This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json) Hash identifier: 5vnH+2bNF6wQWqXHyJjNZc7m/ScL6vCiNPTaD5knhR4= Subject key identifier: 72:E0:45:F8:99:12:8F:47:CB:F5:1D:27:F5:0A:4E:8F:0B:6E:23:61 Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73 Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73 Certificate serial: 019AF2AD957C77E2913BBDFA2E51756AED9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft Manifest number: 047D Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: 8GVQo/tjWQecxATy/px08sFeI/wDDSepqK240betHxs=) 2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:95:7c:77:e2:91:3b:bd:fa:2e:51:75:6a:ed:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=72e045f899128f47cbf51d27f50a4e8f0b6e2361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:f3:6c:cf:5f:cb:9a:ae:08:e5:99:fa:b5: a6:64:27:51:6a:cf:92:7c:43:7c:92:4e:f5:ca:64: 8d:50:66:96:4a:8a:b7:5e:16:83:64:58:b3:36:a7: ae:57:1d:bb:f2:a1:23:b1:fc:7a:78:3f:10:8b:be: 0a:04:6a:8f:e8:e6:77:b8:14:0c:4c:56:ff:3a:8b: ea:5a:e4:4b:69:5a:e5:87:8c:fc:3a:28:0e:df:31: 80:61:18:0e:a7:28:32:c8:04:74:99:ac:e6:c6:3e: 90:f7:37:b1:99:fa:3d:ce:20:01:ea:7d:5d:27:7d: a5:47:68:31:a0:90:3b:bb:7e:cd:de:2c:a0:ea:68: e6:a7:fe:c0:5e:d9:ec:b7:85:8e:42:0b:80:af:e4: 73:a3:c9:da:f4:c9:f2:af:85:5b:69:45:04:d9:35: 6f:5d:c4:41:a3:98:3c:bd:b6:61:5b:37:85:98:61: d7:9f:8b:64:ae:42:3c:e7:89:2b:26:33:fb:24:00: 2c:6c:3f:9a:9e:2c:b9:8c:9a:4e:01:fc:83:44:1d: 3d:f9:b9:8f:7d:1a:40:fa:2a:7e:89:03:02:38:2c: a5:d8:a7:7f:94:9a:f5:ae:b3:f1:a2:31:be:7e:d1: 74:c9:22:09:20:20:05:c8:a2:e9:21:6b:47:2d:8a: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E0:45:F8:99:12:8F:47:CB:F5:1D:27:F5:0A:4E:8F:0B:6E:23:61 X509v3 Authority Key Identifier: keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b1:84:ba:6b:f5:1b:ca:e4:9b:3c:44:29:20:ee:a0:15:fe: 63:e4:d9:b5:b9:c7:3b:e6:56:35:47:8c:22:b1:09:f1:60:d6: f3:64:bb:fc:11:7e:1a:47:c9:ce:3d:a9:91:23:69:94:06:be: 78:de:73:2b:e0:2f:24:f1:3c:a4:5a:96:29:bb:3b:0a:b3:d9: ab:9f:3f:b6:63:5a:2c:56:85:45:42:d8:f8:41:3d:51:39:da: de:be:30:7f:a9:60:d3:93:cf:55:1e:0d:52:67:cd:4b:a9:13: 5c:a4:3f:86:a0:61:88:69:24:4a:c2:5b:54:96:b9:5d:52:e2: 3d:d6:17:11:0f:41:1d:6d:4a:c8:44:b5:82:1f:1a:9e:9d:aa: 22:2e:3c:25:5a:04:b0:58:8a:c6:32:c5:67:3e:e6:3e:2d:47: 3f:ad:1b:99:11:c2:36:f9:e6:69:98:c1:76:20:27:c8:8c:4f: cb:8c:13:84:e0:ad:d9:76:b3:c5:25:81:a6:30:d0:68:bc:f9: 3d:bd:a2:d7:20:56:6e:eb:ac:2b:89:96:df:13:3e:e2:df:91: da:75:b9:9c:ae:73:f7:ae:fd:23:25:e5:83:31:db:61:d0:b0: 56:af:a3:52:1d:9e:56:04:38:0f:03:0b:ab:ca:44:95:13:27: 59:a9:37:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZV8d+KRO736LlF1au2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx OGRlNzMwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg3MmUwNDVmODk5MTI4ZjQ3Y2JmNTFkMjdmNTBhNGU4ZjBiNmUyMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz3zbM9fy5quCOWZ+rWmZCdRas+S fEN8kk71ymSNUGaWSoq3XhaDZFizNqeuVx278qEjsfx6eD8Qi74KBGqP6OZ3uBQM TFb/OovqWuRLaVrlh4z8OigO3zGAYRgOpygyyAR0mazmxj6Q9zexmfo9ziAB6n1d J32lR2gxoJA7u37N3iyg6mjmp/7AXtnst4WOQguAr+Rzo8na9Mnyr4VbaUUE2TVv XcRBo5g8vbZhWzeFmGHXn4tkrkI854krJjP7JAAsbD+aniy5jJpOAfyDRB09+bmP fRpA+ip+iQMCOCyl2Kd/lJr1rrPxojG+ftF0ySIJICAFyKLpIWtHLYpKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLgRfiZEo9Hy/UdJ/UKTo8LbiNhMB8GA1UdIwQY MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3 LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLGEumv1 G8rkmzxEKSDuoBX+Y+TZtbnHO+ZWNUeMIrEJ8WDW82S7/BF+GkfJzj2pkSNplAa+ eN5zK+AvJPE8pFqWKbs7CrPZq58/tmNaLFaFRULY+EE9UTna3r4wf6lg05PPVR4N UmfNS6kTXKQ/hqBhiGkkSsJbVJa5XVLiPdYXEQ9BHW1KyES1gh8anp2qIi48JVoE sFiKxjLFZz7mPi1HP60bmRHCNvnmaZjBdiAnyIxPy4wThOCt2XazxSWBpjDQaLz5 Pb2i1yBWbuusK4mW3xM+4t+R2nW5nK5z9679IyXlgzHbYdCwVq+jUh2eVgQ4DwML q8pElRMnWak3yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:28 2025 by rpki-client