This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json) Hash identifier: hFGhNp6uQS7RlaE6zSqfnWMnoLC1hElKe8QokZsl6xU= Subject key identifier: 58:A1:5D:43:E3:8B:65:D9:84:64:51:1E:8C:E9:D4:42:E0:75:8C:27 Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Certificate serial: 019B4E84489E0F641C45549DAEE2A94A629F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft Manifest number: 0E0B Signing time: Wed 24 Dec 2025 04:00:50 +0000 Manifest this update: Wed 24 Dec 2025 04:00:50 +0000 Manifest next update: Thu 25 Dec 2025 04:00:50 +0000 Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: 1aczVDjxgDNIPcJqoo1E14UR5jX6Hvd+0mkeJzGeHSQ=) 2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:48:9e:0f:64:1c:45:54:9d:ae:e2:a9:4a:62:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Validity Not Before: Dec 24 04:00:50 2025 GMT Not After : Dec 25 04:00:50 2025 GMT Subject: CN=58a15d43e38b65d98464511e8ce9d442e0758c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:8f:83:48:2e:8b:f6:1e:24:3d:5b:51:c6: e2:f2:8f:57:61:88:15:a1:52:b3:ac:3c:87:64:7e: 55:7c:9d:f0:a1:23:1e:76:df:c8:62:f9:74:a2:e1: a7:bf:47:03:2f:3d:29:43:12:83:bf:60:8d:08:13: 50:9f:5a:7a:18:7d:b6:7a:7f:1b:34:bc:9d:cb:91: 02:55:29:ee:f0:10:f3:a3:c7:5d:4f:51:8a:36:5f: b7:ec:3b:23:1d:23:2c:c2:90:93:ea:37:a7:bc:5f: a6:5f:7b:11:34:9f:f0:2e:21:d7:79:d4:6d:a3:a8: ff:07:f7:c4:7f:e4:2a:be:ea:c0:52:ac:ca:45:ac: 5e:88:14:40:16:3d:d4:9c:b8:b1:1b:b8:47:c9:a1: 51:99:00:87:c3:e1:32:1d:17:10:ac:7f:2d:05:76: 7b:06:a8:a7:6c:49:16:d7:70:dc:f3:47:ac:3c:cd: cb:02:97:04:59:2c:21:31:dc:f0:f0:ee:23:55:37: cd:4a:45:47:6f:f9:1b:14:51:d2:dd:1b:bd:85:b5: 3c:a7:90:e1:28:f6:c1:84:a1:d2:e0:7a:6f:56:c8: 34:f9:b1:9a:6d:96:c8:7c:c8:1f:0c:fc:54:02:51: dd:61:44:f8:44:d2:4e:96:a1:da:8b:66:03:91:50: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:5D:43:E3:8B:65:D9:84:64:51:1E:8C:E9:D4:42:E0:75:8C:27 X509v3 Authority Key Identifier: keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ae:6c:04:7f:8c:7e:c5:df:e4:29:56:ac:4b:80:a6:d8:05: 60:6a:58:f3:cb:89:cf:c4:f9:9e:89:f6:d8:2b:37:48:8b:8b: 76:6e:ab:72:b3:fa:d7:2e:47:6e:34:24:35:b6:a9:53:4e:f1: 04:c6:f0:ee:89:07:38:da:6a:ae:db:71:5f:58:66:b4:33:59: af:6a:25:b3:e1:81:7b:fd:28:31:6c:16:fe:04:41:87:9a:9b: f6:25:e9:e4:e7:36:73:61:26:61:52:ba:d2:d8:63:38:a5:35: 66:86:03:d0:b9:fe:e1:e9:63:96:39:a7:bb:2a:d9:5d:0b:b5: 5e:fb:e6:fc:2b:db:d3:2b:28:ae:5c:f8:c1:d2:3e:31:87:c6: 6c:5c:aa:f2:eb:12:c5:e2:05:d5:31:61:66:3f:8a:af:6e:be: e5:32:16:86:bd:52:e2:31:aa:0d:6d:99:53:b0:fe:93:50:36: 17:1b:f8:e0:88:60:5e:61:bb:a1:9d:24:90:04:e1:56:1a:da: fa:d8:30:c5:7a:17:54:ff:9f:b4:8f:ff:cb:43:0c:fa:ea:47: 4d:08:e7:5d:98:a8:18:62:f4:55:b7:3d:24:ff:3d:ac:c5:f2: 5c:fc:d9:ed:96:c7:21:a0:89:0a:02:3f:28:1f:2f:04:e7:e0: 0a:29:85:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhEieD2QcRVSdruKpSmKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWU5OTRhOTUwMTJkOTJmYjUxYTI4YzhhNjUwZWQ5Zjk3 NzM3YjgwHhcNMjUxMjI0MDQwMDUwWhcNMjUxMjI1MDQwMDUwWjAzMTEwLwYDVQQD Eyg1OGExNWQ0M2UzOGI2NWQ5ODQ2NDUxMWU4Y2U5ZDQ0MmUwNzU4YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqePg0gui/YeJD1bUcbi8o9XYYgV oVKzrDyHZH5VfJ3woSMedt/IYvl0ouGnv0cDLz0pQxKDv2CNCBNQn1p6GH22en8b NLydy5ECVSnu8BDzo8ddT1GKNl+37DsjHSMswpCT6jenvF+mX3sRNJ/wLiHXedRt o6j/B/fEf+QqvurAUqzKRaxeiBRAFj3UnLixG7hHyaFRmQCHw+EyHRcQrH8tBXZ7 BqinbEkW13Dc80esPM3LApcEWSwhMdzw8O4jVTfNSkVHb/kbFFHS3Ru9hbU8p5Dh KPbBhKHS4HpvVsg0+bGabZbIfMgfDPxUAlHdYUT4RNJOlqHai2YDkVBwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFihXUPji2XZhGRRHozp1ELgdYwnMB8GA1UdIwQY MBaAFDkemUqVAS2S+1GijIplDtn5dze4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMt NDJmYjM2NzdkZjc3LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMtNDJmYjM2NzdkZjc3 LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa5sBH+M fsXf5ClWrEuAptgFYGpY88uJz8T5non22Cs3SIuLdm6rcrP61y5HbjQkNbapU07x BMbw7okHONpqrttxX1hmtDNZr2ols+GBe/0oMWwW/gRBh5qb9iXp5Oc2c2EmYVK6 0thjOKU1ZoYD0Ln+4eljljmnuyrZXQu1Xvvm/Cvb0ysorlz4wdI+MYfGbFyq8usS xeIF1TFhZj+Kr26+5TIWhr1S4jGqDW2ZU7D+k1A2Fxv44IhgXmG7oZ0kkAThVhra +tgwxXoXVP+ftI//y0MM+upHTQjnXZioGGL0Vbc9JP89rMXyXPzZ7ZbHIaCJCgI/ KB8vBOfgCimF/w== -----END CERTIFICATE-----Generated at Wed Dec 24 11:59:23 2025 by rpki-client