This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json) Hash identifier: mBOoi6CMgiPuqEzV7wTn+qB7AMm1jxnYEPzDj52vOwo= Subject key identifier: 8E:EC:B4:34:36:72:0E:F8:C2:48:11:F1:F9:C7:DE:30:01:2A:45:DB Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6 Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6 Certificate serial: 019B5AF63E14AE529A741684F6EBE35A0EA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft Manifest number: 0880 Signing time: Fri 26 Dec 2025 14:00:45 +0000 Manifest this update: Fri 26 Dec 2025 14:00:45 +0000 Manifest next update: Sat 27 Dec 2025 14:00:45 +0000 Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: yPsqEogtk27W41lwRQAWg5lYAHsR8DLRU0yVXf+SVNQ=) 2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:3e:14:ae:52:9a:74:16:84:f6:eb:e3:5a:0e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6 Validity Not Before: Dec 26 14:00:45 2025 GMT Not After : Dec 27 14:00:45 2025 GMT Subject: CN=8eecb43436720ef8c24811f1f9c7de30012a45db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:28:a0:65:8a:76:70:79:25:c1:d5:3d:3a: 0e:4d:06:ca:94:57:be:1b:7c:0d:96:a9:67:e3:f6: 19:38:3b:cc:7e:b9:10:89:02:76:84:fc:9b:5b:8e: 5c:45:4a:1b:35:c4:79:ab:e7:1a:fb:66:0a:72:2a: 0d:f6:3e:2a:0f:45:9c:65:76:46:02:ed:d1:df:06: f7:09:15:8f:e1:37:a5:15:94:e2:3c:98:70:bb:90: f1:cc:34:1c:e9:29:b6:60:62:87:21:41:d8:18:57: f8:39:45:f1:29:5e:c2:7b:90:4f:cf:8c:c2:5b:48: 9f:ff:7c:dd:f5:09:29:e2:c7:12:ef:e2:4d:2c:d5: 62:42:e1:fb:d6:cf:2b:bc:94:38:50:46:80:d1:7a: bd:f5:03:65:05:ad:07:87:08:7f:ac:19:5a:37:58: 57:a7:85:6d:91:fd:05:1c:56:88:b4:cb:8f:c8:4a: d8:8d:cb:89:f2:54:fc:68:37:51:c6:96:ae:15:16: 6b:07:a1:7e:fd:07:e5:fc:0e:5e:56:84:31:64:e2: be:33:4c:38:8c:41:a4:48:af:49:92:d2:50:a1:fd: f0:4c:61:27:9e:f4:75:e4:2c:da:af:0a:b4:d9:52: 6c:25:66:a5:64:26:6a:73:88:f0:e0:ca:2d:b7:50: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:B4:34:36:72:0E:F8:C2:48:11:F1:F9:C7:DE:30:01:2A:45:DB X509v3 Authority Key Identifier: keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:c2:69:e9:3d:9e:9f:22:cf:15:f0:25:fb:37:ee:e8:d9: 0a:66:32:db:56:29:02:1a:bf:c6:ed:a5:3a:32:14:03:85:9f: 21:7b:d4:99:16:4f:a2:92:e2:c8:5e:df:8d:ec:02:58:ba:2b: e1:39:85:d6:74:07:5a:97:7a:cc:7b:6b:c8:0d:e4:0a:8f:c8: bd:c7:de:21:f4:b5:cf:b1:74:39:0f:a1:2f:3b:7e:26:6a:fd: e5:4b:22:db:5a:a4:40:44:54:c2:f3:a0:9e:1f:34:ca:e3:1a: 87:b8:c2:e3:72:d6:08:bd:bd:0b:1d:a1:c1:bf:3e:08:c5:cf: 2f:5d:51:45:14:34:47:02:1a:56:56:ab:68:61:5d:c2:b4:02: 40:0c:73:29:b1:ac:36:15:4d:42:fe:9e:ba:86:e8:62:46:7e: b7:4b:bb:8f:f9:ef:7f:cd:d0:85:08:d9:b9:b8:c5:60:9b:7d: a1:43:89:ce:6e:5e:32:22:85:d4:07:ad:60:d4:cd:7a:5a:b0: 1e:97:79:75:d5:96:61:9b:13:f7:80:60:5d:c8:aa:bb:55:70: 4f:e8:e9:ff:ca:20:56:d3:a2:76:59:3c:e0:ff:bf:67:b0:bc: 73:c6:b2:12:b4:d3:44:2d:4a:c4:cb:61:77:0a:e3:34:9f:c7: d1:84:f7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9j4UrlKadBaE9uvjWg6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTg3MDBlYTljN2JlMmRmNTY4OGFmZmJlZGQ4YTRlNTUz OTJkZTYwHhcNMjUxMjI2MTQwMDQ1WhcNMjUxMjI3MTQwMDQ1WjAzMTEwLwYDVQQD Eyg4ZWVjYjQzNDM2NzIwZWY4YzI0ODExZjFmOWM3ZGUzMDAxMmE0NWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ0ooGWKdnB5JcHVPToOTQbKlFe+ G3wNlqln4/YZODvMfrkQiQJ2hPybW45cRUobNcR5q+ca+2YKcioN9j4qD0WcZXZG Au3R3wb3CRWP4TelFZTiPJhwu5DxzDQc6Sm2YGKHIUHYGFf4OUXxKV7Ce5BPz4zC W0if/3zd9Qkp4scS7+JNLNViQuH71s8rvJQ4UEaA0Xq99QNlBa0Hhwh/rBlaN1hX p4Vtkf0FHFaItMuPyErYjcuJ8lT8aDdRxpauFRZrB6F+/Qfl/A5eVoQxZOK+M0w4 jEGkSK9JktJQof3wTGEnnvR15Czarwq02VJsJWalZCZqc4jw4Mott1BkgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7stDQ2cg74wkgR8fnH3jABKkXbMB8GA1UdIwQY MBaAFDkYcA6px74t9WiK/77dik5VOS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWIt MWM4YmUyNWViNjg2LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWItMWM4YmUyNWViNjg2 LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhHCaek9 np8izxXwJfs37ujZCmYy21YpAhq/xu2lOjIUA4WfIXvUmRZPopLiyF7fjewCWLor 4TmF1nQHWpd6zHtryA3kCo/IvcfeIfS1z7F0OQ+hLzt+Jmr95Usi21qkQERUwvOg nh80yuMah7jC43LWCL29Cx2hwb8+CMXPL11RRRQ0RwIaVlaraGFdwrQCQAxzKbGs NhVNQv6euoboYkZ+t0u7j/nvf83QhQjZubjFYJt9oUOJzm5eMiKF1AetYNTNelqw Hpd5ddWWYZsT94BgXciqu1VwT+jp/8ogVtOidlk84P+/Z7C8c8ayErTTRC1KxMth dwrjNJ/H0YT3dQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:20 2025 by rpki-client