This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: 6Z3r8KPx1gJebLceV6Ts2dgd/CWMAiwBlet56YJLLZQ= Subject key identifier: C4:9B:71:DF:0A:0C:DA:C7:02:CA:BE:73:BA:88:1F:3E:90:AC:1C:AE Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B0B924A2AB89EC510629CFC0B6962D279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 179D Signing time: Thu 11 Dec 2025 04:01:35 +0000 Manifest this update: Thu 11 Dec 2025 04:01:35 +0000 Manifest next update: Fri 12 Dec 2025 04:01:35 +0000 Files and hashes: 1: 0-9L8X5MQ2--6AbSQPUOK_Zwbgk.roa (hash: DYsqRIVrVbCBoJlV1gmiCzK3jIqCFwH4WAgRNXzIPK4=) 2: 5F-tkbkrsNzOsOj-9Cj0HyeCuUQ.roa (hash: m1SkmgPesDgE2aChBme8h9g68C9XstjL/ASh0G5sApQ=) 3: 5YHCipVLiFoqapNXFPlwZIwCjpE.roa (hash: sbQ0g1yAhSHTLGyhEZ7Z1KPdhNYk8R5ZHF+38mwJM/I=) 4: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=) 5: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=) 6: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=) 7: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=) 8: IMZsLst-i3zLkfnvqryos4hVmUw.roa (hash: i5YfMzxIGSy0m8WqoPL2plr7dDe0Vlfs7aCvCgRQqk8=) 9: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=) 10: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=) 11: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: f5qtvEyGQI5a2ORTv/dnQ9dmP1TOkumCeziYW4P34+k=) 12: RT2actreI4xxkte646TUz02XjFQ.roa (hash: Wy64shTeipgQtErWNwSOYTNCSt9UxR/a78WDAuspKQ4=) 13: V9Ig1pXUbN50LMFOuKXdZ5mkCig.roa (hash: y87CF5Ma433/41wTDv6chywUFnZfYbGNq95lOWwWnTA=) 14: dNzxn5A-O_IY4kKhDFT54XPWi98.roa (hash: hZGRgazjZI5svcWbSvqeGdQN54JXyQ8NKhSPSs0CGes=) 15: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=) 16: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=) 17: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=) 18: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=) 19: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (hash: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=) 20: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=) 21: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=) 22: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=) 23: tnv3-diJkQUdJyXR_flzLd_HA5Y.roa (hash: Uf/8gng4o6YbR3VFkmo1hJqLTfLAtxb6YspXrR0Enp4=) 24: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:92:4a:2a:b8:9e:c5:10:62:9c:fc:0b:69:62:d2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Dec 11 04:01:35 2025 GMT Not After : Dec 12 04:01:35 2025 GMT Subject: CN=c49b71df0a0cdac702cabe73ba881f3e90ac1cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:c6:ad:27:6a:80:f5:19:c3:2d:0e:86:31: 72:4f:58:9a:e8:41:1d:49:46:ff:fc:bd:a5:c1:cd: 65:cf:07:c3:de:cc:00:cd:69:9e:f0:a5:0e:ea:e0: 76:05:04:27:62:f8:37:e7:a4:34:8b:95:72:65:3a: 05:1f:e1:93:d9:e4:f5:c6:d0:70:de:79:70:99:aa: 0b:4f:b4:a4:07:f8:75:10:d8:5b:53:5b:95:f9:59: 52:ee:88:1c:e9:de:74:6f:72:9d:4d:b0:78:d9:79: a3:62:8a:b7:e3:0d:a8:27:e8:dd:a9:e3:58:bf:8d: 91:f8:c8:82:ab:f6:c5:f0:d1:67:7e:28:ed:1f:d8: 05:59:37:c5:8c:d8:6d:d8:c7:ea:2d:58:86:95:c7: 13:6b:d7:e2:c0:28:ec:f3:f2:3d:22:39:3c:0b:5b: d1:a8:15:48:90:3b:bc:6f:44:04:d9:de:09:8f:66: 82:88:58:bb:05:fb:4e:e3:2a:31:6f:30:1d:2c:7d: 0a:56:bb:6d:53:4e:e3:c6:f8:6b:30:b5:2c:fe:c2: 62:db:0f:2c:bd:05:f4:50:43:49:1d:34:5d:5d:46: 3f:c2:61:c9:7e:f3:9e:c8:24:ee:4b:d9:a4:35:f1: f4:cd:3e:9d:c0:d9:e7:4a:38:ea:0b:4f:42:57:12: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9B:71:DF:0A:0C:DA:C7:02:CA:BE:73:BA:88:1F:3E:90:AC:1C:AE X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:48:5a:c5:af:6d:4f:df:94:0f:9e:b4:af:43:ea:21:38:4d: 33:53:fe:bf:fe:5b:95:e8:fa:d2:ca:97:60:51:92:10:41:ce: 83:0b:a5:aa:f0:c7:09:89:7e:e7:ea:09:05:5d:cf:bc:3f:8d: ca:a5:51:dc:04:09:45:20:3a:36:bf:6e:1b:7e:e2:91:54:8f: de:ec:da:93:2c:1f:02:65:f4:dc:96:98:f6:5e:e8:02:43:51: b5:d5:26:33:d5:be:1b:ae:99:0d:d1:03:00:a5:8f:3d:e9:6b: 19:25:a0:f1:57:c4:67:bf:bb:82:4c:06:9c:8a:4b:04:55:86: 79:49:9b:62:c5:b5:e8:50:01:6b:ba:78:a7:52:64:e4:4d:3c: 79:06:33:3f:17:3a:35:3e:8e:97:eb:8d:92:15:b4:dc:44:93: 2e:cc:64:18:32:f8:7d:e2:3c:ed:db:04:a7:3a:24:c4:ee:89: 7d:d0:fc:9e:ff:b8:70:da:a5:e7:57:b8:a8:af:5e:88:f9:89: 95:4c:59:94:4c:73:45:2c:d3:2d:c3:e7:6e:55:86:62:e5:5b: 3c:8f:64:a3:05:db:7f:f4:5c:0a:2f:a2:bd:63:13:32:1f:dd: b2:b6:36:87:19:bb:b7:7b:04:94:7b:df:bc:95:80:6e:51:1b: 5c:82:ff:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLkkoquJ7FEGKc/AtpYtJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUxMjExMDQwMTM1WhcNMjUxMjEyMDQwMTM1WjAzMTEwLwYDVQQD EyhjNDliNzFkZjBhMGNkYWM3MDJjYWJlNzNiYTg4MWYzZTkwYWMxY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QzGrSdqgPUZwy0OhjFyT1ia6EEd SUb//L2lwc1lzwfD3swAzWme8KUO6uB2BQQnYvg356Q0i5VyZToFH+GT2eT1xtBw 3nlwmaoLT7SkB/h1ENhbU1uV+VlS7ogc6d50b3KdTbB42XmjYoq34w2oJ+jdqeNY v42R+MiCq/bF8NFnfijtH9gFWTfFjNht2MfqLViGlccTa9fiwCjs8/I9Ijk8C1vR qBVIkDu8b0QE2d4Jj2aCiFi7BftO4yoxbzAdLH0KVrttU07jxvhrMLUs/sJi2w8s vQX0UENJHTRdXUY/wmHJfvOeyCTuS9mkNfH0zT6dwNnnSjjqC09CVxJx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSbcd8KDNrHAsq+c7qIHz6QrByuMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEhaxa9t T9+UD560r0PqIThNM1P+v/5blej60sqXYFGSEEHOgwulqvDHCYl+5+oJBV3PvD+N yqVR3AQJRSA6Nr9uG37ikVSP3uzakywfAmX03JaY9l7oAkNRtdUmM9W+G66ZDdED AKWPPelrGSWg8VfEZ7+7gkwGnIpLBFWGeUmbYsW16FABa7p4p1Jk5E08eQYzPxc6 NT6Ol+uNkhW03ESTLsxkGDL4feI87dsEpzokxO6JfdD8nv+4cNql51e4qK9eiPmJ lUxZlExzRSzTLcPnblWGYuVbPI9kowXbf/RcCi+ivWMTMh/dsrY2hxm7t3sElHvf vJWAblEbXIL/mw== -----END CERTIFICATE-----Generated at Thu Dec 11 06:30:32 2025 by rpki-client