This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: VJd9hWgTWzsS0WENE7FVfUs6eqkfKf2Jt2+UUSK+l94= Subject key identifier: B8:D1:94:46:9F:D1:D1:E9:22:0C:9A:8C:4D:E6:52:C7:80:FE:E5:EC Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B066C25293CB372A82C4C8FA8FBC111D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 1792 Signing time: Wed 10 Dec 2025 04:01:49 +0000 Manifest this update: Wed 10 Dec 2025 04:01:49 +0000 Manifest next update: Thu 11 Dec 2025 04:01:49 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: 0KnHdxImGTNv7Jz8P3bNjFXtkgtA+508k2tqFowtdOY=) 6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 7: fwV1k52lO0Kl8PKqz6r0ivt-Ecw.roa (hash: wA10+gQDMIvjO6vwOkogAfMa2WdHrOFvQ0AHKy4MA4g=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: mL_QnkmES7Ov3ibkUj_Ju1RO6CI.roa (hash: fwPdIYfCkvx3HY8NeQ/82nx9w0dYxtQjDyYsjjwSOFs=) 11: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 12: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:25:29:3c:b3:72:a8:2c:4c:8f:a8:fb:c1:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Dec 10 04:01:49 2025 GMT Not After : Dec 11 04:01:49 2025 GMT Subject: CN=b8d194469fd1d1e9220c9a8c4de652c780fee5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:57:7b:8f:95:74:ab:e6:3c:66:20:5a:7f: ec:11:77:d5:3a:a5:2a:f9:f5:b8:48:8b:61:90:84: 22:ca:23:73:ff:be:5b:0e:16:e2:8a:43:ff:7a:80: de:9c:8d:a2:7b:8b:f0:98:07:b4:3b:d0:9e:e8:be: ae:3e:87:1c:c0:52:d9:25:c9:a5:74:5a:ff:f6:ff: 34:1f:bb:fc:a2:dc:76:12:c8:0f:9d:17:ed:ad:5a: ea:33:fb:27:ea:49:f0:43:b2:a2:46:e4:72:f9:56: 06:dc:29:15:02:29:15:3b:8a:65:53:4b:c0:2c:f0: ae:48:76:86:66:d3:ed:77:a1:f9:83:21:9b:32:30: e9:71:d3:23:29:c3:1a:58:0d:2d:1a:dc:98:70:dd: 12:f1:85:b7:e1:9f:30:44:48:6a:aa:94:c6:e8:7d: 03:37:5a:87:46:92:f1:ea:b4:aa:85:c0:55:ab:42: 39:88:18:f3:d9:ef:3d:45:56:56:48:a0:1f:4f:23: e1:62:58:62:f1:aa:1d:71:aa:4f:18:80:b0:97:07: 4b:47:e1:59:f2:aa:5d:bd:79:01:be:0e:38:8d:fa: d5:94:8e:ff:50:49:cc:eb:33:79:38:1f:3e:30:11: c6:c4:7a:94:27:e9:40:56:21:32:a3:5a:ed:ff:ac: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:94:46:9F:D1:D1:E9:22:0C:9A:8C:4D:E6:52:C7:80:FE:E5:EC X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3d:77:a3:7b:35:36:e4:13:01:4a:2b:72:a4:16:62:8f:48: f5:31:9c:44:cd:38:8c:42:0a:10:eb:6a:8b:7f:dd:36:73:56: 39:8e:61:64:ac:b8:74:da:25:34:0b:b1:31:a8:de:98:60:cd: ea:e4:c4:c4:33:71:9f:36:54:b1:30:d3:3b:de:c7:c0:f3:da: 89:b7:32:f9:58:c6:79:24:c4:1f:ab:2e:e8:71:9c:e7:21:83: 3e:7f:df:86:21:d3:7e:b4:c9:3d:23:bf:e8:17:e4:24:ec:78: 91:fc:e7:2b:83:66:8b:1c:a3:d4:29:62:48:0e:dc:46:2c:e9: d1:05:8e:91:89:fd:ea:f4:01:2d:05:f2:51:45:c9:a3:3f:02: 36:73:2e:86:2a:6d:ed:aa:c4:69:4d:29:ae:44:8c:e9:59:f5: aa:94:9e:cd:49:04:ac:83:ed:25:4e:cf:ff:fd:d3:ae:98:87: 80:6d:c9:b7:cc:8d:54:d2:f0:6b:d0:cd:e5:40:c2:58:d9:bb: 52:61:43:64:c3:93:ff:df:92:fe:4b:67:2c:80:fb:d5:a1:9e: 28:15:40:bc:29:8d:c5:84:58:9b:57:a6:9a:eb:d3:43:6a:a6: a7:8b:2a:15:07:02:9c:d3:57:a2:20:a3:4e:a0:a8:e3:df:cd: ec:ed:e1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbCUpPLNyqCxMj6j7wRHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUxMjEwMDQwMTQ5WhcNMjUxMjExMDQwMTQ5WjAzMTEwLwYDVQQD EyhiOGQxOTQ0NjlmZDFkMWU5MjIwYzlhOGM0ZGU2NTJjNzgwZmVlNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnRXe4+VdKvmPGYgWn/sEXfVOqUq +fW4SIthkIQiyiNz/75bDhbiikP/eoDenI2ie4vwmAe0O9Ce6L6uPoccwFLZJcml dFr/9v80H7v8otx2EsgPnRftrVrqM/sn6knwQ7KiRuRy+VYG3CkVAikVO4plU0vA LPCuSHaGZtPtd6H5gyGbMjDpcdMjKcMaWA0tGtyYcN0S8YW34Z8wREhqqpTG6H0D N1qHRpLx6rSqhcBVq0I5iBjz2e89RVZWSKAfTyPhYlhi8aodcapPGICwlwdLR+FZ 8qpdvXkBvg44jfrVlI7/UEnM6zN5OB8+MBHGxHqUJ+lAViEyo1rt/6ymcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjRlEaf0dHpIgyajE3mUseA/uXsMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj13o3s1 NuQTAUorcqQWYo9I9TGcRM04jEIKEOtqi3/dNnNWOY5hZKy4dNolNAuxMajemGDN 6uTExDNxnzZUsTDTO97HwPPaibcy+VjGeSTEH6su6HGc5yGDPn/fhiHTfrTJPSO/ 6BfkJOx4kfznK4Nmixyj1CliSA7cRizp0QWOkYn96vQBLQXyUUXJoz8CNnMuhipt 7arEaU0prkSM6Vn1qpSezUkErIPtJU7P//3TrpiHgG3Jt8yNVNLwa9DN5UDCWNm7 UmFDZMOT/9+S/ktnLID71aGeKBVAvCmNxYRYm1emmuvTQ2qmp4sqFQcCnNNXoiCj TqCo49/N7O3h1g== -----END CERTIFICATE-----Generated at Wed Dec 10 11:06:50 2025 by rpki-client