This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json) Hash identifier: DkaOOsD60DK3W0KKJt+Arqku/l2ZV5ijI05qAtQx2I0= Subject key identifier: 97:F2:04:93:BF:D0:39:B0:FB:42:73:FF:32:B6:52:19:9C:D7:2A:2D Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Certificate serial: 019B3C7FD4500D4FCFEC73B881F3B582DD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft Manifest number: 172A Signing time: Sat 20 Dec 2025 16:02:48 +0000 Manifest this update: Sat 20 Dec 2025 16:02:48 +0000 Manifest next update: Sun 21 Dec 2025 16:02:48 +0000 Files and hashes: 1: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=) 2: 83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa (hash: n636xUSAEOi83vEHAYmjzOzbkfAcLshDobM/hga+xOE=) 3: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: DcwxIsjQNDAFVfsQpgbDzZDl/d6FHO2QhfOhVU7k2cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:d4:50:0d:4f:cf:ec:73:b8:81:f3:b5:82:dd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Validity Not Before: Dec 20 16:02:48 2025 GMT Not After : Dec 21 16:02:48 2025 GMT Subject: CN=97f20493bfd039b0fb4273ff32b652199cd72a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:57:a2:b0:57:97:6f:b1:c6:98:11:44:cc: b9:d4:4b:4e:b1:e0:f8:67:9b:81:f4:07:9a:40:94: a6:76:5f:51:3a:49:d2:c8:eb:a8:00:cc:21:06:bb: 4e:b8:99:43:dc:00:a4:b5:8b:d3:dd:6d:27:0a:b3: 55:cc:46:73:c9:3d:f2:37:89:58:76:db:76:36:51: 51:1f:b1:d0:e6:53:d3:ba:36:7a:a6:01:3d:7e:8d: 69:7b:ec:18:88:7a:37:ba:ba:1a:3d:3a:a8:98:e2: 6e:7c:f3:95:32:56:c0:bc:47:99:60:44:af:f6:95: c1:ab:ad:b9:0e:b3:69:a9:d0:e1:e5:a8:05:00:c6: d6:aa:73:17:ab:b1:74:52:fa:4a:60:c2:af:3c:00: fc:c2:df:b6:ce:e6:10:d5:be:fa:0b:0f:10:9f:f1: 5e:19:15:b3:14:4a:91:61:54:f1:56:1e:25:d2:1e: 42:f9:86:f2:1a:a0:42:f7:21:b5:54:16:4e:e6:13: 1b:04:ec:14:93:98:6e:9c:f4:89:2b:68:23:37:ff: d5:9d:09:d2:84:6d:96:5c:06:71:21:1f:46:34:a1: 9f:92:92:1c:f1:6b:bb:ae:cc:0d:90:3d:67:3e:97: 87:01:58:e4:a0:29:3f:7e:24:46:5c:68:06:8d:78: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:04:93:BF:D0:39:B0:FB:42:73:FF:32:B6:52:19:9C:D7:2A:2D X509v3 Authority Key Identifier: keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:90:b9:c3:a8:70:dd:49:00:03:74:f6:e3:78:b6:2c:6e:b4: e6:f6:90:22:31:92:26:7d:1a:b8:40:6c:61:6c:2c:3b:14:c2: b9:b7:c0:19:96:06:b6:2a:17:63:d1:68:2e:4a:7e:57:cb:f8: 0e:17:e9:de:f5:ed:a7:66:52:5a:7d:a4:28:e7:3e:6a:f9:8f: 97:b0:79:27:19:b1:8a:75:c8:b1:e8:70:84:61:5c:58:c3:56: 8b:ad:9a:62:e5:de:5c:60:cb:9b:4a:62:4c:16:60:da:c6:14: b1:43:85:39:ee:79:6a:f3:33:2f:ef:83:fe:2d:df:fa:b0:ed: bd:67:50:c0:ea:5d:f1:a0:7c:ad:f3:1d:88:be:fe:c8:33:00: 75:4c:3b:b6:e9:4f:7a:2b:18:c9:05:65:8b:b5:1c:46:df:73: 19:39:8d:cc:f6:c3:19:a7:9a:ed:59:6b:c0:68:a4:8f:20:52: e2:70:08:1d:f9:16:d6:34:2c:e4:58:a3:f2:c2:b9:b3:75:f1: 25:4c:88:25:6e:da:2d:a6:67:15:3b:b0:97:87:30:f1:df:cf: 60:55:74:13:4e:ca:50:61:87:ef:28:57:0a:0c:ab:be:1c:a1: d8:85:66:dd:5d:70:4e:47:4a:01:43:3f:eb:1a:e2:9e:ec:7e: 6e:02:1c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9RQDU/P7HO4gfO1gt1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz M2ZjMTIwHhcNMjUxMjIwMTYwMjQ4WhcNMjUxMjIxMTYwMjQ4WjAzMTEwLwYDVQQD Eyg5N2YyMDQ5M2JmZDAzOWIwZmI0MjczZmYzMmI2NTIxOTljZDcyYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzFXorBXl2+xxpgRRMy51EtOseD4 Z5uB9AeaQJSmdl9ROknSyOuoAMwhBrtOuJlD3ACktYvT3W0nCrNVzEZzyT3yN4lY dtt2NlFRH7HQ5lPTujZ6pgE9fo1pe+wYiHo3uroaPTqomOJufPOVMlbAvEeZYESv 9pXBq625DrNpqdDh5agFAMbWqnMXq7F0UvpKYMKvPAD8wt+2zuYQ1b76Cw8Qn/Fe GRWzFEqRYVTxVh4l0h5C+YbyGqBC9yG1VBZO5hMbBOwUk5hunPSJK2gjN//VnQnS hG2WXAZxIR9GNKGfkpIc8Wu7rswNkD1nPpeHAVjkoCk/fiRGXGgGjXiTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfyBJO/0Dmw+0Jz/zK2Uhmc1yotMB8GA1UdIwQY MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpC5w6hw 3UkAA3T243i2LG605vaQIjGSJn0auEBsYWwsOxTCubfAGZYGtioXY9FoLkp+V8v4 Dhfp3vXtp2ZSWn2kKOc+avmPl7B5JxmxinXIsehwhGFcWMNWi62aYuXeXGDLm0pi TBZg2sYUsUOFOe55avMzL++D/i3f+rDtvWdQwOpd8aB8rfMdiL7+yDMAdUw7tulP eisYyQVli7UcRt9zGTmNzPbDGaea7VlrwGikjyBS4nAIHfkW1jQs5Fij8sK5s3Xx JUyIJW7aLaZnFTuwl4cw8d/PYFV0E07KUGGH7yhXCgyrvhyh2IVm3V1wTkdKAUM/ 6xrinux+bgIcvw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:58:18 2025 by rpki-client