This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json) Hash identifier: vln1hjo5nfGnJRzmjn5e9DyoxMELRmjWbEgPR4G2pBY= Subject key identifier: 49:9A:40:B4:7B:D7:76:68:62:8F:6F:2E:E6:09:55:CD:B9:A5:AE:8E Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a Certificate serial: 019B5261426268F17B7C7F712C6C79201F44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 22:01:04 +0000 Manifest this update: Wed 24 Dec 2025 22:01:04 +0000 Manifest next update: Thu 25 Dec 2025 22:01:04 +0000 Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: ztkWxXm+TEfuwFIEmp22QPKwxB6jBssHaXZ4y7BTwZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:42:62:68:f1:7b:7c:7f:71:2c:6c:79:20:1f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a Validity Not Before: Dec 24 22:01:04 2025 GMT Not After : Dec 25 22:01:04 2025 GMT Subject: CN=499a40b47bd77668628f6f2ee60955cdb9a5ae8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:b6:fa:c2:ef:0c:b3:72:73:d7:74:0b:ee: 76:32:e6:bb:50:e2:5d:1b:55:e4:94:b3:cb:ca:2a: b0:ea:63:6d:23:67:f0:8e:a6:f9:1e:52:bb:ab:0c: 16:19:f4:22:69:53:f8:d6:79:dd:77:1b:c8:ef:45: d9:49:89:05:17:08:fa:86:41:08:10:e7:10:7e:95: 6a:6a:67:eb:23:8a:0e:a9:d7:a0:fd:93:6d:c5:72: bd:18:03:98:88:78:7a:2f:c0:01:1d:a7:56:93:9d: bf:2f:3d:9f:69:b4:f0:7d:77:d6:93:33:40:7f:fa: 8f:69:2d:cc:5e:63:fd:17:90:f3:f7:2b:ab:19:ed: b9:4a:6a:ba:b6:ba:a1:cd:6a:86:0e:27:d5:56:66: cf:a0:6a:d6:c7:5d:ee:7f:f5:05:f3:d0:d2:8c:51: db:d7:c6:85:e7:ea:de:93:fe:61:2d:25:b8:ed:48: 71:78:bf:4e:04:ff:33:3b:37:e8:d6:b7:23:8d:7a: 5b:40:2c:ee:eb:e2:5f:b8:9d:a1:93:8f:12:fe:9e: 48:bf:b7:dc:0a:b7:ec:62:ed:27:9c:d7:42:2b:1e: bd:4d:2c:85:df:d5:e0:f4:0b:8e:8b:59:ae:f3:5a: 06:af:a2:a7:a9:24:0b:62:17:2e:5c:bc:74:88:14: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:40:B4:7B:D7:76:68:62:8F:6F:2E:E6:09:55:CD:B9:A5:AE:8E X509v3 Authority Key Identifier: keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:05:b6:ae:34:68:84:fc:34:b3:45:66:7e:86:5a:48:68:62: a7:25:6e:3a:a1:19:1c:d1:53:d4:29:8b:ae:45:b7:1a:1c:aa: 85:ee:b1:05:6d:95:f7:f7:b8:38:21:67:8f:a1:d5:be:d8:67: 65:1c:f2:57:15:26:e9:2b:cb:1f:b6:57:10:4d:0e:b4:04:b5: 52:ee:1f:da:f8:37:ff:2a:df:5d:6c:82:53:8f:c4:ad:1a:a5: 30:f3:54:b1:ae:5d:6c:fc:62:2f:74:5a:cb:36:68:1a:81:86: cd:5c:3d:34:a1:14:d6:0e:43:b9:3f:20:6c:f2:ea:f7:97:09: 68:ab:de:a7:39:2a:5c:a3:34:8a:1c:f2:5d:ac:0b:41:4c:37: 23:9e:5f:8a:96:ff:a4:97:80:7a:c8:a9:c4:7e:02:36:01:ec: 45:62:36:35:b6:ce:02:45:da:09:4b:c0:10:1a:6b:8b:6a:7c: 1a:ad:67:a5:e3:88:7b:69:9b:a0:9e:ac:d4:9e:e2:17:48:cc: 48:38:64:d7:ee:8a:2e:ed:98:e7:d0:01:8a:21:67:0e:d1:90: bf:e1:83:6b:9a:e3:da:47:10:8b:4d:09:a0:90:1a:27:5f:8c: cc:df:3d:67:30:35:51:38:11:44:25:f6:45:f9:58:1c:76:11: f4:41:d5:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYUJiaPF7fH9xLGx5IB9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjNhYjczMDUzMDQ3OTJkYzJjZTgxNzgwYjVkYjg4OWQ4 ZjdmM2EwHhcNMjUxMjI0MjIwMTA0WhcNMjUxMjI1MjIwMTA0WjAzMTEwLwYDVQQD Eyg0OTlhNDBiNDdiZDc3NjY4NjI4ZjZmMmVlNjA5NTVjZGI5YTVhZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiG2+sLvDLNyc9d0C+52Mua7UOJd G1XklLPLyiqw6mNtI2fwjqb5HlK7qwwWGfQiaVP41nnddxvI70XZSYkFFwj6hkEI EOcQfpVqamfrI4oOqdeg/ZNtxXK9GAOYiHh6L8ABHadWk52/Lz2fabTwfXfWkzNA f/qPaS3MXmP9F5Dz9yurGe25Smq6trqhzWqGDifVVmbPoGrWx13uf/UF89DSjFHb 18aF5+rek/5hLSW47UhxeL9OBP8zOzfo1rcjjXpbQCzu6+JfuJ2hk48S/p5Iv7fc CrfsYu0nnNdCKx69TSyF39Xg9AuOi1mu81oGr6KnqSQLYhcuXLx0iBTOywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmaQLR713ZoYo9vLuYJVc25pa6OMB8GA1UdIwQY MBaAFD8jq3MFMEeS3CzoF4C124idj386MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzIt NjAwMzNkNWIwM2JiLzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzItNjAwMzNkNWIwM2Ji LzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgW2rjRo hPw0s0VmfoZaSGhipyVuOqEZHNFT1CmLrkW3Ghyqhe6xBW2V9/e4OCFnj6HVvthn ZRzyVxUm6SvLH7ZXEE0OtAS1Uu4f2vg3/yrfXWyCU4/ErRqlMPNUsa5dbPxiL3Ra yzZoGoGGzVw9NKEU1g5DuT8gbPLq95cJaKvepzkqXKM0ihzyXawLQUw3I55fipb/ pJeAesipxH4CNgHsRWI2NbbOAkXaCUvAEBpri2p8Gq1npeOIe2mboJ6s1J7iF0jM SDhk1+6KLu2Y59ABiiFnDtGQv+GDa5rj2kcQi00JoJAaJ1+MzN89ZzA1UTgRRCX2 RflYHHYR9EHVHw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:32:23 2025 by rpki-client