This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json) Hash identifier: WCtFACLwKaU8nTswcGDhcLS/l26rFS0jCRj0/N5Tz84= Subject key identifier: C1:75:4C:55:9E:82:18:D2:45:E6:AD:44:40:50:A7:89:1E:BA:5D:3A Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73 Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73 Certificate serial: 019B3C10330426D8D194874BC01F8CAC0A78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft Manifest number: 04A3 Signing time: Sat 20 Dec 2025 14:00:53 +0000 Manifest this update: Sat 20 Dec 2025 14:00:53 +0000 Manifest next update: Sun 21 Dec 2025 14:00:53 +0000 Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: GUwdVO/kDHcSnHdEW3hRjcmy+PHXrkmVw47KkqOOq/k=) 2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:33:04:26:d8:d1:94:87:4b:c0:1f:8c:ac:0a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73 Validity Not Before: Dec 20 14:00:53 2025 GMT Not After : Dec 21 14:00:53 2025 GMT Subject: CN=c1754c559e8218d245e6ad444050a7891eba5d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:52:7d:53:ab:97:f5:4e:d9:03:f9:a3:34: 4f:05:87:90:e1:77:ae:d6:82:2a:2c:ad:01:49:20: cf:b1:76:cf:d3:3b:78:a4:9e:8e:f2:33:6f:d7:72: 3f:a1:cd:47:45:36:55:4e:70:7a:c5:28:b3:d1:17: 12:01:36:4f:d3:84:64:de:36:58:69:41:cf:eb:b1: 34:9e:c2:fc:62:23:7d:8e:01:5c:41:bd:15:16:52: f5:7c:2e:a3:5a:ac:21:3a:36:ad:cf:08:c8:a9:6e: d5:08:e1:d2:be:3e:76:b4:33:98:4c:ca:8e:15:8a: 7f:4b:18:4f:09:77:b0:87:31:c8:a7:7f:a9:55:d3: 7f:52:3b:b1:91:d8:93:aa:56:ba:46:c3:70:33:b6: 9a:b4:25:20:44:9e:be:12:a2:c8:01:28:58:8d:09: 39:15:e4:75:1c:4c:b7:e6:d3:07:22:7c:3e:33:2f: c2:7e:e7:26:39:c2:75:28:e4:53:d6:da:4c:cc:1d: 7e:16:df:ff:29:26:b0:70:8b:d3:34:81:5d:d3:3b: 8e:54:c5:9b:26:1b:52:f4:41:65:e6:25:5b:a6:9f: 07:4e:42:ae:d7:26:43:89:16:e9:2e:2d:24:94:ab: 99:9f:d2:22:a8:4f:c3:74:d1:84:5d:f7:ef:d6:c7: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:75:4C:55:9E:82:18:D2:45:E6:AD:44:40:50:A7:89:1E:BA:5D:3A X509v3 Authority Key Identifier: keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:66:ac:67:79:c4:2c:f5:9d:e4:b1:9f:56:e3:b4:4e:08:b2: 93:1a:3f:25:78:7a:7c:b6:4d:7b:93:23:2d:d6:d3:57:ef:b4: 4e:b8:31:1f:8b:eb:8a:a7:34:04:8a:9e:a8:0e:0d:cf:e3:2c: 43:d2:67:d9:e0:ea:7e:7d:0a:69:bd:47:eb:66:38:a7:85:6e: 7a:d5:c9:14:15:89:2c:bd:75:61:6e:3b:58:b3:6c:38:9f:38: c5:dc:79:46:59:2f:ce:97:0e:12:08:af:05:5f:a0:e0:00:7a: 1a:a7:0c:11:3d:16:38:8d:3e:39:09:28:63:6b:13:53:b7:9e: 24:d7:80:6e:25:0e:af:58:24:5a:a1:9e:8d:6e:65:1b:85:8e: 55:96:4d:d2:24:bc:ea:e6:8c:d2:27:a2:8d:65:7b:f1:d6:78: bd:e1:37:5e:bf:1c:65:b2:59:10:5a:fb:cc:f2:a7:cc:ac:56: 8d:04:39:66:6b:50:af:7d:ee:ad:f6:a2:49:27:96:15:62:03: 2d:2d:d2:25:46:c4:9b:e3:bc:e8:7d:ef:af:06:bc:f4:47:a9: 37:75:2d:83:32:e2:b4:b6:c8:77:11:0d:57:3c:20:60:f0:33: 30:6e:14:77:75:2f:5e:00:b6:a4:45:d2:ef:d1:76:8c:13:a8: c0:59:72:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDMEJtjRlIdLwB+MrAp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx OGRlNzMwHhcNMjUxMjIwMTQwMDUzWhcNMjUxMjIxMTQwMDUzWjAzMTEwLwYDVQQD EyhjMTc1NGM1NTllODIxOGQyNDVlNmFkNDQ0MDUwYTc4OTFlYmE1ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu5SfVOrl/VO2QP5ozRPBYeQ4Xeu 1oIqLK0BSSDPsXbP0zt4pJ6O8jNv13I/oc1HRTZVTnB6xSiz0RcSATZP04Rk3jZY aUHP67E0nsL8YiN9jgFcQb0VFlL1fC6jWqwhOjatzwjIqW7VCOHSvj52tDOYTMqO FYp/SxhPCXewhzHIp3+pVdN/UjuxkdiTqla6RsNwM7aatCUgRJ6+EqLIAShYjQk5 FeR1HEy35tMHInw+My/CfucmOcJ1KORT1tpMzB1+Ft//KSawcIvTNIFd0zuOVMWb JhtS9EFl5iVbpp8HTkKu1yZDiRbpLi0klKuZn9IiqE/DdNGEXffv1seq4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF1TFWeghjSReatREBQp4keul06MB8GA1UdIwQY MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3 LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWasZ3nE LPWd5LGfVuO0Tgiykxo/JXh6fLZNe5MjLdbTV++0TrgxH4vriqc0BIqeqA4Nz+Ms Q9Jn2eDqfn0Kab1H62Y4p4VuetXJFBWJLL11YW47WLNsOJ84xdx5RlkvzpcOEgiv BV+g4AB6GqcMET0WOI0+OQkoY2sTU7eeJNeAbiUOr1gkWqGejW5lG4WOVZZN0iS8 6uaM0ieijWV78dZ4veE3Xr8cZbJZEFr7zPKnzKxWjQQ5ZmtQr33urfaiSSeWFWID LS3SJUbEm+O86H3vrwa89EepN3UtgzLitLbIdxENVzwgYPAzMG4Ud3UvXgC2pEXS 79F2jBOowFlykQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:54 2025 by rpki-client