This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json) Hash identifier: LZtYQlbiI+JcT9n5k0qFRQObRrhUu99He2/tjhx88dI= Subject key identifier: 2D:2C:F1:FC:94:45:1E:1A:CC:32:7B:37:DC:85:DA:95:37:98:0E:E6 Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64 Certificate serial: 019AF208FCA3003FA8A5E4D525FD3F778FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft Manifest number: 1038 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: B2um4hX8Te2IKGSNIEfprKqPX5pe4dayELa8p4SFIAQ=) 2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fc:a3:00:3f:a8:a5:e4:d5:25:fd:3f:77:8f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=2d2cf1fc94451e1acc327b37dc85da9537980ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:d1:b3:26:b3:a9:b1:47:f0:f5:28:1f:09: 3d:5f:c0:54:f7:8c:00:80:3c:4d:8f:2c:d5:68:cd: 8f:ec:62:b0:62:9e:23:a9:6e:76:19:5d:e3:fd:96: 01:ca:94:74:bc:54:3b:b8:17:98:6a:db:47:57:27: 7f:dc:a4:9f:be:9e:7a:88:77:96:b6:87:7b:63:7c: 94:f4:34:0d:03:3a:c0:1e:23:27:fe:b3:9d:29:b2: 89:fa:d9:69:fd:a0:f7:14:f9:54:02:b6:74:73:cf: 03:1a:84:c6:90:2b:1a:e7:6c:8c:fb:64:b0:f0:95: 25:0a:a2:72:c5:15:84:74:5a:4d:f3:f9:11:b3:ba: bf:65:8f:61:c4:b2:9e:50:24:62:6f:1b:f7:52:00: 15:8c:cf:fd:c5:fd:6e:8e:c2:4a:fd:8c:d3:d1:19: 56:dd:b2:04:64:41:29:8c:cf:d1:38:6f:eb:42:ab: f4:11:45:be:23:cf:24:b7:94:76:86:3d:ed:af:1c: 86:c4:9e:3f:37:be:7f:66:a6:b5:43:b5:74:37:08: b4:bc:44:7a:de:2d:74:d2:f5:19:a0:d7:6e:5f:3f: 51:df:9a:44:18:5b:66:c6:58:0e:6c:53:63:69:15: ba:1a:08:b9:0d:8b:74:96:dd:fd:f3:d5:0c:e3:5b: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2C:F1:FC:94:45:1E:1A:CC:32:7B:37:DC:85:DA:95:37:98:0E:E6 X509v3 Authority Key Identifier: keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dc:3f:17:97:20:aa:fc:28:6a:58:c9:ef:b2:54:a9:f5:86: d6:30:e0:18:83:1d:5e:c1:36:14:7b:10:45:fa:87:8c:1c:11: c3:7d:73:e9:41:5b:5c:80:d0:d9:22:b9:d2:72:ad:79:df:45: cb:c5:03:33:16:65:00:07:b3:44:8e:38:82:da:8f:e6:2b:01: 44:32:60:84:94:e7:c5:8c:7c:ad:0b:4e:6a:f9:0d:a3:81:4b: ee:e8:f5:9d:fe:fe:31:38:12:4b:f2:57:0c:2e:c8:e9:69:3e: bb:ac:b3:f6:fe:98:3e:98:10:22:50:4b:5a:59:c9:ae:32:95: 5a:7a:77:bf:c8:eb:31:39:8d:5a:e1:be:80:af:e1:3e:c5:fa: 01:7b:30:b0:e7:82:58:70:96:ff:72:cd:23:39:e7:ce:6e:93: b8:fb:bb:a5:f5:8b:6d:2f:46:3c:eb:1b:d2:d7:59:8b:4e:34: 63:b7:4f:1d:38:c1:74:4d:7a:75:69:cb:a3:95:50:0c:14:8c: 60:f4:09:f7:52:37:02:a4:b4:2f:f5:ca:ed:a1:a9:11:1f:33: ca:17:49:10:bb:f3:d3:64:7e:fa:49:22:5a:e7:f5:09:f1:ae: cf:b4:58:ea:55:0a:e9:6f:bb:63:68:79:d0:34:4e:2e:50:5e: 5e:88:a6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPyjAD+opeTVJf0/d4/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw MGNiNjQwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EygyZDJjZjFmYzk0NDUxZTFhY2MzMjdiMzdkYzg1ZGE5NTM3OTgwZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWLRsyazqbFH8PUoHwk9X8BU94wA gDxNjyzVaM2P7GKwYp4jqW52GV3j/ZYBypR0vFQ7uBeYattHVyd/3KSfvp56iHeW tod7Y3yU9DQNAzrAHiMn/rOdKbKJ+tlp/aD3FPlUArZ0c88DGoTGkCsa52yM+2Sw 8JUlCqJyxRWEdFpN8/kRs7q/ZY9hxLKeUCRibxv3UgAVjM/9xf1ujsJK/YzT0RlW 3bIEZEEpjM/ROG/rQqv0EUW+I88kt5R2hj3trxyGxJ4/N75/Zqa1Q7V0Nwi0vER6 3i100vUZoNduXz9R35pEGFtmxlgObFNjaRW6Ggi5DYt0lt3989UM41trEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0s8fyURR4azDJ7N9yF2pU3mA7mMB8GA1UdIwQY MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt Y2EzMzUwZTc2MGNiLzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtw/F5cg qvwoaljJ77JUqfWG1jDgGIMdXsE2FHsQRfqHjBwRw31z6UFbXIDQ2SK50nKted9F y8UDMxZlAAezRI44gtqP5isBRDJghJTnxYx8rQtOavkNo4FL7uj1nf7+MTgSS/JX DC7I6Wk+u6yz9v6YPpgQIlBLWlnJrjKVWnp3v8jrMTmNWuG+gK/hPsX6AXswsOeC WHCW/3LNIznnzm6TuPu7pfWLbS9GPOsb0tdZi040Y7dPHTjBdE16dWnLo5VQDBSM YPQJ91I3AqS0L/XK7aGpER8zyhdJELvz02R++kkiWuf1CfGuz7RY6lUK6W+7Y2h5 0DROLlBeXoim4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:17 2025 by rpki-client