This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json) Hash identifier: kaTP6047P/iG38lkPTU8h0J9mZMGcZMKQEeU5HfiIFI= Subject key identifier: AF:C0:35:02:31:5F:38:27:F1:C1:5C:D7:EB:0D:DE:B5:9B:B5:29:4C Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02 Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702 Certificate serial: 019B4E4DE2CE7D51624A09F7006479CA55D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft Manifest number: 149F Signing time: Wed 24 Dec 2025 03:01:25 +0000 Manifest this update: Wed 24 Dec 2025 03:01:25 +0000 Manifest next update: Thu 25 Dec 2025 03:01:25 +0000 Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=) 2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: 4PFoi0fo/ZeeqhSNvrxZPRsFMmz4UgGoewCassy6KGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:e2:ce:7d:51:62:4a:09:f7:00:64:79:ca:55:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702 Validity Not Before: Dec 24 03:01:25 2025 GMT Not After : Dec 25 03:01:25 2025 GMT Subject: CN=afc03502315f3827f1c15cd7eb0ddeb59bb5294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:38:f2:34:18:75:5d:95:86:9f:f3:98:1c: cb:67:13:6e:7b:50:59:24:4c:96:a9:18:1e:4a:d0: ee:af:e3:1e:7d:bb:01:a3:36:c2:62:13:24:0e:03: 9d:d9:d2:a8:a2:7e:f9:18:21:a3:7d:ac:4e:34:05: f9:7e:b4:81:b1:b9:0b:fb:ca:6a:0e:e3:99:c5:b2: a9:cf:54:b4:61:2a:79:df:0a:39:82:5a:bf:b7:51: 1d:2b:dc:1e:b3:37:06:88:8e:46:2e:3b:9e:60:25: b4:9b:cf:53:39:24:43:e4:ea:c4:fa:26:e2:e3:b4: bf:e6:63:ee:67:4e:64:98:60:c8:4d:e5:f4:76:8d: d4:f5:6b:bb:6a:77:61:90:08:be:8c:46:a9:da:86: 15:94:92:0d:7e:d6:b6:25:a3:c8:39:e6:17:cd:1d: 33:d7:c4:ef:da:b0:a8:d2:d8:00:74:3f:9a:4e:93: a2:03:94:e3:1c:7b:c6:57:a3:79:16:84:1a:16:e2: 8d:63:50:2c:94:cb:ac:7a:7f:1a:21:02:5a:80:f0: c4:27:b5:4b:b5:ef:4a:f3:78:59:96:96:be:54:a9: 2c:46:73:0a:76:49:65:8d:8c:a6:1e:2d:7d:7b:8b: 9a:2e:10:a9:76:27:46:da:4b:7c:91:68:d7:84:8d: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:35:02:31:5F:38:27:F1:C1:5C:D7:EB:0D:DE:B5:9B:B5:29:4C X509v3 Authority Key Identifier: keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7b:72:8e:4e:16:7e:87:67:dc:76:c2:d8:cb:20:1b:a9:50: 60:f6:6c:b7:fe:ba:2a:0f:a9:58:76:9c:f9:ea:be:2c:7e:ab: 4f:e8:cb:10:4b:96:43:f6:4c:4d:ac:7d:98:3c:dd:cd:9c:9d: b5:d6:66:f2:96:8a:5b:f6:61:3f:d7:8b:fa:f3:b2:f8:03:a6: 4e:e4:55:7b:f8:88:71:6b:b7:0e:ed:b0:9f:01:0e:4d:6e:19: 7f:77:38:a5:bb:2d:ea:c1:b7:50:0a:94:97:1d:30:1a:41:59: 0c:e1:1c:99:00:26:f1:96:fe:e0:9f:8e:17:e7:7d:cb:8e:28: 30:d8:33:51:ad:17:0e:33:30:f7:d3:a0:13:d6:6d:8f:68:05: da:03:c6:83:c3:0c:90:f4:49:a5:5b:7b:c8:fa:c4:fd:dc:cb: bc:8e:af:77:08:35:62:90:4a:74:21:a2:00:5b:5c:53:83:09: 1f:8e:f0:e3:f8:0e:17:fd:71:39:0e:87:9b:e5:42:46:9f:48: a8:a0:d2:26:27:fb:47:7f:89:5a:b3:75:91:10:b2:09:b6:37: b8:ef:ae:02:45:d3:21:e8:9c:d2:ea:36:a8:12:d7:36:f6:97: 5d:fd:2e:0b:9c:da:3c:df:24:25:ae:84:37:ad:bf:ff:73:2f: 96:85:38:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTeLOfVFiSgn3AGR5ylXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk NjQ3MDIwHhcNMjUxMjI0MDMwMTI1WhcNMjUxMjI1MDMwMTI1WjAzMTEwLwYDVQQD EyhhZmMwMzUwMjMxNWYzODI3ZjFjMTVjZDdlYjBkZGViNTliYjUyOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aM48jQYdV2Vhp/zmBzLZxNue1BZ JEyWqRgeStDur+MefbsBozbCYhMkDgOd2dKoon75GCGjfaxONAX5frSBsbkL+8pq DuOZxbKpz1S0YSp53wo5glq/t1EdK9weszcGiI5GLjueYCW0m89TOSRD5OrE+ibi 47S/5mPuZ05kmGDITeX0do3U9Wu7andhkAi+jEap2oYVlJINfta2JaPIOeYXzR0z 18Tv2rCo0tgAdD+aTpOiA5TjHHvGV6N5FoQaFuKNY1AslMusen8aIQJagPDEJ7VL te9K83hZlpa+VKksRnMKdklljYymHi19e4uaLhCpdidG2kt8kWjXhI3k6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/ANQIxXzgn8cFc1+sN3rWbtSlMMB8GA1UdIwQY MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt YWFiODYyODYxYTA5LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5 LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3tyjk4W fodn3HbC2MsgG6lQYPZst/66Kg+pWHac+eq+LH6rT+jLEEuWQ/ZMTax9mDzdzZyd tdZm8paKW/ZhP9eL+vOy+AOmTuRVe/iIcWu3Du2wnwEOTW4Zf3c4pbst6sG3UAqU lx0wGkFZDOEcmQAm8Zb+4J+OF+d9y44oMNgzUa0XDjMw99OgE9Ztj2gF2gPGg8MM kPRJpVt7yPrE/dzLvI6vdwg1YpBKdCGiAFtcU4MJH47w4/gOF/1xOQ6Hm+VCRp9I qKDSJif7R3+JWrN1kRCyCbY3uO+uAkXTIeic0uo2qBLXNvaXXf0uC5zaPN8kJa6E N62//3MvloU46w== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:02 2025 by rpki-client