This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: YVUx/ladV8AjT4e57xkznM/5EtRBbL4muQv3J+U0GBU= Subject key identifier: FC:C1:38:8F:11:3A:22:25:23:80:C8:9F:C7:34:0E:EE:F2:F7:9B:02 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019AF31CCFC5AB4FBABC2E66AE393246C9CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 1788 Signing time: Sat 06 Dec 2025 10:02:22 +0000 Manifest this update: Sat 06 Dec 2025 10:02:22 +0000 Manifest next update: Sun 07 Dec 2025 10:02:22 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: 2wevfKGks5M5rkk5FxcpMZaf3pQEqHXmBlj8Sd58Ssk=) 6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 7: fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa (hash: wA10+gQDMIvjO6vwOkogAfMa2WdHrOFvQ0AHKy4MA4g=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: mL_QnkmES7Ov3ibkUj_Ju1RO6CI.roa (hash: fwPdIYfCkvx3HY8NeQ/82nx9w0dYxtQjDyYsjjwSOFs=) 11: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 12: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cf:c5:ab:4f:ba:bc:2e:66:ae:39:32:46:c9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Dec 6 10:02:22 2025 GMT Not After : Dec 7 10:02:22 2025 GMT Subject: CN=fcc1388f113a22252380c89fc7340eeef2f79b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:42:f7:db:4e:a7:8f:31:b0:05:c0:7b:f6: 59:9a:22:2d:e6:b4:4a:26:e2:d2:f9:f0:96:91:2d: 6f:fa:c8:73:a9:a4:e3:03:8c:9b:3f:24:c6:f5:68: 88:bc:1b:be:43:aa:bf:50:c3:67:a7:ff:e3:ad:b0: 4f:3e:31:58:44:ea:ee:bb:b5:c6:54:0a:1c:f2:92: d2:e6:7d:df:9e:3d:85:8c:7b:5c:13:a6:c1:cd:03: 32:e7:a2:2f:af:b2:fb:92:91:19:3d:7b:5a:3d:71: 9b:cb:ec:fb:89:56:ff:db:1a:d6:94:47:f1:c0:4f: c7:68:8a:b0:ac:3d:75:aa:a3:63:7a:a4:53:21:8f: 53:e2:59:9a:b6:ea:8a:b5:84:57:f0:84:29:48:71: 07:76:c0:19:9c:cc:42:37:c2:b3:81:6d:aa:2c:81: 1d:ed:13:68:1f:83:74:09:62:bd:24:ca:24:bd:96: ab:f1:46:33:b2:bb:30:0c:d2:c2:cd:c2:8f:30:49: ed:7c:d7:cf:52:dc:92:46:21:6b:fd:ba:23:19:5c: a5:83:0b:18:65:1b:7c:09:2b:74:9d:b1:46:24:97: ec:55:99:bb:d5:29:2d:ea:c5:c6:a2:d5:b9:99:1d: ce:be:c7:5e:44:1a:75:c8:e2:c7:f1:89:e0:39:3e: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C1:38:8F:11:3A:22:25:23:80:C8:9F:C7:34:0E:EE:F2:F7:9B:02 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:77:dd:a6:91:ea:36:c2:fa:81:da:d1:2e:6c:ea:20:12:fc: ca:98:48:61:7c:df:73:8e:86:68:8f:79:52:7c:5d:30:58:3f: c9:a7:84:85:92:94:b4:ab:58:13:9a:de:41:1b:da:9b:aa:cd: 5f:3f:cf:c4:65:1c:fb:c7:49:58:d4:d4:f3:91:ec:96:d8:db: 6a:ad:bc:42:77:10:62:80:63:ca:ae:e7:4f:db:8d:a8:7f:e7: 6f:af:ea:a2:c6:0b:7f:ed:17:9b:e0:26:ae:ed:ad:5e:d7:de: 11:38:d3:5b:a3:38:ee:6f:a6:89:da:87:a6:06:b6:2f:65:71: 4b:00:f8:6b:45:d7:8f:7b:6d:53:52:4b:92:aa:a3:fd:fc:cf: b2:63:42:87:4b:8a:85:6b:dd:e2:92:e1:c8:7e:2c:09:74:68: 8e:1a:75:46:00:2e:02:84:88:43:f0:88:0c:eb:bb:8c:37:da: 02:da:8e:cd:18:a9:c7:87:b5:aa:1a:e2:ed:46:a9:bf:62:05: d9:ed:63:75:44:aa:68:aa:32:11:4e:f9:1f:d9:73:b3:66:a3: 80:ce:aa:24:a2:89:bc:b5:38:0b:4e:97:f8:94:7f:69:fa:76: 34:4a:43:ee:ec:a8:9a:4a:a4:3a:69:a5:d9:a0:52:1e:e0:30: 33:c7:b6:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHM/Fq0+6vC5mrjkyRsnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUxMjA2MTAwMjIyWhcNMjUxMjA3MTAwMjIyWjAzMTEwLwYDVQQD EyhmY2MxMzg4ZjExM2EyMjI1MjM4MGM4OWZjNzM0MGVlZWYyZjc5YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr5C99tOp48xsAXAe/ZZmiIt5rRK JuLS+fCWkS1v+shzqaTjA4ybPyTG9WiIvBu+Q6q/UMNnp//jrbBPPjFYROruu7XG VAoc8pLS5n3fnj2FjHtcE6bBzQMy56Ivr7L7kpEZPXtaPXGby+z7iVb/2xrWlEfx wE/HaIqwrD11qqNjeqRTIY9T4lmatuqKtYRX8IQpSHEHdsAZnMxCN8KzgW2qLIEd 7RNoH4N0CWK9JMokvZar8UYzsrswDNLCzcKPMEntfNfPUtySRiFr/bojGVylgwsY ZRt8CSt0nbFGJJfsVZm71Skt6sXGotW5mR3OvsdeRBp1yOLH8YngOT5s7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzBOI8ROiIlI4DIn8c0Du7y95sCMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3fdppHq NsL6gdrRLmzqIBL8yphIYXzfc46GaI95UnxdMFg/yaeEhZKUtKtYE5reQRvam6rN Xz/PxGUc+8dJWNTU85Hsltjbaq28QncQYoBjyq7nT9uNqH/nb6/qosYLf+0Xm+Am ru2tXtfeETjTW6M47m+midqHpga2L2VxSwD4a0XXj3ttU1JLkqqj/fzPsmNCh0uK hWvd4pLhyH4sCXRojhp1RgAuAoSIQ/CIDOu7jDfaAtqOzRipx4e1qhri7Uapv2IF 2e1jdUSqaKoyEU75H9lzs2ajgM6qJKKJvLU4C06X+JR/afp2NEpD7uyomkqkOmml 2aBSHuAwM8e2EA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:54 2025 by rpki-client