This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json) Hash identifier: REDfHo9GA/vv/6CtWbl0zQp/NfYhj92Fg19MPCFCM80= Subject key identifier: 65:15:72:43:80:38:2F:0C:52:15:14:80:D7:42:AC:94:28:74:EB:35 Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Certificate serial: 019B3E6C7FBC5EBB69E2848D5C5375099A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft Manifest number: F2 Signing time: Sun 21 Dec 2025 01:00:56 +0000 Manifest this update: Sun 21 Dec 2025 01:00:56 +0000 Manifest next update: Mon 22 Dec 2025 01:00:56 +0000 Files and hashes: 1: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: lf4++1zLnbQR/8NNFLASoGPV5CBbdJ4l/AjsMkKfOTg=) 2: saWdrzat9gNhwDjToVtk8WsFYgw.roa (hash: gICbNWmSBInV+7Bf/50oOLEAVR12IrqsEIFbrP0sB00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:7f:bc:5e:bb:69:e2:84:8d:5c:53:75:09:9a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Validity Not Before: Dec 21 01:00:56 2025 GMT Not After : Dec 22 01:00:56 2025 GMT Subject: CN=6515724380382f0c52151480d742ac942874eb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:4f:3a:cd:d3:be:92:6b:5c:0f:34:bf:de: 89:99:16:ee:57:9d:35:6d:38:0f:97:a8:87:57:85: e3:a6:23:8c:44:9c:83:1b:8f:cc:6e:a0:ca:c7:32: 75:8c:26:22:41:d0:49:fa:65:37:19:15:97:b4:16: 07:c3:e6:55:b8:7c:26:c3:da:3c:46:18:3a:75:a3: 38:12:11:fc:da:c9:65:24:a1:81:c2:e8:6d:45:f5: f9:48:d2:70:8c:d6:31:26:0b:8f:df:aa:63:46:cd: 14:b5:37:4c:ca:a1:5b:1e:17:f8:34:1b:c0:e5:2f: c0:79:d1:af:a8:b5:3f:8d:0f:76:28:52:ab:61:fd: 4e:85:5c:a9:38:19:9d:59:ba:75:0c:0b:d9:99:c2: ab:35:a4:68:f3:5c:6d:7a:fd:b6:fd:9b:de:37:2c: e4:b6:30:a7:e7:0d:ad:a0:85:fa:b3:37:e2:e7:5c: e7:bb:e8:f5:95:3e:53:95:f4:88:fd:0d:de:f8:f4: 0a:08:a5:57:d9:6c:66:b0:a0:76:12:7a:fa:ca:7a: 9a:e5:00:06:e5:9e:3d:b4:76:2b:89:b0:77:5f:85: 92:3b:f6:87:b2:c5:e1:f3:80:b1:8e:4e:14:ad:06: e1:b0:99:01:4d:e8:f8:2e:b5:bc:41:44:47:2b:8f: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:15:72:43:80:38:2F:0C:52:15:14:80:D7:42:AC:94:28:74:EB:35 X509v3 Authority Key Identifier: keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f7:53:c3:eb:d0:b3:ce:c7:9e:dd:3f:f2:7f:fc:df:30:59: e1:b9:b0:fd:df:72:ef:78:0e:99:d2:12:ae:46:a9:d6:2f:9a: 31:e6:70:c3:5a:ae:80:dd:6b:9d:ba:f7:0f:bd:f7:a6:7b:19: df:74:85:88:00:d1:fb:a1:d7:de:0e:25:9c:08:05:8d:0c:b5: 33:a1:92:59:d6:ed:b6:42:07:c1:e1:24:c2:bc:79:15:30:d9: 16:a3:b2:4c:43:8b:a6:87:c2:57:12:47:05:f5:db:85:bc:cf: ea:f7:0e:47:95:db:f4:f8:6d:8e:23:0a:80:8d:a1:eb:e4:94: a0:e0:d6:bf:3d:35:97:7a:bc:f4:69:0c:68:dd:0e:71:cb:a1: 06:0d:e1:68:54:5c:f8:76:10:39:38:df:19:d5:46:95:7b:23: ae:ab:99:8a:7e:09:7d:cf:eb:3d:89:62:68:a2:e3:ce:63:a4: 5d:74:c5:9b:1b:df:1e:8c:77:d0:67:c4:04:25:8e:61:bb:b7: 1a:f1:c5:8c:9e:3e:f5:ae:d9:7d:2c:b5:e0:63:24:5c:4c:73: 48:78:e0:21:d8:6f:1d:58:f7:f1:df:aa:03:67:89:89:03:33: de:c2:ad:a1:a3:d7:2e:8e:52:ab:3c:e9:92:b0:50:ca:ce:58: ff:dd:aa:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bH+8Xrtp4oSNXFN1CZouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk MWU1MDgwHhcNMjUxMjIxMDEwMDU2WhcNMjUxMjIyMDEwMDU2WjAzMTEwLwYDVQQD Eyg2NTE1NzI0MzgwMzgyZjBjNTIxNTE0ODBkNzQyYWM5NDI4NzRlYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWlPOs3TvpJrXA80v96JmRbuV501 bTgPl6iHV4XjpiOMRJyDG4/MbqDKxzJ1jCYiQdBJ+mU3GRWXtBYHw+ZVuHwmw9o8 Rhg6daM4EhH82sllJKGBwuhtRfX5SNJwjNYxJguP36pjRs0UtTdMyqFbHhf4NBvA 5S/AedGvqLU/jQ92KFKrYf1OhVypOBmdWbp1DAvZmcKrNaRo81xtev22/ZveNyzk tjCn5w2toIX6szfi51znu+j1lT5TlfSI/Q3e+PQKCKVX2WxmsKB2Enr6ynqa5QAG 5Z49tHYribB3X4WSO/aHssXh84Cxjk4UrQbhsJkBTej4LrW8QURHK4+qqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUVckOAOC8MUhUUgNdCrJQodOs1MB8GA1UdIwQY MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfdTw+vQ s87Hnt0/8n/83zBZ4bmw/d9y73gOmdISrkap1i+aMeZww1qugN1rnbr3D733pnsZ 33SFiADR+6HX3g4lnAgFjQy1M6GSWdbttkIHweEkwrx5FTDZFqOyTEOLpofCVxJH BfXbhbzP6vcOR5Xb9PhtjiMKgI2h6+SUoODWvz01l3q89GkMaN0OccuhBg3haFRc +HYQOTjfGdVGlXsjrquZin4Jfc/rPYliaKLjzmOkXXTFmxvfHox30GfEBCWOYbu3 GvHFjJ4+9a7ZfSy14GMkXExzSHjgIdhvHVj38d+qA2eJiQMz3sKtoaPXLo5Sqzzp krBQys5Y/92qaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:35:27 2025 by rpki-client