This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json) Hash identifier: nT3A41qz7LjWZSKYSPf4b9nEQAGIs7eO/LEN9N2EKI4= Subject key identifier: 2C:02:B9:0C:E4:D6:C5:3E:DA:64:67:EB:D5:36:87:B5:56:FC:06:61 Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Certificate serial: 019B7291729DA07571C4E3AF7B379E2E8165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft Manifest number: 010D Signing time: Wed 31 Dec 2025 04:01:33 +0000 Manifest this update: Wed 31 Dec 2025 04:01:33 +0000 Manifest next update: Thu 01 Jan 2026 04:01:33 +0000 Files and hashes: 1: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: oO1J8g0xamyGu4VeNH1dgfxI3LhZhRcGC6Eq/WPflLI=) 2: saWdrzat9gNhwDjToVtk8WsFYgw.roa (hash: gICbNWmSBInV+7Bf/50oOLEAVR12IrqsEIFbrP0sB00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:72:9d:a0:75:71:c4:e3:af:7b:37:9e:2e:81:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Validity Not Before: Dec 31 04:01:33 2025 GMT Not After : Jan 1 04:01:33 2026 GMT Subject: CN=2c02b90ce4d6c53eda6467ebd53687b556fc0661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:ce:e9:ba:07:05:87:c7:cf:d8:8c:8a:f7: 7a:e7:88:ca:37:e3:e5:39:25:3c:c2:aa:9b:2f:cf: 74:e0:de:ad:2d:8a:ee:47:45:be:3b:12:48:7a:4b: 12:6a:6c:1b:31:a7:62:da:63:e8:6a:d9:d9:6e:4f: c3:c5:bb:a4:93:38:1c:76:56:04:65:cb:d3:64:db: a7:bb:25:b1:3f:cd:38:9e:b5:d1:66:60:09:f1:91: de:08:bb:da:1e:51:94:ab:37:62:55:11:19:a2:2f: 0b:7b:8a:fc:b4:83:0d:81:54:51:50:99:ec:da:e9: 9f:54:05:3a:b1:ea:90:0d:0c:bc:97:ad:04:7d:9d: 94:b3:db:ed:7c:0e:51:0c:cc:68:ae:a8:64:96:a5: d4:6c:d1:63:0f:29:e2:d1:e2:e1:d5:19:1e:5e:99: a0:e6:7b:6b:2f:c0:12:b2:ee:f8:dd:36:37:4b:0b: 55:64:4d:0d:3f:55:cf:27:47:64:8c:04:ba:e5:e6: 91:b5:23:1f:9b:90:52:a7:2b:a6:bf:ed:e6:61:42: 4c:97:6d:a1:52:5c:c6:12:1e:a8:c0:8a:99:a6:d5: 58:ae:f8:45:2e:40:9f:8a:5f:cf:5c:86:f4:39:72: d2:53:20:53:71:47:c4:2d:32:ac:d9:f8:64:71:8c: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:B9:0C:E4:D6:C5:3E:DA:64:67:EB:D5:36:87:B5:56:FC:06:61 X509v3 Authority Key Identifier: keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b4:53:b0:35:e1:2e:3e:7f:89:ce:94:79:85:d1:e3:42:00: ce:b9:90:9d:b9:07:15:f1:8f:6a:57:43:3e:92:d2:d8:7b:73: ee:e2:d2:27:66:f7:d8:cf:9a:00:9a:73:7e:75:d9:6a:a5:46: b3:02:64:4e:be:a4:ad:26:79:ab:62:74:d8:28:87:cd:71:cc: 24:76:d1:6d:ae:32:8d:88:77:fb:1b:ab:04:5d:5b:14:19:a8: a9:5f:0c:7b:1b:f4:b8:ac:3b:81:72:3d:7c:53:1b:aa:bc:ae: fc:59:f9:aa:b1:43:d1:a0:1f:d2:f0:b7:73:65:99:21:db:9d: 8c:e3:66:85:fe:e1:79:97:88:bf:94:d3:4b:1b:6d:34:48:4d: b8:07:d5:4a:9a:91:67:ec:05:e1:d1:67:55:b8:ea:f5:38:41: 74:75:5e:e1:11:49:62:f0:12:cb:b1:d5:27:e6:fb:62:bc:a6: e1:f8:09:ec:11:43:f2:e5:b2:1b:12:39:38:31:08:bb:e3:22: f2:58:70:f2:93:69:ae:15:13:5a:4c:80:0e:c5:fb:31:b6:be: 6e:8e:c3:81:13:31:38:a8:d8:e8:c8:83:ec:25:5d:7f:5b:00: e1:ef:b5:f0:31:c9:97:81:60:35:06:61:85:d3:c1:3c:10:4f: 18:f7:18:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykXKdoHVxxOOvezeeLoFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk MWU1MDgwHhcNMjUxMjMxMDQwMTMzWhcNMjYwMTAxMDQwMTMzWjAzMTEwLwYDVQQD EygyYzAyYjkwY2U0ZDZjNTNlZGE2NDY3ZWJkNTM2ODdiNTU2ZmMwNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NHO6boHBYfHz9iMivd654jKN+Pl OSU8wqqbL8904N6tLYruR0W+OxJIeksSamwbMadi2mPoatnZbk/DxbukkzgcdlYE ZcvTZNunuyWxP804nrXRZmAJ8ZHeCLvaHlGUqzdiVREZoi8Le4r8tIMNgVRRUJns 2umfVAU6seqQDQy8l60EfZ2Us9vtfA5RDMxorqhklqXUbNFjDyni0eLh1RkeXpmg 5ntrL8ASsu743TY3SwtVZE0NP1XPJ0dkjAS65eaRtSMfm5BSpyumv+3mYUJMl22h UlzGEh6owIqZptVYrvhFLkCfil/PXIb0OXLSUyBTcUfELTKs2fhkcYySRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwCuQzk1sU+2mRn69U2h7VW/AZhMB8GA1UdIwQY MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbRTsDXh Lj5/ic6UeYXR40IAzrmQnbkHFfGPaldDPpLS2Htz7uLSJ2b32M+aAJpzfnXZaqVG swJkTr6krSZ5q2J02CiHzXHMJHbRba4yjYh3+xurBF1bFBmoqV8Mexv0uKw7gXI9 fFMbqryu/Fn5qrFD0aAf0vC3c2WZIdudjONmhf7heZeIv5TTSxttNEhNuAfVSpqR Z+wF4dFnVbjq9ThBdHVe4RFJYvASy7HVJ+b7Yrym4fgJ7BFD8uWyGxI5ODEIu+Mi 8lhw8pNprhUTWkyADsX7Mba+bo7DgRMxOKjY6MiD7CVdf1sA4e+18DHJl4FgNQZh hdPBPBBPGPcYxA== -----END CERTIFICATE-----Generated at Wed Dec 31 12:29:44 2025 by rpki-client