This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json) Hash identifier: 4B1ruMdnNUKuMVDxBJg15I4KZNiTIjMrqibp3/0KQ4U= Subject key identifier: 61:1E:51:C4:A0:59:7C:5D:CE:6A:AE:3E:A4:0B:DA:3B:60:D7:9C:20 Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64 Certificate serial: 019B4136FB9DFC6DF6F3A8DEE70261657A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft Manifest number: 1061 Signing time: Sun 21 Dec 2025 14:01:20 +0000 Manifest this update: Sun 21 Dec 2025 14:01:20 +0000 Manifest next update: Mon 22 Dec 2025 14:01:20 +0000 Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: a/z84sZBmYwFw6yLexoRXX2Re0iRfL9z7Js4mrkqzoU=) 2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:fb:9d:fc:6d:f6:f3:a8:de:e7:02:61:65:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64 Validity Not Before: Dec 21 14:01:20 2025 GMT Not After : Dec 22 14:01:20 2025 GMT Subject: CN=611e51c4a0597c5dce6aae3ea40bda3b60d79c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:9a:09:01:e4:78:37:bb:0e:7f:07:8c:48: af:ec:ce:fa:25:aa:4e:f7:83:d6:98:40:a2:a8:84: 24:c8:99:e6:af:85:be:8a:ad:f9:1a:8d:83:46:e7: 31:ea:ed:7b:e3:96:4f:87:d3:4f:72:e4:60:87:e2: 8d:5d:dc:48:4b:c5:9d:3a:a9:10:f2:78:56:ac:fd: 61:0a:ea:7f:15:58:82:05:a6:8d:26:e1:c1:23:b3: 2e:02:27:69:98:2a:35:d9:70:52:a1:11:5d:71:6e: 67:d3:a7:8b:79:42:36:38:3f:f7:c0:50:bf:0c:9a: 69:9b:20:59:e0:38:73:09:6b:ad:f3:62:d7:a9:69: 9e:f9:ed:c2:11:72:0a:f9:a5:53:37:e0:1e:8b:65: 9c:98:65:ef:20:d7:2d:94:d7:4e:5e:ae:7e:4b:03: 24:3d:f4:31:a2:a8:89:a0:94:95:91:ca:1e:9f:2a: 07:c5:b3:85:c9:54:af:d5:0f:3f:d2:87:86:c1:cd: cb:25:40:fa:d1:47:fc:4b:5e:09:7b:eb:16:f1:62: 99:15:7c:00:99:3a:cb:b3:b1:1d:38:f9:52:db:8f: 03:ae:69:f3:c3:ee:c7:1a:e6:29:77:2b:9f:1d:69: 9f:74:cf:ab:bd:39:f5:81:61:07:94:a7:06:69:91: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1E:51:C4:A0:59:7C:5D:CE:6A:AE:3E:A4:0B:DA:3B:60:D7:9C:20 X509v3 Authority Key Identifier: keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d9:95:77:40:ef:5b:e3:5e:60:39:49:26:b0:4d:b3:50:d4: 15:1f:38:c0:9f:ae:f2:d7:8d:b0:f4:2e:14:ee:29:1e:6d:03: fa:3a:c5:d4:be:6c:a5:79:01:1f:aa:8d:07:7c:a8:a7:5b:65: 27:eb:d5:dc:92:9a:97:f5:99:e1:c1:34:8d:34:25:9b:1e:55: de:76:f0:f3:d6:20:e0:f3:0f:d2:ad:84:a1:a1:91:1a:e0:0e: f6:ec:8e:c6:11:aa:45:40:e6:e0:dc:44:e7:9a:fc:ee:5a:f4: f8:1a:21:0b:08:2f:7e:8d:97:12:ea:83:ed:69:d6:bf:4f:ef: e2:01:e3:11:f2:b4:a1:30:82:1a:bc:ca:4d:f0:c4:93:fa:6b: 7f:fe:e3:ac:e4:2a:b3:fb:82:5a:b0:64:9e:b5:9e:49:76:a3: c3:1b:42:c0:9f:a8:f0:db:67:6b:86:98:81:f8:42:17:6c:08: 38:bc:73:48:a4:82:ee:54:c3:ce:25:1a:97:67:08:17:88:75: 00:51:e7:4b:16:16:d2:b4:23:d5:9b:03:3d:a6:cc:e4:15:27: 30:94:25:34:f1:d8:c4:79:7b:67:d7:59:27:9c:84:55:04:ae: c8:3d:bb:41:f8:03:7a:8c:a0:57:76:9d:94:32:51:9a:4c:f5: d5:a3:90:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvud/G3286je5wJhZXqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw MGNiNjQwHhcNMjUxMjIxMTQwMTIwWhcNMjUxMjIyMTQwMTIwWjAzMTEwLwYDVQQD Eyg2MTFlNTFjNGEwNTk3YzVkY2U2YWFlM2VhNDBiZGEzYjYwZDc5YzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TSaCQHkeDe7Dn8HjEiv7M76JapO 94PWmECiqIQkyJnmr4W+iq35Go2DRucx6u1745ZPh9NPcuRgh+KNXdxIS8WdOqkQ 8nhWrP1hCup/FViCBaaNJuHBI7MuAidpmCo12XBSoRFdcW5n06eLeUI2OD/3wFC/ DJppmyBZ4DhzCWut82LXqWme+e3CEXIK+aVTN+Aei2WcmGXvINctlNdOXq5+SwMk PfQxoqiJoJSVkcoenyoHxbOFyVSv1Q8/0oeGwc3LJUD60Uf8S14Je+sW8WKZFXwA mTrLs7EdOPlS248Drmnzw+7HGuYpdyufHWmfdM+rvTn1gWEHlKcGaZFW0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEeUcSgWXxdzmquPqQL2jtg15wgMB8GA1UdIwQY MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt Y2EzMzUwZTc2MGNiLzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9mVd0Dv W+NeYDlJJrBNs1DUFR84wJ+u8teNsPQuFO4pHm0D+jrF1L5spXkBH6qNB3yop1tl J+vV3JKal/WZ4cE0jTQlmx5V3nbw89Yg4PMP0q2EoaGRGuAO9uyOxhGqRUDm4NxE 55r87lr0+BohCwgvfo2XEuqD7WnWv0/v4gHjEfK0oTCCGrzKTfDEk/prf/7jrOQq s/uCWrBknrWeSXajwxtCwJ+o8Ntna4aYgfhCF2wIOLxzSKSC7lTDziUal2cIF4h1 AFHnSxYW0rQj1ZsDPabM5BUnMJQlNPHYxHl7Z9dZJ5yEVQSuyD27QfgDeoygV3ad lDJRmkz11aOQ6w== -----END CERTIFICATE-----Generated at Sun Dec 21 17:18:47 2025 by rpki-client