This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json) Hash identifier: krRVKLJ+B+IZXc9d/TirrhpiiRuhM9NdNnb0Kl8wfjA= Subject key identifier: 49:99:E5:5A:E2:04:37:4B:A5:CA:89:85:ED:2F:2D:84:28:28:28:EC Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01 Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01 Certificate serial: 019B5A1B0AA10494800B95AA9BBB1A55D701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft Manifest number: 0CBB Signing time: Fri 26 Dec 2025 10:01:20 +0000 Manifest this update: Fri 26 Dec 2025 10:01:20 +0000 Manifest next update: Sat 27 Dec 2025 10:01:20 +0000 Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: YlMHlpEzHXk1AGUWe25bFh/RVTBof9pmJ/dR3T1UIAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:0a:a1:04:94:80:0b:95:aa:9b:bb:1a:55:d7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01 Validity Not Before: Dec 26 10:01:20 2025 GMT Not After : Dec 27 10:01:20 2025 GMT Subject: CN=4999e55ae204374ba5ca8985ed2f2d84282828ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:fe:e5:2e:a9:68:b1:37:0a:86:0d:36:bc: 4d:93:f2:26:43:b9:31:e2:f8:59:19:0d:08:cb:77: bb:5a:09:95:56:f8:d5:f8:b9:7d:d0:8e:8a:6d:d5: e9:ab:45:d7:0b:8d:0c:95:aa:1d:c3:49:76:be:c4: 7d:01:60:a3:5e:e2:f7:e2:3f:9b:d5:93:0e:68:19: 9e:fd:d1:52:be:b6:22:a3:83:17:5a:ad:d1:b8:68: 10:a3:35:49:47:1e:8b:a8:5f:c5:b3:bd:58:d7:da: 5e:9d:95:52:ea:c6:ba:80:d8:88:8a:3b:29:c5:36: a4:d4:90:c6:40:8e:11:fd:9f:6d:5b:0d:ff:26:10: 4d:2b:62:e3:04:12:33:bb:5f:e5:ac:9f:6a:f4:74: 65:90:39:98:5a:e5:eb:a3:7d:ad:b9:42:73:2b:fd: d6:91:53:79:12:e1:60:36:5f:9d:a2:d6:7e:b7:05: 84:90:ff:4c:65:1d:60:26:54:02:36:7c:41:ae:2d: 84:48:1a:60:de:95:5a:95:6c:bc:70:32:b3:6d:35: 49:15:74:08:65:b5:71:80:41:11:7b:7b:65:98:a2: 62:8d:07:f3:16:37:b1:1f:0f:fb:28:fb:fb:82:c7: 0a:75:fc:86:05:d9:0f:41:01:0d:bc:31:e0:81:3a: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:99:E5:5A:E2:04:37:4B:A5:CA:89:85:ED:2F:2D:84:28:28:28:EC X509v3 Authority Key Identifier: keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:fc:99:c5:5d:6f:2e:3f:b7:b2:77:3f:ed:ab:65:e8:cd: a9:8d:03:0b:51:08:b5:ae:99:23:96:f2:c4:00:f8:3d:e6:33: 8f:ad:8f:f7:ce:3e:78:de:31:d0:79:3d:d3:40:bc:44:30:35: ba:b3:c0:29:8d:6f:13:2b:f5:b7:3d:8c:39:03:39:14:74:a1: 13:8e:4f:91:38:5a:f8:0b:34:32:8d:6f:10:f3:ae:8a:83:b5: 55:a2:57:cc:e8:bd:d3:f4:dc:fa:08:6c:00:3a:3c:cf:8e:91: 28:5b:8d:90:b6:00:14:3d:41:2b:b6:f9:18:0d:19:17:0f:cb: 4e:18:9b:54:53:a3:de:ff:99:26:cd:6f:9b:06:79:3e:30:23: 74:32:99:48:2d:da:2d:7e:ba:66:fd:95:6f:43:b6:70:2c:c5: 53:ca:f7:89:2e:49:ad:c0:4a:38:2b:e0:fd:fc:89:1e:53:1e: 29:8f:2f:7f:b1:05:7c:d8:a7:65:c5:d8:aa:ce:32:a8:4d:16: ba:68:a6:29:9c:e7:25:ed:4c:51:ee:d8:eb:83:cd:ed:19:7d: 69:e8:ec:7e:7e:e9:5e:75:19:e3:bb:0e:a9:5f:40:48:c8:d3: 33:3e:0e:6b:09:3b:de:ae:28:a0:7e:03:aa:1d:2e:60:95:d8: 6c:f8:b2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwqhBJSAC5Wqm7saVdcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmZhZGUyNzc5YmQxMmNhZTg5ODg5MjZhNDY2MmQ3NTcw ODZiMDEwHhcNMjUxMjI2MTAwMTIwWhcNMjUxMjI3MTAwMTIwWjAzMTEwLwYDVQQD Eyg0OTk5ZTU1YWUyMDQzNzRiYTVjYTg5ODVlZDJmMmQ4NDI4MjgyOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbz+5S6paLE3CoYNNrxNk/ImQ7kx 4vhZGQ0Iy3e7WgmVVvjV+Ll90I6KbdXpq0XXC40Mlaodw0l2vsR9AWCjXuL34j+b 1ZMOaBme/dFSvrYio4MXWq3RuGgQozVJRx6LqF/Fs71Y19penZVS6sa6gNiIijsp xTak1JDGQI4R/Z9tWw3/JhBNK2LjBBIzu1/lrJ9q9HRlkDmYWuXro32tuUJzK/3W kVN5EuFgNl+dotZ+twWEkP9MZR1gJlQCNnxBri2ESBpg3pValWy8cDKzbTVJFXQI ZbVxgEERe3tlmKJijQfzFjexHw/7KPv7gscKdfyGBdkPQQENvDHggTq8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmZ5VriBDdLpcqJhe0vLYQoKCjsMB8GA1UdIwQY MBaAFDq/reJ3m9EsromIkmpGYtdXCGsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ItdDRuZWIwU3l1aVlpU2FrWmkxMWNJYXdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85MjcwYjAtODYwOC00MTQ5LWEwNTIt MDk5ZmRlNjNiYmYyLzEvT3ItdDRuZWIwU3l1aVlpU2FrWmkxMWNJYXdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85MjcwYjAtODYwOC00MTQ5LWEwNTItMDk5ZmRlNjNiYmYy LzEvT3ItdDRuZWIwU3l1aVlpU2FrWmkxMWNJYXdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkX8mcVd by4/t7J3P+2rZejNqY0DC1EIta6ZI5byxAD4PeYzj62P984+eN4x0Hk900C8RDA1 urPAKY1vEyv1tz2MOQM5FHShE45PkTha+As0Mo1vEPOuioO1VaJXzOi90/Tc+ghs ADo8z46RKFuNkLYAFD1BK7b5GA0ZFw/LThibVFOj3v+ZJs1vmwZ5PjAjdDKZSC3a LX66Zv2Vb0O2cCzFU8r3iS5JrcBKOCvg/fyJHlMeKY8vf7EFfNinZcXYqs4yqE0W umimKZznJe1MUe7Y64PN7Rl9aejsfn7pXnUZ47sOqV9ASMjTMz4Oawk73q4ooH4D qh0uYJXYbPiyCg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:11 2025 by rpki-client