This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json) Hash identifier: QtXle7z/xYpWxd8VfWO3NpFSTzbn5b8OPXXUiAv2zyc= Subject key identifier: F4:5C:DF:7B:58:A5:E0:A6:D1:3F:6F:4C:E7:36:EC:F3:AB:4F:E7:BF Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Certificate serial: 019AF31C2F1AC2FAE98B793019F482F93E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft Manifest number: 1704 Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=) 2: 83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa (hash: n636xUSAEOi83vEHAYmjzOzbkfAcLshDobM/hga+xOE=) 3: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: WbU9Z2f/H78Vk7zwievwvjGrIfcUL7HUbTbGRoIHNeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2f:1a:c2:fa:e9:8b:79:30:19:f4:82:f9:3e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=f45cdf7b58a5e0a6d13f6f4ce736ecf3ab4fe7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:3f:38:8d:36:f7:c3:7f:4c:d3:c5:8f:d9: 34:1d:f6:b7:0a:bf:83:ce:a5:4f:73:dc:ee:8a:c4: 39:a1:7d:79:11:8f:10:4d:34:bb:5d:28:3a:30:cd: f7:ef:93:07:7f:71:79:16:d2:26:6c:c7:1e:2c:90: a3:a4:90:53:78:fb:0e:2c:ba:b0:ce:d9:63:0e:c2: d6:27:51:a0:4e:b7:8e:c6:7f:32:cf:45:d9:58:0f: 0e:58:75:d4:ad:3a:2e:45:9b:1c:c0:03:40:d0:68: f6:02:8a:a1:83:29:2a:a4:8b:cf:31:ba:30:9d:9c: 8c:f3:7d:01:10:2b:8d:49:91:be:03:96:c3:4b:78: 37:db:c9:f7:3e:e0:eb:5c:c0:ce:44:16:d6:0d:55: ce:2a:68:6b:25:b0:d8:20:ac:6b:35:af:6c:92:a4: c3:b8:6a:32:7b:dc:45:b2:39:e0:f8:12:03:69:d0: 3b:c7:cb:7e:b3:3b:25:10:b8:64:ba:88:14:90:03: ae:57:81:36:d4:4d:44:3b:1f:bb:f9:62:a4:6a:10: c5:b2:e2:b9:f7:44:b6:36:35:cd:0b:4c:6e:62:82: b6:a1:7c:22:c7:db:6a:a0:ab:cf:85:c4:db:b5:4f: 01:6a:e9:3f:0c:96:cd:2a:c2:15:e3:e1:93:bd:ed: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5C:DF:7B:58:A5:E0:A6:D1:3F:6F:4C:E7:36:EC:F3:AB:4F:E7:BF X509v3 Authority Key Identifier: keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a3:1f:de:b7:bf:36:36:c0:09:db:c5:c1:99:e7:3b:aa:0f: 64:dc:99:43:b6:40:55:b7:cd:15:8d:21:3a:47:04:68:82:e3: f5:9b:07:6e:d8:7e:e8:69:b5:4d:a2:bc:df:b6:8c:9d:3a:8c: 59:83:87:3d:bc:fe:93:96:d5:38:6e:76:b2:91:09:49:d6:5b: 96:5a:39:df:27:7d:19:9f:49:e8:a5:c4:28:48:36:78:95:ec: 5e:c1:87:c2:b1:5f:27:49:be:d6:64:9d:a0:14:1c:e4:fc:60: d9:4e:64:7c:42:0e:fd:9e:3f:cd:99:d6:66:e5:c2:67:1f:89: 7d:e4:cb:22:b5:9d:13:e1:bb:63:93:c1:d9:b6:85:44:0a:e3: bf:a0:60:53:20:72:4a:67:c4:01:18:81:9e:7f:b0:26:9b:c8: 4e:cc:87:e4:9d:bb:e5:e8:67:c4:a2:5f:6d:eb:4d:ba:0b:1a: 61:d1:85:cd:85:dc:b4:17:46:a8:20:87:c4:00:d7:e6:37:32: 53:07:fa:7b:11:66:35:ea:0e:3f:ab:e6:76:52:8c:3b:39:eb: 65:37:30:f2:af:16:27:42:83:d2:74:d4:ee:cb:aa:66:75:3f: 88:f9:50:f3:0f:3f:27:c7:32:1c:84:3e:ed:c6:bc:47:eb:89: 75:ab:63:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC8awvrpi3kwGfSC+T4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz M2ZjMTIwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD EyhmNDVjZGY3YjU4YTVlMGE2ZDEzZjZmNGNlNzM2ZWNmM2FiNGZlN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B0/OI0298N/TNPFj9k0Hfa3Cr+D zqVPc9zuisQ5oX15EY8QTTS7XSg6MM3375MHf3F5FtImbMceLJCjpJBTePsOLLqw ztljDsLWJ1GgTreOxn8yz0XZWA8OWHXUrTouRZscwANA0Gj2AoqhgykqpIvPMbow nZyM830BECuNSZG+A5bDS3g328n3PuDrXMDORBbWDVXOKmhrJbDYIKxrNa9skqTD uGoye9xFsjng+BIDadA7x8t+szslELhkuogUkAOuV4E21E1EOx+7+WKkahDFsuK5 90S2NjXNC0xuYoK2oXwix9tqoKvPhcTbtU8Bauk/DJbNKsIV4+GTve0ybwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRc33tYpeCm0T9vTOc27POrT+e/MB8GA1UdIwQY MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKMf3re/ NjbACdvFwZnnO6oPZNyZQ7ZAVbfNFY0hOkcEaILj9ZsHbth+6Gm1TaK837aMnTqM WYOHPbz+k5bVOG52spEJSdZbllo53yd9GZ9J6KXEKEg2eJXsXsGHwrFfJ0m+1mSd oBQc5Pxg2U5kfEIO/Z4/zZnWZuXCZx+JfeTLIrWdE+G7Y5PB2baFRArjv6BgUyBy SmfEARiBnn+wJpvITsyH5J275ehnxKJfbetNugsaYdGFzYXctBdGqCCHxADX5jcy Uwf6exFmNeoOP6vmdlKMOznrZTcw8q8WJ0KD0nTU7suqZnU/iPlQ8w8/J8cyHIQ+ 7ca8R+uJdatj3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:14 2025 by rpki-client