This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json) Hash identifier: rrlrMo7Ca/ymN2UL2Z4Wu3Jr21gmIP6n1vM7nAG4HP4= Subject key identifier: CE:5C:D9:18:4F:15:5E:D1:B2:AC:7D:AE:7B:11:01:EA:C6:A8:EE:68 Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Certificate serial: 019AF31D07C6640ED19B3AD7230BF56314C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft Manifest number: 1470 Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=) 2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: Fc3BcOUlVcczI5S2JlVPeDSOGySBWW7X/wC+OIUrU8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:07:c6:64:0e:d1:9b:3a:d7:23:0b:f5:63:14:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=ce5cd9184f155ed1b2ac7dae7b1101eac6a8ee68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:6a:62:5f:1f:e9:14:78:41:d6:b0:ab:ef: 90:5c:fa:da:99:5a:15:ad:b5:a7:84:65:6e:f0:bd: 24:a6:ab:ea:cb:1f:99:32:21:67:39:13:ca:da:11: 3c:f6:0f:4e:44:9b:73:21:90:b9:f6:2d:d9:28:db: ab:7a:82:0e:2d:67:92:6c:e7:47:2a:3d:b0:ff:4b: a1:c4:fa:9c:51:f5:b4:93:d9:17:ab:11:a9:fe:96: ed:e4:d5:e7:c6:88:6d:ff:e0:37:d9:1b:dc:61:03: 6d:be:0b:83:4c:7b:31:60:fa:55:b8:bb:46:21:fc: 74:bc:9d:66:86:fb:dd:46:33:d0:1e:81:61:3d:85: c1:25:db:84:c1:90:d0:f1:95:a1:8a:5b:60:ba:39: 98:74:43:67:ed:a5:b8:b1:c4:55:96:d1:8c:b0:3a: 7b:7e:4a:d6:9c:f7:76:77:83:96:e9:04:53:ac:e7: 22:c2:f4:31:b8:14:2a:aa:d2:92:7e:48:a3:7a:69: 6c:39:5a:be:72:b8:e8:38:59:e1:52:05:8a:50:1d: 06:d3:4c:41:9e:1b:d9:38:1e:30:2e:62:6a:a9:a1: 63:bf:e2:f7:6e:2d:23:ad:cf:78:eb:1d:fa:f3:9f: 5a:8e:05:b1:02:90:5b:6c:48:fa:03:09:df:64:99: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:D9:18:4F:15:5E:D1:B2:AC:7D:AE:7B:11:01:EA:C6:A8:EE:68 X509v3 Authority Key Identifier: keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0e:fb:c8:6b:8a:5b:2c:06:2d:55:0d:9e:9c:bb:57:82:58: fb:03:c4:57:7f:c8:5b:60:77:9b:57:f7:25:a6:83:1d:82:74: 8c:d4:2a:46:0f:68:fc:50:d0:c0:6e:9a:be:90:5a:a6:a1:fd: af:65:56:76:59:d0:e1:1e:ba:00:91:64:32:6e:4f:a4:0f:c8: 0e:63:46:22:4c:e8:f4:a7:43:07:49:11:45:55:84:50:13:14: 92:d4:6e:bd:98:2c:e5:cd:c0:b6:1b:fc:2f:44:58:84:95:dd: d0:58:76:b1:6a:be:e6:40:1f:91:60:4d:8f:14:69:aa:ce:e6: 27:07:20:15:ee:b2:06:9e:08:3b:dd:25:9c:16:25:23:73:e7: e3:7f:25:35:3f:39:6e:ef:f1:ba:1f:6f:41:98:9b:61:d6:0a: eb:d2:ee:bb:cd:4e:c4:33:de:3c:95:5a:db:36:d4:a5:ce:97: 22:8f:e6:ee:60:e0:f5:63:9b:5f:ae:9c:0c:6f:2e:e9:42:83: e6:9f:7a:d4:4e:e9:26:60:11:ab:3c:65:a6:d2:f3:fd:c4:e1: f5:37:9c:d9:91:11:99:90:74:0d:a9:a8:f5:a1:60:59:03:c6: b7:e5:1a:0b:08:1e:e9:0b:70:1d:98:39:f9:5a:48:15:58:62: 6d:c0:e2:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQfGZA7RmzrXIwv1YxTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm NzdjZDcwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD EyhjZTVjZDkxODRmMTU1ZWQxYjJhYzdkYWU3YjExMDFlYWM2YThlZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AJqYl8f6RR4Qdawq++QXPramVoV rbWnhGVu8L0kpqvqyx+ZMiFnORPK2hE89g9ORJtzIZC59i3ZKNureoIOLWeSbOdH Kj2w/0uhxPqcUfW0k9kXqxGp/pbt5NXnxoht/+A32RvcYQNtvguDTHsxYPpVuLtG Ifx0vJ1mhvvdRjPQHoFhPYXBJduEwZDQ8ZWhiltgujmYdENn7aW4scRVltGMsDp7 fkrWnPd2d4OW6QRTrOciwvQxuBQqqtKSfkijemlsOVq+crjoOFnhUgWKUB0G00xB nhvZOB4wLmJqqaFjv+L3bi0jrc946x36859ajgWxApBbbEj6AwnfZJn0zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5c2RhPFV7Rsqx9rnsRAerGqO5oMB8GA1UdIwQY MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2 LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfA77yGuK WywGLVUNnpy7V4JY+wPEV3/IW2B3m1f3JaaDHYJ0jNQqRg9o/FDQwG6avpBapqH9 r2VWdlnQ4R66AJFkMm5PpA/IDmNGIkzo9KdDB0kRRVWEUBMUktRuvZgs5c3Athv8 L0RYhJXd0Fh2sWq+5kAfkWBNjxRpqs7mJwcgFe6yBp4IO90lnBYlI3Pn438lNT85 bu/xuh9vQZibYdYK69Luu81OxDPePJVa2zbUpc6XIo/m7mDg9WObX66cDG8u6UKD 5p961E7pJmARqzxlptLz/cTh9Tec2ZERmZB0Damo9aFgWQPGt+UaCwge6QtwHZg5 +VpIFVhibcDiGw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:22 2025 by rpki-client