This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json) Hash identifier: 7bDPda5z8XNSZbVtww3N6fLzBWASp69UiMQZUPvKIVQ= Subject key identifier: 1C:6F:B4:92:B1:EE:C5:A4:98:6D:7B:AD:93:FA:29:3C:21:D1:80:43 Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Certificate serial: 019B3B6BB068C6EA6301196BB0DFC182D5DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:01:11 +0000 Manifest this update: Sat 20 Dec 2025 11:01:11 +0000 Manifest next update: Sun 21 Dec 2025 11:01:11 +0000 Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: LWRTJIef9RCnipivQUTxpStl0ywnBtRV/9DYpr6dNtI=) 2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:b0:68:c6:ea:63:01:19:6b:b0:df:c1:82:d5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Validity Not Before: Dec 20 11:01:11 2025 GMT Not After : Dec 21 11:01:11 2025 GMT Subject: CN=1c6fb492b1eec5a4986d7bad93fa293c21d18043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:1b:d2:fe:e8:dc:51:aa:47:d4:2b:dc:bb: 12:d0:95:42:4f:69:5f:e2:3f:da:eb:d0:74:40:86: 0f:8e:6d:61:d7:11:3a:9f:dc:a5:55:33:a0:99:b9: bc:44:f5:c1:51:1d:59:23:db:a3:a0:7d:db:6f:9f: d3:58:be:3f:1c:11:23:e6:17:71:9a:47:78:c4:3e: 31:2f:7e:22:57:ce:bd:ca:84:50:d2:1b:55:ee:a7: 16:d7:17:a8:ba:16:08:59:fa:4f:b8:5b:c8:fe:9c: 0a:2c:eb:56:27:20:05:29:15:72:7e:1e:f9:7a:ef: 25:8a:1d:df:9c:86:63:a0:0d:4d:80:dd:50:96:36: d8:62:bd:66:53:a3:b8:32:32:72:08:b5:21:3b:36: bf:aa:af:42:c4:c7:13:c6:51:9b:af:28:2b:9d:23: d2:66:ac:38:84:d9:2b:49:35:e6:e3:e1:ea:e0:ec: 0a:b4:c1:4b:39:3b:54:5f:d3:9b:8e:d8:ec:c3:ba: 20:b3:96:b4:90:54:05:9c:89:07:35:87:67:aa:88: 74:2a:1c:0d:36:d6:c4:ae:a9:1c:12:cd:d0:5f:02: 74:41:35:26:da:3c:26:9a:94:24:ce:af:16:77:16: d1:b0:d8:42:3e:47:77:ef:51:55:a7:34:15:a3:e4: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:B4:92:B1:EE:C5:A4:98:6D:7B:AD:93:FA:29:3C:21:D1:80:43 X509v3 Authority Key Identifier: keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0c:23:f4:d9:cc:c1:61:0f:0a:29:d9:3e:11:87:08:e2:bf: e4:67:85:dd:48:dd:55:f3:b8:87:67:d5:b8:dc:66:51:2c:cb: 64:17:6f:aa:08:39:97:ac:f2:90:b5:62:67:61:11:fe:93:29: de:0a:0a:e3:9b:e0:82:2a:fd:b7:05:4f:dd:f1:b1:7f:3c:e1: 72:81:aa:e8:25:57:6f:99:b9:69:7c:6e:ca:f9:1b:5d:54:c2: a2:43:e4:12:4b:92:32:fb:4f:b2:d0:a3:72:4c:3c:9d:71:1b: 48:13:30:22:59:1e:ab:98:13:3d:ba:45:50:9c:77:bc:be:34: 6f:10:2d:0b:9a:aa:ac:e3:da:ef:56:ae:6b:cd:46:3f:30:db: 74:4e:d5:9b:ea:8b:40:0c:a2:dd:59:8d:c9:65:43:d3:9b:06: dd:bb:68:49:af:9e:da:ec:45:28:fd:64:7d:cb:1a:b0:80:34: 17:ba:57:90:40:7a:59:3b:0b:0b:9e:85:e5:7e:59:ca:cb:33: bf:1e:f8:32:b6:3c:6a:8b:3e:74:e9:bd:ce:ca:67:c1:67:6a: c3:d5:3a:45:1d:cd:33:9c:07:64:49:c5:99:4a:10:0e:71:d3: 33:ef:17:e3:cf:54:cf:c1:f4:8f:14:f5:7b:aa:05:34:20:ab: f6:0f:95:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7BoxupjARlrsN/BgtXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0 ODQ0YzAwHhcNMjUxMjIwMTEwMTExWhcNMjUxMjIxMTEwMTExWjAzMTEwLwYDVQQD EygxYzZmYjQ5MmIxZWVjNWE0OTg2ZDdiYWQ5M2ZhMjkzYzIxZDE4MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aYb0v7o3FGqR9Qr3LsS0JVCT2lf 4j/a69B0QIYPjm1h1xE6n9ylVTOgmbm8RPXBUR1ZI9ujoH3bb5/TWL4/HBEj5hdx mkd4xD4xL34iV869yoRQ0htV7qcW1xeouhYIWfpPuFvI/pwKLOtWJyAFKRVyfh75 eu8lih3fnIZjoA1NgN1QljbYYr1mU6O4MjJyCLUhOza/qq9CxMcTxlGbrygrnSPS Zqw4hNkrSTXm4+Hq4OwKtMFLOTtUX9Objtjsw7ogs5a0kFQFnIkHNYdnqoh0KhwN NtbErqkcEs3QXwJ0QTUm2jwmmpQkzq8WdxbRsNhCPkd371FVpzQVo+SkpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxvtJKx7sWkmG17rZP6KTwh0YBDMB8GA1UdIwQY MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt MDUwMjA0NTMyMjg2LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2 LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwwj9NnM wWEPCinZPhGHCOK/5GeF3UjdVfO4h2fVuNxmUSzLZBdvqgg5l6zykLViZ2ER/pMp 3goK45vggir9twVP3fGxfzzhcoGq6CVXb5m5aXxuyvkbXVTCokPkEkuSMvtPstCj ckw8nXEbSBMwIlkeq5gTPbpFUJx3vL40bxAtC5qqrOPa71aua81GPzDbdE7Vm+qL QAyi3VmNyWVD05sG3btoSa+e2uxFKP1kfcsasIA0F7pXkEB6WTsLC56F5X5Zyssz vx74MrY8aos+dOm9zspnwWdqw9U6RR3NM5wHZEnFmUoQDnHTM+8X489Uz8H0jxT1 e6oFNCCr9g+VEw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:02 2025 by rpki-client