This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json) Hash identifier: DdtmrBhsNfUfJQCNmohsQCRP+1d2qwYHoES18VRleIU= Subject key identifier: E6:AF:0D:08:C6:88:22:8E:A0:77:CE:60:09:34:F8:32:7E:80:D3:19 Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Certificate serial: 019B2364EB3FB16433AFE0BEB3727D082F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft Manifest number: 171D Signing time: Mon 15 Dec 2025 19:02:54 +0000 Manifest this update: Mon 15 Dec 2025 19:02:54 +0000 Manifest next update: Tue 16 Dec 2025 19:02:54 +0000 Files and hashes: 1: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=) 2: 83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa (hash: n636xUSAEOi83vEHAYmjzOzbkfAcLshDobM/hga+xOE=) 3: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: tD1+SdZQhNIFWOBDUmNMG6Ih0OuO7t7LWlL3Wh6HLdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:eb:3f:b1:64:33:af:e0:be:b3:72:7d:08:2f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Validity Not Before: Dec 15 19:02:54 2025 GMT Not After : Dec 16 19:02:54 2025 GMT Subject: CN=e6af0d08c688228ea077ce600934f8327e80d319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:62:8b:b1:d9:26:33:4c:90:22:80:d1:af: f7:23:f0:12:85:27:19:34:62:76:97:08:8a:72:e6: 4d:ed:7a:ab:a2:4b:33:a0:99:ae:32:df:2e:16:75: 4f:7c:3e:7a:25:ea:29:b7:6d:11:62:65:7c:a6:12: c0:49:2b:26:da:07:02:3b:4c:19:85:f6:27:67:f0: b1:51:24:f6:69:d2:d3:37:61:1b:6f:a2:ee:df:0f: da:ad:cc:6c:39:17:09:59:2a:55:aa:24:ec:cf:05: a4:4f:08:74:7c:c5:3b:7b:aa:3c:f4:00:1d:cf:e9: dc:e9:ce:7d:de:25:a7:d9:0d:23:cd:d1:0a:23:14: 9e:a2:d5:ed:5c:13:d1:3b:83:5a:75:18:9c:fe:67: 70:2c:63:0c:49:fc:4b:e9:cf:d8:98:ee:91:49:fc: 42:90:e7:74:5b:74:25:bb:01:91:a4:bd:7d:35:33: d7:72:08:3b:66:8f:f6:22:5d:91:86:88:7d:ea:36: 4d:18:2a:b1:78:32:7a:2b:10:e9:15:44:e7:73:cf: f4:ef:c5:a0:ac:b5:fd:8e:1e:66:ad:33:21:9b:61: 04:0b:50:47:12:1e:f2:85:03:cd:b2:a3:47:f3:db: 39:11:92:9d:5d:3d:8e:c4:0f:2d:50:16:be:b5:9f: a9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AF:0D:08:C6:88:22:8E:A0:77:CE:60:09:34:F8:32:7E:80:D3:19 X509v3 Authority Key Identifier: keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8a:7f:2e:72:4f:c7:fc:60:b6:e3:5c:da:d9:be:c1:14:5a: 6e:4d:ac:1f:b1:17:e5:f1:e4:03:d3:83:0b:14:fa:ce:89:58: 58:c8:ee:e6:43:be:a4:cb:24:60:11:3d:9b:30:8a:5a:05:96: 78:40:87:3b:c1:3f:67:6e:5d:d0:42:c4:a0:04:76:c8:17:59: 9a:8e:59:22:07:71:00:24:64:5f:63:91:3a:3a:5c:17:90:22: 11:86:1b:91:c7:97:b0:c0:32:b8:eb:c2:5e:81:4f:2b:a4:0f: 27:6f:8b:87:4a:18:9b:c1:ad:34:9f:91:15:ef:20:a2:bf:a5: 89:6d:fa:b1:8f:9b:c7:6d:3c:03:c2:0a:54:13:4e:a4:f4:19: 09:25:8d:3b:3a:37:ec:b7:65:9c:af:ca:a7:d3:8b:43:72:51: 6d:ab:b2:a7:69:e0:9d:f8:72:20:c6:29:e6:d0:37:d0:2b:0f: 82:a5:6c:44:67:59:75:b0:49:fc:ce:b4:65:86:b1:26:8e:e0: f1:40:f3:12:02:d1:7c:df:81:97:27:eb:61:09:7c:3b:d8:59: 31:bb:86:7e:89:b1:32:92:25:19:e4:52:55:07:d7:42:42:47: f9:dc:e8:51:6d:52:c9:58:e8:d6:ae:d4:42:dd:38:7a:2c:79: df:5e:d4:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZOs/sWQzr+C+s3J9CC8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz M2ZjMTIwHhcNMjUxMjE1MTkwMjU0WhcNMjUxMjE2MTkwMjU0WjAzMTEwLwYDVQQD EyhlNmFmMGQwOGM2ODgyMjhlYTA3N2NlNjAwOTM0ZjgzMjdlODBkMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW5ii7HZJjNMkCKA0a/3I/AShScZ NGJ2lwiKcuZN7XqrokszoJmuMt8uFnVPfD56Jeopt20RYmV8phLASSsm2gcCO0wZ hfYnZ/CxUST2adLTN2Ebb6Lu3w/arcxsORcJWSpVqiTszwWkTwh0fMU7e6o89AAd z+nc6c593iWn2Q0jzdEKIxSeotXtXBPRO4NadRic/mdwLGMMSfxL6c/YmO6RSfxC kOd0W3QluwGRpL19NTPXcgg7Zo/2Il2Rhoh96jZNGCqxeDJ6KxDpFUTnc8/078Wg rLX9jh5mrTMhm2EEC1BHEh7yhQPNsqNH89s5EZKdXT2OxA8tUBa+tZ+pUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOavDQjGiCKOoHfOYAk0+DJ+gNMZMB8GA1UdIwQY MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYp/LnJP x/xgtuNc2tm+wRRabk2sH7EX5fHkA9ODCxT6zolYWMju5kO+pMskYBE9mzCKWgWW eECHO8E/Z25d0ELEoAR2yBdZmo5ZIgdxACRkX2OROjpcF5AiEYYbkceXsMAyuOvC XoFPK6QPJ2+Lh0oYm8GtNJ+RFe8gor+liW36sY+bx208A8IKVBNOpPQZCSWNOzo3 7LdlnK/Kp9OLQ3JRbauyp2ngnfhyIMYp5tA30CsPgqVsRGdZdbBJ/M60ZYaxJo7g 8UDzEgLRfN+BlyfrYQl8O9hZMbuGfomxMpIlGeRSVQfXQkJH+dzoUW1SyVjo1q7U Qt04eix5317U6Q== -----END CERTIFICATE-----Generated at Tue Dec 16 00:49:37 2025 by rpki-client