This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json) Hash identifier: FtcUxj96a3piYp53TLDrWLA2YmaLQcR5sYpbLfwsKpQ= Subject key identifier: F0:38:5C:48:D1:32:24:45:EB:E4:12:CD:0E:DF:9F:62:06:34:D4:D6 Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0 Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0 Certificate serial: 019AF208C45413577E87990F475B1046D888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft Manifest number: 0DE5 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (hash: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=) 2: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: jaUemcQRyO/VkwQynh7AvGeXOwVrcQBYj8EI6ExhVO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c4:54:13:57:7e:87:99:0f:47:5b:10:46:d8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=f0385c48d1322445ebe412cd0edf9f620634d4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:21:aa:b1:20:92:22:03:0c:5b:b3:90:ce: 0c:b2:1f:de:27:65:a9:f5:d5:5e:72:cd:4d:82:5a: 82:d3:e2:3c:cb:f8:27:6c:6a:c2:90:09:45:00:ec: 4e:d8:31:bc:55:2a:4a:6c:e5:e7:9a:c2:af:ac:c5: f5:56:2e:ff:4b:07:0b:1f:5e:d9:f2:4f:97:f0:84: 38:76:68:ec:db:09:4c:6d:63:01:fb:eb:ee:e8:da: 57:44:a3:5b:0f:35:2e:72:cf:a7:99:65:64:45:02: 23:fd:c9:fa:71:dc:da:a4:56:62:60:a8:f9:08:e3: d2:58:36:25:3e:0d:d9:86:59:72:8f:26:d5:67:d1: 9f:71:08:ef:ce:1e:05:02:1c:8f:97:07:b3:5e:60: a6:d7:6e:00:26:eb:d6:5a:07:29:a3:ac:cd:d1:b0: a0:20:c5:26:ad:1d:59:41:ae:d2:72:7d:d0:b1:1a: f0:b6:76:1c:dc:88:81:7d:0b:77:b5:f0:07:b2:c4: 31:b4:30:b0:6d:6e:5c:76:e9:3e:59:9e:f5:3d:b2: 81:db:7b:2d:45:80:a4:38:b4:ac:c9:65:dd:fd:c4: 08:97:25:1e:30:c8:c3:f0:29:ef:a9:df:8e:a5:13: ed:db:b2:b7:27:35:01:96:c4:b6:4d:e3:2f:33:04: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:5C:48:D1:32:24:45:EB:E4:12:CD:0E:DF:9F:62:06:34:D4:D6 X509v3 Authority Key Identifier: keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9e:bf:21:9c:47:7c:bd:a6:d2:08:db:78:9c:c1:c4:12:b9: 79:ca:4a:5d:71:49:28:74:13:21:f5:6c:d8:5d:9d:fd:da:2e: d6:84:2c:c7:10:58:0f:7a:61:01:51:bf:81:c1:1d:1b:a9:9d: b3:6f:8e:74:bc:d2:70:d5:55:72:95:91:c0:9a:35:0d:7a:d7: 00:d1:7c:d9:77:d6:a3:4e:61:89:fa:3a:e5:2c:05:7f:f5:42: 05:26:79:7d:1a:89:37:02:09:b1:59:f2:79:66:f3:4d:09:3f: 75:7d:9d:b3:c9:d0:13:e9:be:f3:20:01:42:e7:c8:34:90:af: 95:a0:7a:53:56:8c:26:6a:e2:a5:36:ed:5e:e8:1a:a0:fc:ef: 12:be:26:1c:42:d6:3e:93:37:95:ad:77:3c:1b:7a:77:e0:56: ac:3d:dd:eb:64:4b:c7:e7:74:d0:53:fa:f0:32:25:74:48:fa: b4:ce:54:c7:e8:90:38:3d:47:d6:dc:bf:6b:76:5d:b2:e4:ce: 0b:23:92:b9:b5:2d:1c:89:99:2a:be:34:f2:9c:fd:db:3d:01: 9e:63:30:6c:e8:b2:49:53:15:15:9f:60:53:3d:ad:ac:39:15: 49:1a:28:35:4c:e4:52:d3:9c:30:ee:aa:8d:15:99:8b:e9:e5: d0:04:6c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMRUE1d+h5kPR1sQRtiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZTQ1ZmQ2ZmQzZDkzMjY4NGMwYzViYzI3ZjRmYTYxNWEx MDkwZTAwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD EyhmMDM4NWM0OGQxMzIyNDQ1ZWJlNDEyY2QwZWRmOWY2MjA2MzRkNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22shqrEgkiIDDFuzkM4Msh/eJ2Wp 9dVecs1NglqC0+I8y/gnbGrCkAlFAOxO2DG8VSpKbOXnmsKvrMX1Vi7/SwcLH17Z 8k+X8IQ4dmjs2wlMbWMB++vu6NpXRKNbDzUucs+nmWVkRQIj/cn6cdzapFZiYKj5 COPSWDYlPg3ZhllyjybVZ9GfcQjvzh4FAhyPlwezXmCm124AJuvWWgcpo6zN0bCg IMUmrR1ZQa7Scn3QsRrwtnYc3IiBfQt3tfAHssQxtDCwbW5cduk+WZ71PbKB23st RYCkOLSsyWXd/cQIlyUeMMjD8Cnvqd+OpRPt27K3JzUBlsS2TeMvMwRR/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA4XEjRMiRF6+QSzQ7fn2IGNNTWMB8GA1UdIwQY MBaAFPzkX9b9PZMmhMDFvCf0+mFaEJDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2Ut MzY4NTBkZjRlOTk3LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2UtMzY4NTBkZjRlOTk3 LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ6/IZxH fL2m0gjbeJzBxBK5ecpKXXFJKHQTIfVs2F2d/dou1oQsxxBYD3phAVG/gcEdG6md s2+OdLzScNVVcpWRwJo1DXrXANF82XfWo05hifo65SwFf/VCBSZ5fRqJNwIJsVny eWbzTQk/dX2ds8nQE+m+8yABQufINJCvlaB6U1aMJmripTbtXugaoPzvEr4mHELW PpM3la13PBt6d+BWrD3d62RLx+d00FP68DIldEj6tM5Ux+iQOD1H1ty/a3ZdsuTO CyOSubUtHImZKr408pz92z0BnmMwbOiySVMVFZ9gUz2trDkVSRooNUzkUtOcMO6q jRWZi+nl0ARs3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:50 2025 by rpki-client