This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json) Hash identifier: GyFvU/S1JXjo206uJgFhx24Q+o+3ZZrsanGn6WPUkIk= Subject key identifier: 59:B6:38:FA:57:C8:5A:1A:13:55:DD:DB:9F:03:17:5A:93:1F:EF:D6 Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64 Certificate serial: 019B48F08B12B77E0A58736D964E0B25162D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft Manifest number: 1065 Signing time: Tue 23 Dec 2025 02:01:22 +0000 Manifest this update: Tue 23 Dec 2025 02:01:22 +0000 Manifest next update: Wed 24 Dec 2025 02:01:22 +0000 Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: vUvbsL5LZc2vItW6WWQLqJlLPAQRBF4cKQclvT26dms=) 2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:8b:12:b7:7e:0a:58:73:6d:96:4e:0b:25:16:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64 Validity Not Before: Dec 23 02:01:22 2025 GMT Not After : Dec 24 02:01:22 2025 GMT Subject: CN=59b638fa57c85a1a1355dddb9f03175a931fefd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:1e:73:1f:57:a3:13:49:28:75:2b:9a:80: 49:d3:40:aa:65:69:9a:f1:b9:f7:71:c7:b8:39:ac: ed:ac:45:fe:c2:ae:db:05:bd:f1:28:55:45:49:7f: 06:73:d7:9c:19:c0:26:95:d8:e6:7e:d3:89:ba:f8: a1:be:25:b1:2b:0e:37:fd:22:cf:c4:04:95:72:01: 1a:d8:de:d6:ca:20:9c:e0:fa:1a:47:8b:84:5a:91: 83:65:8b:dd:c8:d3:98:64:ab:fe:1d:4e:4b:1c:39: ec:ac:95:7d:39:d8:c8:30:4d:a0:52:f3:2a:48:62: ad:50:80:12:0e:8a:02:8f:cf:f9:50:d1:87:67:6f: 3e:3e:c6:54:51:21:ab:df:23:06:40:40:93:7f:40: 5f:d2:11:23:f2:c0:59:43:45:02:94:aa:06:2d:78: 91:af:dc:ae:78:e4:b1:3d:1a:f9:db:4a:50:88:22: 24:3e:34:fd:0e:1d:14:e2:f9:f3:2b:5a:45:da:b9: c0:ff:30:63:43:81:27:90:b3:d6:1d:b1:1f:f0:34: 9b:35:95:6e:1e:1d:45:46:76:31:fa:b5:18:8f:ed: 62:a0:95:95:cb:ee:f2:36:c5:c7:e3:70:9c:dd:3c: b1:a7:4f:4f:4d:7b:e4:00:7c:8c:02:b5:6b:97:9a: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B6:38:FA:57:C8:5A:1A:13:55:DD:DB:9F:03:17:5A:93:1F:EF:D6 X509v3 Authority Key Identifier: keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4c:d5:b1:ba:99:82:1c:85:3f:da:58:1b:c9:10:2c:49:69: cd:92:67:0f:e4:13:79:a9:0f:86:ba:76:41:5d:e3:01:35:07: eb:78:10:eb:91:7b:bb:78:5c:1b:9a:c6:a5:95:47:29:09:51: ff:03:a0:e0:65:df:9b:57:e1:bc:a2:3f:f0:87:44:52:51:66: f0:34:4f:7a:e0:f1:28:09:d5:d4:47:25:b7:1e:42:8a:a5:41: 72:98:d7:3d:fc:a7:0d:c9:a0:b0:3f:77:01:7b:04:0c:a7:48: ca:23:3b:31:d4:99:79:21:c3:ec:22:d9:cd:0f:0f:20:fd:0e: 9c:71:44:4b:9a:31:dc:7e:48:19:89:d9:c5:e9:e2:13:58:e6: d6:7c:db:97:7b:b0:1a:f9:69:cb:2e:f4:95:c2:43:a7:38:7e: 77:e9:73:05:7c:a2:1f:f3:f1:d0:5f:7c:f4:05:cc:b9:5f:97: 07:98:03:43:b1:27:8f:8f:cb:8c:b5:f6:32:56:8b:10:5b:7d: e5:94:d6:36:72:4d:b4:33:08:8d:e1:39:01:79:82:03:bf:75: 85:ce:1b:05:c9:04:90:12:ce:9f:b8:71:f3:1a:a2:fd:ac:7c: 5c:76:a2:40:f8:73:73:58:91:fb:57:1b:60:4b:ed:62:c4:7b: 98:59:ad:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8IsSt34KWHNtlk4LJRYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw MGNiNjQwHhcNMjUxMjIzMDIwMTIyWhcNMjUxMjI0MDIwMTIyWjAzMTEwLwYDVQQD Eyg1OWI2MzhmYTU3Yzg1YTFhMTM1NWRkZGI5ZjAzMTc1YTkzMWZlZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Mecx9XoxNJKHUrmoBJ00CqZWma 8bn3cce4OaztrEX+wq7bBb3xKFVFSX8Gc9ecGcAmldjmftOJuvihviWxKw43/SLP xASVcgEa2N7WyiCc4PoaR4uEWpGDZYvdyNOYZKv+HU5LHDnsrJV9OdjIME2gUvMq SGKtUIASDooCj8/5UNGHZ28+PsZUUSGr3yMGQECTf0Bf0hEj8sBZQ0UClKoGLXiR r9yueOSxPRr520pQiCIkPjT9Dh0U4vnzK1pF2rnA/zBjQ4EnkLPWHbEf8DSbNZVu Hh1FRnYx+rUYj+1ioJWVy+7yNsXH43Cc3Tyxp09PTXvkAHyMArVrl5rSbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm2OPpXyFoaE1Xd258DF1qTH+/WMB8GA1UdIwQY MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt Y2EzMzUwZTc2MGNiLzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUzVsbqZ ghyFP9pYG8kQLElpzZJnD+QTeakPhrp2QV3jATUH63gQ65F7u3hcG5rGpZVHKQlR /wOg4GXfm1fhvKI/8IdEUlFm8DRPeuDxKAnV1Ecltx5CiqVBcpjXPfynDcmgsD93 AXsEDKdIyiM7MdSZeSHD7CLZzQ8PIP0OnHFES5ox3H5IGYnZxeniE1jm1nzbl3uw Gvlpyy70lcJDpzh+d+lzBXyiH/Px0F989AXMuV+XB5gDQ7Enj4/LjLX2MlaLEFt9 5ZTWNnJNtDMIjeE5AXmCA791hc4bBckEkBLOn7hx8xqi/ax8XHaiQPhzc1iR+1cb YEvtYsR7mFmt8w== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:29 2025 by rpki-client