This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json) Hash identifier: CHu2T0mkHxqM0YQNxGPz+x9Qjaa4ocS8sA0VgjyKkpE= Subject key identifier: A6:BC:A1:BC:9E:F4:AB:12:91:52:53:86:7B:FC:44:12:C4:C2:A4:3F Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Certificate serial: 019B356950D144C0D766F20C57064AF34D94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 07:00:52 +0000 Manifest this update: Fri 19 Dec 2025 07:00:52 +0000 Manifest next update: Sat 20 Dec 2025 07:00:52 +0000 Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=) 2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: bK/vBlnKu/+kst3gBW9WQoDv45BCrZodT0WS7g0bAhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:50:d1:44:c0:d7:66:f2:0c:57:06:4a:f3:4d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Validity Not Before: Dec 19 07:00:52 2025 GMT Not After : Dec 20 07:00:52 2025 GMT Subject: CN=a6bca1bc9ef4ab12915253867bfc4412c4c2a43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1d:49:b4:cf:8b:17:f3:2a:26:60:9e:a9:51: d8:a5:ee:63:24:12:d9:55:f6:93:f9:47:02:e2:6a: aa:bf:1e:35:f0:52:b9:4f:d7:80:b1:b3:ee:6e:4a: 04:0c:fe:e9:bb:a2:9d:62:ad:76:a3:05:0c:82:a0: d6:8b:e2:b4:ce:0e:7d:69:7c:79:b9:71:ce:0b:b8: 50:99:5d:8e:d3:4d:eb:75:9f:d0:52:50:a9:3f:a5: d8:9e:f0:86:6b:c3:2e:53:16:25:94:1c:74:24:88: 3e:f9:10:04:dc:74:90:77:a4:cc:d2:f7:26:81:4b: d7:97:ec:1f:48:ed:19:9e:e6:d4:50:87:8d:8c:60: fd:75:5d:9d:1e:c6:1a:8b:82:a0:4e:c4:27:4f:ce: 63:c5:35:1e:fc:2f:3c:bd:3e:35:35:12:09:b3:dd: 9f:d8:80:e6:1b:21:b1:15:6f:82:61:f6:1a:dd:b3: 8e:1f:f9:03:6f:37:18:4d:c8:68:f1:9f:cc:43:09: f1:ed:76:c9:33:2f:3a:85:af:cf:36:9b:c5:4f:58: c2:f3:78:5b:07:94:b8:bf:56:45:75:ec:22:c0:89: 1a:f1:65:fa:bc:a4:13:84:b8:a2:11:b8:1f:59:56: 7c:f2:1c:83:77:3d:29:fa:f0:7d:7e:a3:c1:bc:23: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:A1:BC:9E:F4:AB:12:91:52:53:86:7B:FC:44:12:C4:C2:A4:3F X509v3 Authority Key Identifier: keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b4:a4:6c:3e:b0:e9:8c:58:1a:84:6d:a6:70:d5:ca:9a:d0: ec:e7:1b:e1:dd:5d:73:a1:fa:b1:ce:09:21:c0:dd:2f:13:41: cf:fd:c7:18:ff:9e:14:8b:fe:f9:59:74:f5:d3:ea:34:aa:39: 36:67:13:f7:6b:96:35:cb:85:23:91:02:50:ee:85:95:27:92: 5b:9b:2a:7b:8a:ba:bb:36:43:bc:7b:1e:02:c4:b1:db:b8:6f: 23:b6:f5:5c:ed:e1:a8:3c:d8:22:f2:ea:c2:0f:a6:0a:54:6b: 51:ac:09:42:f0:09:0a:7c:b3:34:80:86:47:84:ea:7b:2f:f3: 14:26:f9:94:13:a8:fb:19:74:3a:c0:4c:e2:4c:30:6e:02:60: 65:bd:e7:e7:41:26:21:89:e6:2a:4a:cd:83:8b:61:2d:28:bd: 11:17:ec:5f:db:e9:69:00:71:e3:67:f4:1f:be:4a:fe:ac:c3: 2f:eb:a8:59:81:6f:15:77:10:e9:19:73:c8:26:61:4a:99:4f: bf:06:26:ba:f2:3f:b1:d5:ab:45:9c:f5:1a:e8:dc:6a:21:a0: b0:b1:93:a7:25:a3:a4:54:0d:2a:2c:43:31:af:55:2b:32:72: 93:40:92:5a:c6:2c:a8:b5:fc:8f:28:4a:3e:91:93:bc:49:61: 82:ef:a3:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aVDRRMDXZvIMVwZK802UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm ZDc0NDEwHhcNMjUxMjE5MDcwMDUyWhcNMjUxMjIwMDcwMDUyWjAzMTEwLwYDVQQD EyhhNmJjYTFiYzllZjRhYjEyOTE1MjUzODY3YmZjNDQxMmM0YzJhNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h1JtM+LF/MqJmCeqVHYpe5jJBLZ VfaT+UcC4mqqvx418FK5T9eAsbPubkoEDP7pu6KdYq12owUMgqDWi+K0zg59aXx5 uXHOC7hQmV2O003rdZ/QUlCpP6XYnvCGa8MuUxYllBx0JIg++RAE3HSQd6TM0vcm gUvXl+wfSO0ZnubUUIeNjGD9dV2dHsYai4KgTsQnT85jxTUe/C88vT41NRIJs92f 2IDmGyGxFW+CYfYa3bOOH/kDbzcYTcho8Z/MQwnx7XbJMy86ha/PNpvFT1jC83hb B5S4v1ZFdewiwIka8WX6vKQThLiiEbgfWVZ88hyDdz0p+vB9fqPBvCMlDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa8obye9KsSkVJThnv8RBLEwqQ/MB8GA1UdIwQY MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLSkbD6w 6YxYGoRtpnDVyprQ7Ocb4d1dc6H6sc4JIcDdLxNBz/3HGP+eFIv++Vl09dPqNKo5 NmcT92uWNcuFI5ECUO6FlSeSW5sqe4q6uzZDvHseAsSx27hvI7b1XO3hqDzYIvLq wg+mClRrUawJQvAJCnyzNICGR4Tqey/zFCb5lBOo+xl0OsBM4kwwbgJgZb3n50Em IYnmKkrNg4thLSi9ERfsX9vpaQBx42f0H75K/qzDL+uoWYFvFXcQ6RlzyCZhSplP vwYmuvI/sdWrRZz1GujcaiGgsLGTpyWjpFQNKixDMa9VKzJyk0CSWsYsqLX8jyhK PpGTvElhgu+jsA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:21:22 2025 by rpki-client