This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json) Hash identifier: NoK/CjFxH46PdvUWH1U6NHvzYggmunCd0Ymm4dRApsY= Subject key identifier: 80:FC:1C:61:B5:68:7F:AC:E2:95:DD:3D:A0:2E:07:A9:B0:3C:F7:09 Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Certificate serial: 019B30E844FAA0DDFF92906C2E2072DF16CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft Manifest number: 1490 Signing time: Thu 18 Dec 2025 10:01:26 +0000 Manifest this update: Thu 18 Dec 2025 10:01:26 +0000 Manifest next update: Fri 19 Dec 2025 10:01:26 +0000 Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=) 2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: 1veCnVOlpQsKuCJM0204Ct9IFJ3NQEB0CAPyHwrdPVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:44:fa:a0:dd:ff:92:90:6c:2e:20:72:df:16:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Validity Not Before: Dec 18 10:01:26 2025 GMT Not After : Dec 19 10:01:26 2025 GMT Subject: CN=80fc1c61b5687face295dd3da02e07a9b03cf709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:17:4e:d0:d3:09:19:79:ca:fc:d8:55:82: 57:55:43:92:46:0a:9a:5a:c6:4f:af:06:73:19:84: 85:22:4d:93:a4:9b:65:dc:2b:11:98:62:16:a5:4e: 28:c2:1e:14:d5:a5:3a:92:a9:b6:3d:03:c9:fd:5b: 6e:9f:6e:d1:b9:12:12:83:50:6a:77:8b:e8:f8:30: cb:73:aa:34:c6:76:09:47:08:82:d0:5a:57:44:22: 49:27:d8:87:a9:85:60:f1:8c:45:cc:aa:9d:02:64: 74:f9:59:5e:69:af:7e:41:69:a5:dd:40:69:f5:c2: b4:33:bd:4d:c0:4f:0d:85:28:6e:dd:71:97:38:55: 87:f0:0e:bf:d5:c3:c9:f2:02:70:11:4e:8b:6d:b1: 88:5b:ed:84:e0:2d:a5:00:46:ef:57:78:74:f2:dd: 25:a5:9e:b0:a4:43:77:17:f5:93:2e:12:f7:42:45: 17:8d:3f:9f:dd:04:7b:dd:b4:13:00:38:b0:d0:64: 9d:08:85:8e:f9:a7:78:78:7d:23:73:fe:16:4c:e5: 41:ec:78:3f:a7:1a:66:c4:e2:d7:6c:a0:2f:23:31: cc:50:d7:9f:f9:b9:b1:f5:41:1c:31:43:04:b6:41: 3c:a4:92:51:e5:0d:a0:e7:35:27:db:09:4a:9f:5d: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:1C:61:B5:68:7F:AC:E2:95:DD:3D:A0:2E:07:A9:B0:3C:F7:09 X509v3 Authority Key Identifier: keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:54:65:fe:e3:74:cc:93:e9:75:4a:35:59:d8:0c:a6:56:73: f0:49:3c:9f:5c:ba:c9:c5:8e:24:46:c7:ef:53:49:e4:12:b7: ba:96:f6:d3:a3:dd:5b:b6:cd:c8:df:c1:fd:60:1f:e2:4e:f6: bc:fd:2a:1c:df:d7:3f:90:80:1f:4a:28:05:85:9f:8a:d9:8e: aa:f7:3f:44:e6:8a:9d:fb:58:58:70:71:2a:d9:22:7f:e0:cd: 1f:3f:8b:10:d1:1c:a0:82:4e:d3:14:73:47:47:ed:9b:a6:40: 67:3a:05:b9:3b:47:2b:f1:5e:b3:b2:b9:e4:a3:b3:6d:6a:85: 8f:98:59:01:84:a6:4f:ea:c7:da:a1:50:ce:3e:13:d6:c2:fb: 09:45:ae:d7:be:fb:06:6b:8f:8d:d2:7f:eb:30:53:16:6a:d9: e3:92:1e:0c:da:91:05:a2:99:65:c4:a7:aa:b6:21:8b:ef:3d: 81:b4:ee:5d:17:e2:5e:b4:f9:cc:01:0c:eb:8a:bb:15:87:08: 18:d9:7d:3f:01:77:cb:57:d8:39:96:87:af:6e:cb:11:59:65: 7a:c8:70:75:d6:a6:b4:09:a0:4d:f5:f8:e7:8c:46:40:51:6d: 83:a1:b5:15:77:32:aa:c3:9d:20:46:cc:83:3c:a9:0f:81:24: 6f:ef:a3:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ET6oN3/kpBsLiBy3xbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm NzdjZDcwHhcNMjUxMjE4MTAwMTI2WhcNMjUxMjE5MTAwMTI2WjAzMTEwLwYDVQQD Eyg4MGZjMWM2MWI1Njg3ZmFjZTI5NWRkM2RhMDJlMDdhOWIwM2NmNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJkXTtDTCRl5yvzYVYJXVUOSRgqa WsZPrwZzGYSFIk2TpJtl3CsRmGIWpU4owh4U1aU6kqm2PQPJ/Vtun27RuRISg1Bq d4vo+DDLc6o0xnYJRwiC0FpXRCJJJ9iHqYVg8YxFzKqdAmR0+Vleaa9+QWml3UBp 9cK0M71NwE8NhShu3XGXOFWH8A6/1cPJ8gJwEU6LbbGIW+2E4C2lAEbvV3h08t0l pZ6wpEN3F/WTLhL3QkUXjT+f3QR73bQTADiw0GSdCIWO+ad4eH0jc/4WTOVB7Hg/ pxpmxOLXbKAvIzHMUNef+bmx9UEcMUMEtkE8pJJR5Q2g5zUn2wlKn13xDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID8HGG1aH+s4pXdPaAuB6mwPPcJMB8GA1UdIwQY MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2 LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1Rl/uN0 zJPpdUo1WdgMplZz8Ek8n1y6ycWOJEbH71NJ5BK3upb206PdW7bNyN/B/WAf4k72 vP0qHN/XP5CAH0ooBYWfitmOqvc/ROaKnftYWHBxKtkif+DNHz+LENEcoIJO0xRz R0ftm6ZAZzoFuTtHK/Fes7K55KOzbWqFj5hZAYSmT+rH2qFQzj4T1sL7CUWu1777 BmuPjdJ/6zBTFmrZ45IeDNqRBaKZZcSnqrYhi+89gbTuXRfiXrT5zAEM64q7FYcI GNl9PwF3y1fYOZaHr27LEVlleshwddamtAmgTfX454xGQFFtg6G1FXcyqsOdIEbM gzypD4Ekb++jQw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:54:45 2025 by rpki-client