKdrAfmTNS26VBgs/4mdMoyBN0p0GbGceaUXzR2UeEnsPRPMub0aM tmMe947cDmGb9e3OXAbtwrOSDmsIfIHIsizCcGBFbVTiiC5ktVf6iKxvn3dsjtXP CYQiaXpddPAabfzUilhuuTvXZ5so8AWYBinXmAH3nU5wOlIelWGNTFUWTuHahBim bI5rzgbwaJH2Ut9Nd/lF12S9EDUR/Rtu3OFrJdv/kYemrC83gpJs6B76DPtHyF45 jII0gQ3nU4OxyjwUSMVIROeH/I8tqmm1IxHPdBB3DzV3r3Y2XsS7U3yGp3raX5vh BY6DSAbidudROg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:57:02 2025 by rpki-client