This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft File: orLY2dCvlBb6vW8gNfpyiO-XyME.mft (raw, json) Hash identifier: WLhmCnjQz7e7S4OHC0KT1qKd+8R+mQg5J4GK/9gYB0o= Subject key identifier: 3D:0D:D3:24:32:9E:66:8A:08:7F:A1:1B:FB:55:30:D1:EA:4C:5B:71 Authority key identifier: A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1 Certificate issuer: /CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1 Certificate serial: 019AF19AF0C7B0F2F6F70220D856E2CB0D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft Manifest number: 07A7 Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: orLY2dCvlBb6vW8gNfpyiO-XyME.crl (hash: ajanaZQT3qbi8merLKfC0Qrf8QPFFm0mKTo6qVS9oi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f0:c7:b0:f2:f6:f7:02:20:d8:56:e2:cb:0d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=3d0dd324329e668a087fa11bfb5530d1ea4c5b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:9d:4b:99:b9:f0:bc:1c:62:dd:75:2a:67: 30:7f:7e:05:53:7c:17:9a:ec:15:a8:93:cc:24:03: 47:29:84:29:ec:3a:ef:cc:bf:47:bf:e9:fd:1d:c1: 83:76:0f:3a:29:72:cc:ed:ab:46:91:0e:38:c9:d8: f1:a3:01:87:65:6c:f1:f5:84:dc:f1:33:a8:d3:da: 4a:d4:f8:e0:7e:e5:93:84:c1:ee:75:9d:85:84:97: b7:14:5c:13:10:53:12:10:9b:3d:12:cf:77:3c:2b: 5a:67:99:e2:94:39:5b:4f:c4:6b:fb:64:7f:0f:52: 69:7f:47:4e:64:ba:a6:97:2e:50:98:36:3c:d2:1a: b8:ba:e6:9d:ab:50:7d:85:e2:37:66:53:02:25:43: 6d:bc:cf:cf:ab:60:35:73:11:48:61:00:06:a3:8a: b2:d5:91:2d:10:5c:3e:5e:65:1c:c9:1f:ba:7b:b6: d8:c6:9f:ac:72:68:f4:92:cc:e3:96:65:76:1f:ce: bc:98:db:46:b5:3f:9b:e5:7a:f4:4c:32:4f:c7:a9: 40:e2:9d:26:65:e5:86:76:80:e0:cd:57:fa:8e:31: 1c:7e:4b:49:cf:0f:81:a5:25:dd:72:f8:81:7d:58: 8e:ae:d3:05:25:ad:a9:ef:94:63:75:c8:51:56:49: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:D3:24:32:9E:66:8A:08:7F:A1:1B:FB:55:30:D1:EA:4C:5B:71 X509v3 Authority Key Identifier: keyid:A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b4:3f:b7:c0:d9:e7:ff:bc:59:6a:e0:db:35:d5:54:4d:9d: 51:0c:dc:2e:d9:06:1b:1f:af:51:b2:6e:40:6d:58:e2:1a:9d: bd:54:68:f0:7c:0c:8e:bb:2d:a8:45:f3:87:e9:f5:19:d1:c8: 3b:c5:fb:78:f7:dd:8c:99:86:98:28:fa:e3:13:8b:bf:4d:b3: 10:f5:d5:67:6b:4b:d8:e9:16:5c:d7:59:de:af:7c:15:11:4e: a5:c0:7d:2a:7c:5d:3d:85:5d:61:6e:db:27:52:89:31:04:54: c6:f6:c8:dc:65:c4:1a:f9:15:85:1c:4a:f4:8a:4b:a4:07:96: 4a:a3:e2:6a:4f:a6:c1:5a:70:94:a7:61:6f:57:60:c8:99:c8: 36:71:a7:cc:ff:26:e1:70:58:d4:f7:9a:71:22:83:91:75:7c: d2:a1:94:95:17:25:e0:b1:ad:43:53:5a:33:3a:e9:45:03:58: 8c:d1:ca:32:fe:66:4a:dc:fa:98:80:8c:ed:e8:5b:8c:92:45: 3c:eb:31:77:9e:02:6d:e9:13:bc:d1:e4:46:cf:31:93:a9:bb: 45:0b:e9:c2:01:98:fc:f6:5a:db:27:ac:db:0a:fb:3f:04:da: 8a:1b:ee:05:03:f3:fd:df:d7:39:c5:b5:2a:19:29:79:b1:55: 68:53:1a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvDHsPL29wIg2Fbiyw1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjJkOGQ5ZDBhZjk0MTZmYWJkNmYyMDM1ZmE3Mjg4ZWY5 N2M4YzEwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EygzZDBkZDMyNDMyOWU2NjhhMDg3ZmExMWJmYjU1MzBkMWVhNGM1YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAGdS5m58LwcYt11Kmcwf34FU3wX muwVqJPMJANHKYQp7DrvzL9Hv+n9HcGDdg86KXLM7atGkQ44ydjxowGHZWzx9YTc 8TOo09pK1PjgfuWThMHudZ2FhJe3FFwTEFMSEJs9Es93PCtaZ5nilDlbT8Rr+2R/ D1Jpf0dOZLqmly5QmDY80hq4uuadq1B9heI3ZlMCJUNtvM/Pq2A1cxFIYQAGo4qy 1ZEtEFw+XmUcyR+6e7bYxp+scmj0kszjlmV2H868mNtGtT+b5Xr0TDJPx6lA4p0m ZeWGdoDgzVf6jjEcfktJzw+BpSXdcviBfViOrtMFJa2p75RjdchRVkmAnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0N0yQynmaKCH+hG/tVMNHqTFtxMB8GA1UdIwQY MBaAFKKy2NnQr5QW+r1vIDX6cojvl8jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JMWTJkQ3ZsQmI2dlc4Z05mcHlpTy1YeU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zYTI4ZTMtODU0NC00OGM2LThiOGUt YmFmN2JhMGM0MTc3LzEvb3JMWTJkQ3ZsQmI2dlc4Z05mcHlpTy1YeU1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zYTI4ZTMtODU0NC00OGM2LThiOGUtYmFmN2JhMGM0MTc3 LzEvb3JMWTJkQ3ZsQmI2dlc4Z05mcHlpTy1YeU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbQ/t8DZ 5/+8WWrg2zXVVE2dUQzcLtkGGx+vUbJuQG1Y4hqdvVRo8HwMjrstqEXzh+n1GdHI O8X7ePfdjJmGmCj64xOLv02zEPXVZ2tL2OkWXNdZ3q98FRFOpcB9KnxdPYVdYW7b J1KJMQRUxvbI3GXEGvkVhRxK9IpLpAeWSqPiak+mwVpwlKdhb1dgyJnINnGnzP8m 4XBY1PeacSKDkXV80qGUlRcl4LGtQ1NaMzrpRQNYjNHKMv5mStz6mICM7ehbjJJF POsxd54CbekTvNHkRs8xk6m7RQvpwgGY/PZa2yes2wr7PwTaihvuBQPz/d/XOcW1 KhkpebFVaFMaFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:09 2025 by rpki-client