This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json) Hash identifier: eU1mVDqibGCV5w5jvUeYH33ADwKlhd+lFsArligKr7c= Subject key identifier: D4:8F:31:EC:1E:67:29:9C:FE:18:35:1E:24:34:30:C2:CF:16:6E:F3 Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01 Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01 Certificate serial: 019AF3C06CE7ECE0AAE44FB208343FBC2FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft Manifest number: 0C86 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: /x7c4Ncpofm9mfsnhqoExfwqQYNHKuHnLZh8hy7yj4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6c:e7:ec:e0:aa:e4:4f:b2:08:34:3f:bc:2f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=d48f31ec1e67299cfe18351e243430c2cf166ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:86:70:3d:7f:be:dd:18:24:8d:7a:09:e8: 69:ed:8b:ad:e4:5e:2c:88:8b:40:4f:9d:95:d7:02: bf:14:76:f9:69:a4:72:28:61:42:e1:83:a9:9c:18: 21:8d:06:91:56:6d:09:d3:35:92:fd:d0:4a:6e:b1: 60:c8:d7:f3:5b:bf:33:33:ca:7c:c1:e8:d2:52:a2: 87:31:a9:2b:81:fa:ba:7f:5b:b6:fd:17:ff:50:a6: bd:b6:6c:0a:b3:2d:67:26:e3:38:d1:bb:da:66:e2: be:ee:d4:db:c7:c6:84:4f:df:b4:45:02:1a:f1:bb: 30:d6:7a:38:23:cb:40:02:0f:ed:47:ac:a5:c2:13: b4:5b:4b:94:9d:7c:8d:ea:f8:30:e7:bd:f3:ae:de: 59:07:b3:9d:d1:ad:dd:13:d2:94:84:e4:bc:72:1e: 7c:ec:7b:72:46:a6:86:8b:de:24:ed:44:0e:d7:08: f0:2d:4d:79:6c:3b:e7:bf:da:e4:82:67:f0:c5:fd: b1:09:f5:44:fa:90:80:de:36:0e:4c:55:be:50:38: 52:9e:26:43:04:d3:53:ee:a1:17:e3:ca:f1:e2:9a: 4d:de:70:63:ab:ea:2f:36:07:3a:4f:21:35:d4:ca: 05:54:18:ff:7b:cd:ee:08:fd:38:00:68:04:a6:6e: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8F:31:EC:1E:67:29:9C:FE:18:35:1E:24:34:30:C2:CF:16:6E:F3 X509v3 Authority Key Identifier: keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:04:cd:1f:4f:54:5d:ea:0d:0e:76:f1:44:85:b4:07:ac:77: 7b:d5:17:96:65:f4:0f:b5:26:0d:0d:c5:93:30:6a:e9:f9:41: 21:1a:7d:bf:31:22:60:bf:5e:c2:24:19:c3:d1:c1:d1:ed:93: 4c:0e:01:5e:ee:74:5c:bc:43:85:8d:63:0d:2a:c4:cf:ef:61: 2a:a4:07:8d:2f:e0:0a:2b:be:ad:be:ad:8d:c2:d0:70:f9:7e: 51:75:cb:3b:16:78:d6:0d:b7:03:00:e1:a2:39:0a:f5:70:d5: 4c:b7:ba:91:ce:9f:ba:4f:a8:a1:b3:5c:f7:e5:50:74:0a:35: fa:06:ce:38:65:26:60:ef:99:ac:fe:16:72:0c:fc:52:e1:37: 89:67:36:e6:bd:11:89:17:80:f0:47:7a:8c:c5:92:d0:8c:8c: 70:16:77:35:2e:e6:d8:5d:e7:f4:ec:12:4a:8e:95:ed:36:a2: 78:ed:cd:7f:7a:07:d6:f3:09:f9:6b:c8:a2:2d:a4:37:88:48: e3:07:85:8f:9a:eb:84:58:97:e7:6d:e0:83:0c:8f:b3:93:96: 88:ba:5d:4e:ee:7e:8e:ca:87:69:95:64:43:89:61:cb:b1:76: c9:d9:af:57:39:c1:c8:3a:7c:dc:cd:86:30:ae:0a:f3:f3:11: 58:6e:62:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGzn7OCq5E+yCDQ/vC+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmZhZGUyNzc5YmQxMmNhZTg5ODg5MjZhNDY2MmQ3NTcw ODZiMDEwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD EyhkNDhmMzFlYzFlNjcyOTljZmUxODM1MWUyNDM0MzBjMmNmMTY2ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDOGcD1/vt0YJI16Cehp7Yut5F4s iItAT52V1wK/FHb5aaRyKGFC4YOpnBghjQaRVm0J0zWS/dBKbrFgyNfzW78zM8p8 wejSUqKHMakrgfq6f1u2/Rf/UKa9tmwKsy1nJuM40bvaZuK+7tTbx8aET9+0RQIa 8bsw1no4I8tAAg/tR6ylwhO0W0uUnXyN6vgw573zrt5ZB7Od0a3dE9KUhOS8ch58 7HtyRqaGi94k7UQO1wjwLU15bDvnv9rkgmfwxf2xCfVE+pCA3jYOTFW+UDhSniZD BNNT7qEX48rx4ppN3nBjq+ovNgc6TyE11MoFVBj/e83uCP04AGgEpm7LewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSPMeweZymc/hg1HiQ0MMLPFm7zMB8GA1UdIwQY MBaAFDq/reJ3m9EsromIkmpGYtdXCGsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ItdDRuZWIwU3l1aVlpU2FrWmkxMWNJYXdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85MjcwYjAtODYwOC00MTQ5LWEwNTIt MDk5ZmRlNjNiYmYyLzEvT3ItdDRuZWIwU3l1aVlpU2FrWmkxMWNJYXdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85MjcwYjAtODYwOC00MTQ5LWEwNTItMDk5ZmRlNjNiYmYy LzEvT3ItdDRuZWIwU3l1aVlpU2FrWmkxMWNJYXdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgTNH09U XeoNDnbxRIW0B6x3e9UXlmX0D7UmDQ3FkzBq6flBIRp9vzEiYL9ewiQZw9HB0e2T TA4BXu50XLxDhY1jDSrEz+9hKqQHjS/gCiu+rb6tjcLQcPl+UXXLOxZ41g23AwDh ojkK9XDVTLe6kc6fuk+oobNc9+VQdAo1+gbOOGUmYO+ZrP4Wcgz8UuE3iWc25r0R iReA8Ed6jMWS0IyMcBZ3NS7m2F3n9OwSSo6V7TaieO3Nf3oH1vMJ+WvIoi2kN4hI 4weFj5rrhFiX523ggwyPs5OWiLpdTu5+jsqHaZVkQ4lhy7F2ydmvVznByDp83M2G MK4K8/MRWG5iZg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:35 2025 by rpki-client