This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json) Hash identifier: SEiC20g4Ax73Eq9tWtMWClUi35wVtt4B5Fiz+BbjhSo= Subject key identifier: 6B:74:71:44:37:A7:17:1C:56:6D:56:16:A2:83:7B:EE:1F:5A:37:2F Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6 Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6 Certificate serial: 019B3DFEA4625ECA4B888993D40EAD888ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft Manifest number: 0871 Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: ZepG0DcSOIxKlPTSIZKr9xRjfAdOTCMjD+Cin7wtl00=) 2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a4:62:5e:ca:4b:88:89:93:d4:0e:ad:88:8a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6 Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=6b74714437a7171c566d5616a2837bee1f5a372f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:56:a7:24:a6:c1:0d:f9:fb:7e:e6:77:24: 64:6d:bf:f8:93:e2:35:d9:b2:07:72:a9:fa:07:75: 30:06:e2:f1:7a:13:52:f0:5c:73:2a:45:b7:96:94: 3f:6a:5c:fb:20:7d:7f:86:d5:8f:0a:76:3e:7c:fd: a1:6f:a2:2b:3e:9f:65:b8:0d:b4:eb:e6:e7:75:01: aa:cd:cd:56:46:ce:a7:89:40:78:ab:a9:d2:76:ef: d9:e6:6a:05:aa:a3:cb:b5:cd:84:30:8b:d0:e0:e5: 64:55:39:54:2a:e5:9d:fe:fa:0c:d9:35:d3:31:8f: 70:b0:3d:b6:7c:98:c4:bf:37:32:85:32:47:b4:ea: af:cb:44:44:4a:3b:83:24:7d:d8:d7:5f:36:24:4f: 2c:63:3b:b5:fb:ae:be:30:8c:43:12:f4:6d:1e:dc: f8:76:7e:59:80:49:6c:21:34:32:82:f4:90:c3:1d: a1:e2:13:72:51:5a:42:ae:df:28:b5:37:e3:5f:bb: df:08:e9:56:ab:78:75:42:57:a4:67:b1:f7:a7:93: 5e:ec:f3:15:22:21:e2:4a:cb:34:ae:97:31:26:99: a5:42:02:f8:df:5f:6f:66:ee:b8:e3:f1:dd:1c:43: e6:85:a8:53:f4:73:4f:8c:6d:11:76:28:0d:7c:8b: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:74:71:44:37:A7:17:1C:56:6D:56:16:A2:83:7B:EE:1F:5A:37:2F X509v3 Authority Key Identifier: keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:24:c0:4a:86:0c:ba:b2:12:e0:82:06:5f:76:ed:53:3b:b4: f8:a4:47:37:f9:c5:43:15:e5:23:2b:24:51:99:97:86:84:be: 17:56:09:1b:6b:e2:9d:ff:45:6f:cd:48:89:d7:27:ec:a7:2d: b5:12:97:21:36:4c:9d:72:83:29:a5:6f:34:30:79:42:8a:ba: 4c:17:ac:86:26:0c:13:3d:d7:e0:57:5e:b4:84:2f:3e:7f:e9: 22:75:9f:32:d9:50:b2:08:b3:e2:d2:3c:a6:8e:f1:bb:ea:25: 6d:35:12:fa:cb:b1:85:a3:27:f3:d1:eb:73:0d:28:06:91:5e: 8a:a4:77:ca:6d:2a:ee:7e:00:9e:ce:07:41:30:34:af:b9:7e: c1:50:fe:85:cf:05:ee:6a:d4:89:bc:af:83:d5:b4:ac:43:3a: 34:59:62:4e:0a:aa:93:c1:ec:1b:8d:0a:b0:96:c6:c8:75:ca: 56:5e:6d:3f:ac:f7:b9:19:81:9a:4d:e8:04:8d:09:d8:c3:c2: 3b:38:42:a9:cd:3c:b9:73:a9:f2:c1:92:d9:83:74:29:b1:1e: 77:05:22:78:7e:3c:eb:dd:1d:0e:80:93:8e:78:22:be:ca:af: 26:5b:49:dc:1b:c0:5e:f9:8a:a1:d3:70:1e:97:ab:73:11:b9: f5:b8:c6:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qRiXspLiImT1A6tiIrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTg3MDBlYTljN2JlMmRmNTY4OGFmZmJlZGQ4YTRlNTUz OTJkZTYwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD Eyg2Yjc0NzE0NDM3YTcxNzFjNTY2ZDU2MTZhMjgzN2JlZTFmNWEzNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoZWpySmwQ35+37mdyRkbb/4k+I1 2bIHcqn6B3UwBuLxehNS8FxzKkW3lpQ/alz7IH1/htWPCnY+fP2hb6IrPp9luA20 6+bndQGqzc1WRs6niUB4q6nSdu/Z5moFqqPLtc2EMIvQ4OVkVTlUKuWd/voM2TXT MY9wsD22fJjEvzcyhTJHtOqvy0RESjuDJH3Y1182JE8sYzu1+66+MIxDEvRtHtz4 dn5ZgElsITQygvSQwx2h4hNyUVpCrt8otTfjX7vfCOlWq3h1QlekZ7H3p5Ne7PMV IiHiSss0rpcxJpmlQgL4319vZu644/HdHEPmhahT9HNPjG0RdigNfItNuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt0cUQ3pxccVm1WFqKDe+4fWjcvMB8GA1UdIwQY MBaAFDkYcA6px74t9WiK/77dik5VOS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWIt MWM4YmUyNWViNjg2LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWItMWM4YmUyNWViNjg2 LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyTASoYM urIS4IIGX3btUzu0+KRHN/nFQxXlIyskUZmXhoS+F1YJG2vinf9Fb81Iidcn7Kct tRKXITZMnXKDKaVvNDB5Qoq6TBeshiYMEz3X4FdetIQvPn/pInWfMtlQsgiz4tI8 po7xu+olbTUS+suxhaMn89Hrcw0oBpFeiqR3ym0q7n4Ans4HQTA0r7l+wVD+hc8F 7mrUibyvg9W0rEM6NFliTgqqk8HsG40KsJbGyHXKVl5tP6z3uRmBmk3oBI0J2MPC OzhCqc08uXOp8sGS2YN0KbEedwUieH48690dDoCTjngivsqvJltJ3BvAXvmKodNw HpercxG59bjGfw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:05 2025 by rpki-client