This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json) Hash identifier: mnmtjd26ITny0Oeafv8qUbzVvcM1YCDWM9nm29s5T6w= Subject key identifier: 16:E2:86:E8:82:BD:D9:2F:FD:62:EC:FD:A1:F5:68:F3:AB:DF:0A:49 Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Certificate serial: 019B2BC22327090A97A178F47EC2F02B8A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft Manifest number: 0DF9 Signing time: Wed 17 Dec 2025 10:01:41 +0000 Manifest this update: Wed 17 Dec 2025 10:01:41 +0000 Manifest next update: Thu 18 Dec 2025 10:01:41 +0000 Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: BowrQn1VTxzsTD+X/xPQgrtms8IjZdefIrCIRweIt1Y=) 2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:23:27:09:0a:97:a1:78:f4:7e:c2:f0:2b:8a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Validity Not Before: Dec 17 10:01:41 2025 GMT Not After : Dec 18 10:01:41 2025 GMT Subject: CN=16e286e882bdd92ffd62ecfda1f568f3abdf0a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f1:18:26:d2:74:53:f2:25:9e:89:52:eb:a1: ed:35:1f:68:30:87:42:d0:b3:a1:48:f8:46:61:e4: 1b:88:76:16:bd:83:e6:af:7f:f6:c2:35:24:a5:dd: b8:ac:70:ba:90:a4:4c:87:1a:97:22:24:cc:ad:67: 0f:57:93:b2:2d:d3:56:8d:17:ef:39:8d:e7:39:3b: 27:6c:37:47:da:0d:3b:d3:3f:1e:1e:34:8a:a4:40: 6f:5c:cd:48:d3:89:1d:75:46:10:5e:7f:62:1a:72: 8d:b4:33:43:d0:19:fb:aa:98:73:59:95:90:2c:4e: 78:e4:1c:81:d0:4a:c2:38:22:9d:7b:d6:96:da:21: e3:bc:05:49:29:2b:db:d6:ff:7e:9e:68:30:33:ae: ff:c2:ad:3f:e5:62:8c:bc:a8:80:ea:41:ac:41:c0: 65:80:b8:4e:84:9c:c7:0c:5e:6e:86:ed:28:1e:96: d8:92:d3:83:e2:dc:1b:bc:33:92:c8:9e:a3:ce:6f: 22:8f:79:f1:6a:13:a7:80:99:c4:e4:af:5b:eb:0d: b9:8d:96:40:5f:f7:38:1d:6d:7a:a1:a7:52:75:9e: db:06:45:dc:77:ae:b8:e6:91:a8:77:95:32:9b:76: 70:28:8b:df:67:e2:48:91:c4:80:f8:30:e4:19:cd: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:86:E8:82:BD:D9:2F:FD:62:EC:FD:A1:F5:68:F3:AB:DF:0A:49 X509v3 Authority Key Identifier: keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:63:9b:74:6f:73:c9:d5:72:96:ec:ee:52:84:66:11:4a:f3: 54:0d:0e:3d:61:9f:5e:37:53:ee:a5:64:98:12:ce:a5:49:7b: 06:be:c6:eb:e9:af:d1:17:f1:c6:75:9d:92:1e:2a:60:be:31: dc:89:a0:55:ec:4c:54:f8:12:3e:74:99:e0:12:17:8b:e9:05: d8:cb:b5:dd:84:49:51:1d:69:e3:42:d8:c5:9d:48:54:f3:3c: 26:0b:5b:ea:c8:fb:f5:06:d8:ac:c2:ea:be:c8:85:3a:ae:f5: 75:5c:6a:21:4f:a8:50:aa:a6:e8:21:14:fc:d5:75:10:1c:23: 0d:f9:64:ec:a5:08:0a:7a:8f:b6:14:ef:71:3b:05:7d:01:2e: 19:79:3b:a4:10:4a:c8:96:2e:de:3b:4b:c6:02:d2:36:ce:c4: ea:54:15:d9:b9:80:32:dc:3e:78:ed:dd:14:fa:de:5d:01:d7: 7d:cc:9a:c2:60:04:0e:d3:1a:7d:dc:f2:58:5f:ad:30:fe:d6: d0:41:03:ca:12:ad:bf:e1:53:46:50:88:fd:2f:55:62:ed:02: 5d:bf:cf:7f:d1:84:98:fa:7e:6b:81:5f:db:62:56:54:cf:08: a6:2f:16:7e:02:a1:f1:a3:0c:4d:4c:41:13:27:03:76:34:4f: 9d:01:27:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwiMnCQqXoXj0fsLwK4o9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWU5OTRhOTUwMTJkOTJmYjUxYTI4YzhhNjUwZWQ5Zjk3 NzM3YjgwHhcNMjUxMjE3MTAwMTQxWhcNMjUxMjE4MTAwMTQxWjAzMTEwLwYDVQQD EygxNmUyODZlODgyYmRkOTJmZmQ2MmVjZmRhMWY1NjhmM2FiZGYwYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/EYJtJ0U/IlnolS66HtNR9oMIdC 0LOhSPhGYeQbiHYWvYPmr3/2wjUkpd24rHC6kKRMhxqXIiTMrWcPV5OyLdNWjRfv OY3nOTsnbDdH2g070z8eHjSKpEBvXM1I04kddUYQXn9iGnKNtDND0Bn7qphzWZWQ LE545ByB0ErCOCKde9aW2iHjvAVJKSvb1v9+nmgwM67/wq0/5WKMvKiA6kGsQcBl gLhOhJzHDF5uhu0oHpbYktOD4twbvDOSyJ6jzm8ij3nxahOngJnE5K9b6w25jZZA X/c4HW16oadSdZ7bBkXcd6645pGod5Uym3ZwKIvfZ+JIkcSA+DDkGc2VTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbihuiCvdkv/WLs/aH1aPOr3wpJMB8GA1UdIwQY MBaAFDkemUqVAS2S+1GijIplDtn5dze4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMt NDJmYjM2NzdkZjc3LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMtNDJmYjM2NzdkZjc3 LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2ObdG9z ydVyluzuUoRmEUrzVA0OPWGfXjdT7qVkmBLOpUl7Br7G6+mv0RfxxnWdkh4qYL4x 3ImgVexMVPgSPnSZ4BIXi+kF2Mu13YRJUR1p40LYxZ1IVPM8Jgtb6sj79QbYrMLq vsiFOq71dVxqIU+oUKqm6CEU/NV1EBwjDflk7KUICnqPthTvcTsFfQEuGXk7pBBK yJYu3jtLxgLSNs7E6lQV2bmAMtw+eO3dFPreXQHXfcyawmAEDtMafdzyWF+tMP7W 0EEDyhKtv+FTRlCI/S9VYu0CXb/Pf9GEmPp+a4Ff22JWVM8Ipi8WfgKh8aMMTUxB EycDdjRPnQEn7w== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:40 2025 by rpki-client