This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: 4xrbMmA/zKHOlAoOGRxAy8xN+s5CMzEfS5ABBJBMqlQ= Subject key identifier: B6:A3:B6:6A:23:C2:77:BE:B5:9A:21:FB:A7:66:1B:58:CC:90:FB:F9 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019AF465A11605F9E19C859286AE954B3A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1791 Signing time: Sat 06 Dec 2025 16:01:32 +0000 Manifest this update: Sat 06 Dec 2025 16:01:32 +0000 Manifest next update: Sun 07 Dec 2025 16:01:32 +0000 Files and hashes: 1: 0-9L8X5MQ2--6AbSQPUOK_Zwbgk.roa (hash: DYsqRIVrVbCBoJlV1gmiCzK3jIqCFwH4WAgRNXzIPK4=) 2: 5F-tkbkrsNzOsOj-9Cj0HyeCuUQ.roa (hash: m1SkmgPesDgE2aChBme8h9g68C9XstjL/ASh0G5sApQ=) 3: 5YHCipVLiFoqapNXFPlwZIwCjpE.roa (hash: sbQ0g1yAhSHTLGyhEZ7Z1KPdhNYk8R5ZHF+38mwJM/I=) 4: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=) 5: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=) 6: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=) 7: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=) 8: IMZsLst-i3zLkfnvqryos4hVmUw.roa (hash: i5YfMzxIGSy0m8WqoPL2plr7dDe0Vlfs7aCvCgRQqk8=) 9: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=) 10: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=) 11: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: aWtN6NNmXs9WaQyJsuYWBrN7KhhPHz/B5jpfjGrgTjc=) 12: RT2actreI4xxkte646TUz02XjFQ.roa (hash: Wy64shTeipgQtErWNwSOYTNCSt9UxR/a78WDAuspKQ4=) 13: V9Ig1pXUbN50LMFOuKXdZ5mkCig.roa (hash: y87CF5Ma433/41wTDv6chywUFnZfYbGNq95lOWwWnTA=) 14: dNzxn5A-O_IY4kKhDFT54XPWi98.roa (hash: hZGRgazjZI5svcWbSvqeGdQN54JXyQ8NKhSPSs0CGes=) 15: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=) 16: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=) 17: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=) 18: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=) 19: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (hash: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=) 20: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=) 21: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=) 22: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=) 23: tnv3-diJkQUdJyXR_flzLd_HA5Y.roa (hash: Uf/8gng4o6YbR3VFkmo1hJqLTfLAtxb6YspXrR0Enp4=) 24: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a1:16:05:f9:e1:9c:85:92:86:ae:95:4b:3a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Dec 6 16:01:32 2025 GMT Not After : Dec 7 16:01:32 2025 GMT Subject: CN=b6a3b66a23c277beb59a21fba7661b58cc90fbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:02:a3:6a:6f:b6:76:7d:74:a6:05:1f:f7: 4c:80:bf:d9:4e:3c:c9:14:f8:6b:ce:0d:4c:2b:54: 1f:e1:81:42:ad:d8:cb:64:18:66:91:43:c5:e9:12: 36:ef:f2:9d:a9:39:9e:d5:8d:62:4e:f0:79:3e:68: 0f:f4:d8:c8:01:bb:92:81:60:1a:e9:00:41:56:8e: 3a:26:e9:0f:4f:40:7f:07:01:6c:d1:61:4a:78:d8: 96:73:5a:1b:a0:0a:8a:98:bf:f9:7b:d2:8a:72:76: fb:87:69:7c:01:64:9b:66:c6:17:d0:ff:34:56:bb: 21:9e:ca:d4:ac:6f:ff:2d:1c:cd:a5:c0:bd:78:e9: 83:bc:b4:09:dd:7b:2e:f4:0a:c1:4e:f6:c3:7f:18: 8d:0d:10:d1:59:a9:98:76:e9:48:70:db:e1:a4:00: 29:26:34:10:99:03:38:c4:2a:5f:84:1a:df:06:3c: 1a:4a:fe:c7:b0:f5:b6:cb:90:aa:22:31:ac:8f:83: cd:61:16:4e:3c:91:86:1f:4d:16:57:9b:fa:a0:c4: b6:57:51:ea:c9:49:8e:73:c5:cc:a2:c8:38:48:8c: ed:64:07:2e:43:c6:59:42:a3:8c:4b:5a:df:f9:f0: 33:6a:95:e1:9e:87:ce:51:f7:f5:43:63:39:d6:33: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:B6:6A:23:C2:77:BE:B5:9A:21:FB:A7:66:1B:58:CC:90:FB:F9 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:d9:50:06:49:84:b6:71:c3:2e:18:e1:37:19:6e:0e:cb: bc:95:30:b0:d1:f0:01:6b:05:e7:e6:60:35:bd:71:0f:50:f5: 42:43:e0:d8:42:ea:8d:59:00:dc:ff:10:8d:af:04:ce:81:83: ac:59:79:10:5f:0a:04:e5:7f:b3:97:3d:24:45:ed:5b:12:9a: 4b:16:33:fc:40:b2:26:1d:69:7d:14:3a:9d:e6:5c:9f:e2:9b: 21:15:ca:f5:ea:0a:2c:4a:87:31:bf:e5:67:1d:36:26:a2:69: c5:86:ff:df:75:15:21:69:b3:25:61:84:ce:bc:40:35:ed:66: 1b:94:ae:54:f1:ff:3a:3e:78:88:eb:f4:29:2f:0d:f4:98:45: d6:89:d8:5d:ab:81:2d:46:e6:67:95:67:04:7b:c2:c1:0b:e5: 98:2c:c6:e0:9c:c3:56:54:ae:af:7a:ca:ff:c1:f8:10:2e:ac: 9c:8c:24:b8:cf:2a:23:9d:28:c0:11:34:af:7b:0c:6e:17:21: cf:f9:d0:1c:6e:b9:a4:ba:61:fa:0d:a8:6a:6d:92:ae:09:6a: 42:a7:f1:74:6a:a5:64:09:4c:be:b1:b2:54:7c:04:d1:4d:09: 1b:c5:78:89:6b:f5:2f:39:2b:e7:e3:cc:36:3d:d9:51:03:f6: c3:30:d6:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaEWBfnhnIWShq6VSzpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUxMjA2MTYwMTMyWhcNMjUxMjA3MTYwMTMyWjAzMTEwLwYDVQQD EyhiNmEzYjY2YTIzYzI3N2JlYjU5YTIxZmJhNzY2MWI1OGNjOTBmYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2gCo2pvtnZ9dKYFH/dMgL/ZTjzJ FPhrzg1MK1Qf4YFCrdjLZBhmkUPF6RI27/KdqTme1Y1iTvB5PmgP9NjIAbuSgWAa 6QBBVo46JukPT0B/BwFs0WFKeNiWc1oboAqKmL/5e9KKcnb7h2l8AWSbZsYX0P80 VrshnsrUrG//LRzNpcC9eOmDvLQJ3Xsu9ArBTvbDfxiNDRDRWamYdulIcNvhpAAp JjQQmQM4xCpfhBrfBjwaSv7HsPW2y5CqIjGsj4PNYRZOPJGGH00WV5v6oMS2V1Hq yUmOc8XMosg4SIztZAcuQ8ZZQqOMS1rf+fAzapXhnofOUff1Q2M51jN30QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLajtmojwne+tZoh+6dmG1jMkPv5MB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2PZUAZJ hLZxwy4Y4TcZbg7LvJUwsNHwAWsF5+ZgNb1xD1D1QkPg2ELqjVkA3P8Qja8EzoGD rFl5EF8KBOV/s5c9JEXtWxKaSxYz/ECyJh1pfRQ6neZcn+KbIRXK9eoKLEqHMb/l Zx02JqJpxYb/33UVIWmzJWGEzrxANe1mG5SuVPH/Oj54iOv0KS8N9JhF1onYXauB LUbmZ5VnBHvCwQvlmCzG4JzDVlSur3rK/8H4EC6snIwkuM8qI50owBE0r3sMbhch z/nQHG65pLph+g2oam2SrglqQqfxdGqlZAlMvrGyVHwE0U0JG8V4iWv1Lzkr5+PM Nj3ZUQP2wzDWYg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:53 2025 by rpki-client