This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json) Hash identifier: h7GBlm5QtXMoZGglAQVSPaC5YYt72ibxdOLfeMs+Klw= Subject key identifier: 22:0A:2F:FC:BE:11:DA:70:B7:A0:B2:A4:39:95:92:75:BF:EA:49:7B Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Certificate serial: 019B0746C477B7E33A0EC29106E69B3EFDC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 08:00:36 +0000 Manifest this update: Wed 10 Dec 2025 08:00:36 +0000 Manifest next update: Thu 11 Dec 2025 08:00:36 +0000 Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: ZNqTQvY5SR6x3iUZk2RLpa5/X2S90CcDkRR0GO5GHRg=) 2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:c4:77:b7:e3:3a:0e:c2:91:06:e6:9b:3e:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Validity Not Before: Dec 10 08:00:36 2025 GMT Not After : Dec 11 08:00:36 2025 GMT Subject: CN=220a2ffcbe11da70b7a0b2a439959275bfea497b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:44:bd:c3:9a:c2:50:60:1d:ff:42:7a:fd: ba:bd:f4:0b:3a:72:e8:16:66:76:57:06:8b:e7:6d: 8b:b7:e4:77:b9:00:41:4b:b1:f5:7a:c6:c8:d9:fa: 5a:3e:7a:04:2d:29:4c:f9:19:ab:ec:b6:68:c4:b6: f9:5a:de:31:64:89:f3:22:64:e4:fa:ea:cd:b0:54: 10:1e:0c:f6:de:d5:93:07:83:8b:d9:5c:58:38:b4: b0:2d:7c:cd:d0:1a:c7:b2:67:26:b3:f0:e8:39:cd: 89:7c:6d:0d:18:0d:15:35:5a:da:ab:ee:d3:83:6b: 95:95:12:35:50:92:ef:79:44:ff:fd:81:df:97:19: 60:26:05:89:e3:6e:d1:bf:69:9a:cb:1a:c5:7f:fa: aa:08:9b:d9:61:f9:64:63:2e:38:67:b6:83:bb:28: b8:78:f3:bb:22:70:47:f9:ed:49:05:61:e2:75:70: a9:66:4f:1b:c7:34:32:22:ff:9a:6c:f6:d6:ce:56: da:4e:e1:6a:42:8e:62:aa:96:87:50:18:69:a3:e7: c6:92:81:29:5d:2e:ec:10:3a:de:aa:13:17:e5:b5: c3:20:68:b9:9b:32:22:ec:81:f4:4c:22:48:f7:61: 61:3a:91:31:32:a0:c2:7b:11:0b:a7:bd:d3:20:c5: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:2F:FC:BE:11:DA:70:B7:A0:B2:A4:39:95:92:75:BF:EA:49:7B X509v3 Authority Key Identifier: keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bf:41:91:9c:24:98:e4:4e:75:50:d9:f5:dc:4b:f1:7f:14: 45:d6:38:83:b0:c5:e2:ac:9b:bb:36:ba:3b:6b:ec:31:cc:53: 4a:1b:f0:46:ec:7f:37:ba:09:bd:7e:7b:6e:3d:fe:6d:17:48: 67:b2:e7:fa:59:46:b4:50:17:67:1a:b7:94:b0:6a:68:13:67: d8:14:6a:3b:12:02:1e:5d:26:6e:84:0d:a6:72:c4:ed:4e:a6: 5b:e0:17:76:db:7f:cd:3a:fe:e7:0e:e9:a1:6c:21:be:8d:df: 5a:62:21:e4:17:41:ef:bf:9d:6f:85:e4:64:54:83:a8:bc:0e: 6f:f4:31:3d:40:15:51:38:5a:eb:df:9c:b4:25:e0:e7:42:d5: a4:b5:2d:de:af:1c:e8:4f:d0:c1:8b:a5:72:b4:b8:43:98:8f: 71:ef:99:69:3a:e4:06:7d:27:12:e7:f4:72:f0:bd:44:03:fd: 8a:7a:f0:43:72:b7:b1:b7:77:1a:b3:1a:be:d0:53:6b:c1:e3: aa:92:75:5c:cb:3b:3c:1c:d1:e7:c7:52:64:ba:d1:95:9e:5b: c7:42:ac:84:44:83:96:76:d3:fc:e9:ee:00:c4:c3:96:c2:37: 98:55:d4:48:c2:ca:dd:f2:bc:a4:74:91:59:cd:70:97:30:c8: 53:ac:42:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRsR3t+M6DsKRBuabPv3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0 ODQ0YzAwHhcNMjUxMjEwMDgwMDM2WhcNMjUxMjExMDgwMDM2WjAzMTEwLwYDVQQD EygyMjBhMmZmY2JlMTFkYTcwYjdhMGIyYTQzOTk1OTI3NWJmZWE0OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24dEvcOawlBgHf9Cev26vfQLOnLo FmZ2VwaL522Lt+R3uQBBS7H1esbI2fpaPnoELSlM+Rmr7LZoxLb5Wt4xZInzImTk +urNsFQQHgz23tWTB4OL2VxYOLSwLXzN0BrHsmcms/DoOc2JfG0NGA0VNVraq+7T g2uVlRI1UJLveUT//YHflxlgJgWJ427Rv2mayxrFf/qqCJvZYflkYy44Z7aDuyi4 ePO7InBH+e1JBWHidXCpZk8bxzQyIv+abPbWzlbaTuFqQo5iqpaHUBhpo+fGkoEp XS7sEDreqhMX5bXDIGi5mzIi7IH0TCJI92FhOpExMqDCexELp73TIMVprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIKL/y+Edpwt6CypDmVknW/6kl7MB8GA1UdIwQY MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt MDUwMjA0NTMyMjg2LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2 LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb79BkZwk mOROdVDZ9dxL8X8URdY4g7DF4qybuza6O2vsMcxTShvwRux/N7oJvX57bj3+bRdI Z7Ln+llGtFAXZxq3lLBqaBNn2BRqOxICHl0mboQNpnLE7U6mW+AXdtt/zTr+5w7p oWwhvo3fWmIh5BdB77+db4XkZFSDqLwOb/QxPUAVUTha69+ctCXg50LVpLUt3q8c 6E/QwYulcrS4Q5iPce+ZaTrkBn0nEuf0cvC9RAP9inrwQ3K3sbd3GrMavtBTa8Hj qpJ1XMs7PBzR58dSZLrRlZ5bx0KshESDlnbT/OnuAMTDlsI3mFXUSMLK3fK8pHSR Wc1wlzDIU6xC2A== -----END CERTIFICATE-----Generated at Wed Dec 10 18:27:18 2025 by rpki-client