This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json) Hash identifier: HuHLrfTVU5/HomrcAM0inPZjG76DRAXLId9KjYRcerc= Subject key identifier: 8B:56:24:8C:19:B4:1E:6B:57:F8:E2:C0:7F:13:9B:CA:75:28:F4:57 Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Certificate serial: 019AF276FCAA1EFCF4A3BFB74955E43C6F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft Manifest number: 0444 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: ZYijjzXNUFA8x4ew6Kkkn5tGL5esyGQQpROlrjIuREc=) 2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fc:aa:1e:fc:f4:a3:bf:b7:49:55:e4:3c:6f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=8b56248c19b41e6b57f8e2c07f139bca7528f457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:ca:bc:cf:e8:c0:cd:37:97:fc:ef:e4:e5: 8c:d9:ca:c2:01:bb:03:7a:67:b4:04:54:6a:85:12: e8:89:37:4e:21:1e:eb:d1:cc:2f:3b:3c:87:8b:3d: e7:32:c2:2b:70:4c:46:ff:5e:41:bb:01:00:4f:e4: 50:5c:f3:32:a0:cb:0d:79:a1:91:c2:93:e1:4f:5f: 33:ab:44:19:3b:1b:f2:64:71:1f:1d:66:7e:19:cc: ef:35:0d:53:aa:84:95:e7:e3:18:27:e9:4c:b8:84: ba:f7:93:42:ab:66:6b:df:79:b0:1e:d7:45:cb:e6: 96:f1:29:02:80:3d:3b:b0:68:a6:eb:69:80:66:ae: 4a:98:05:a2:c7:08:f4:d5:3e:e1:1e:d8:f2:62:3d: 78:47:f0:6b:08:d5:fb:ab:15:b5:e9:7b:61:ce:a8: c0:1a:dc:3f:30:5f:ef:3a:5f:fb:92:9f:8e:8b:c5: e7:a0:8d:3e:ef:fe:32:c6:c7:24:4c:7a:c4:b9:05: 43:7e:88:e4:c7:54:64:5b:b5:45:c9:ba:3a:95:61: 98:ba:6d:e6:44:72:66:eb:ec:54:a4:d1:80:73:2b: 11:bc:dc:8f:db:63:af:d0:12:85:9e:0f:e6:c5:6d: bf:a5:fd:d5:44:a5:37:25:a5:6e:d7:11:08:48:ff: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:24:8C:19:B4:1E:6B:57:F8:E2:C0:7F:13:9B:CA:75:28:F4:57 X509v3 Authority Key Identifier: keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:56:9d:8c:bf:fb:ba:b2:2e:f8:18:52:59:65:1b:7e:ec:15: 70:5d:ce:97:89:74:6f:ee:65:67:0e:0a:df:58:f7:12:ee:05: 9d:a5:0b:be:c0:38:ef:26:ef:f6:af:8c:35:22:a7:cf:4d:53: 90:d1:41:e1:34:6b:af:18:a0:a8:48:16:1c:32:ae:e1:1d:02: 57:06:5a:38:77:7d:e0:f9:7d:31:0b:97:2e:42:01:08:42:d1: f1:79:5d:29:fd:bd:69:6a:2f:28:1a:8c:b3:08:ef:c3:f6:13: d6:fa:de:04:22:ae:cd:3a:21:11:89:98:86:2a:80:b7:99:94: bb:e6:1a:ed:b1:c2:7c:c3:dd:59:9b:6e:43:83:1b:d7:d0:e2: d0:bc:6e:6c:ec:88:49:97:a4:ab:69:5a:9e:4d:ef:93:bf:66: 1a:84:44:cc:d7:13:55:85:11:4e:ef:0d:08:ff:35:b7:ce:1a: de:5a:f8:aa:69:c3:b5:22:39:e1:cd:7e:9b:cc:a4:5e:95:8a: 1e:d7:b9:e5:13:66:f5:ed:77:1b:8b:10:9c:79:bb:52:b1:2d: fe:7c:06:3d:11:69:e2:d3:11:ea:24:97:1d:fe:db:03:81:30: 2d:93:50:49:78:83:aa:89:f4:04:58:d1:bc:e6:73:58:92:cb: 33:9b:f3:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvyqHvz0o7+3SVXkPG8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzlkMDRhZDgzYWFjMWRlNWE5OGNkZjc2MjQwYTk3MzYy YzRhYzYwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD Eyg4YjU2MjQ4YzE5YjQxZTZiNTdmOGUyYzA3ZjEzOWJjYTc1MjhmNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplbKvM/owM03l/zv5OWM2crCAbsD eme0BFRqhRLoiTdOIR7r0cwvOzyHiz3nMsIrcExG/15BuwEAT+RQXPMyoMsNeaGR wpPhT18zq0QZOxvyZHEfHWZ+GczvNQ1TqoSV5+MYJ+lMuIS695NCq2Zr33mwHtdF y+aW8SkCgD07sGim62mAZq5KmAWixwj01T7hHtjyYj14R/BrCNX7qxW16XthzqjA Gtw/MF/vOl/7kp+Oi8XnoI0+7/4yxsckTHrEuQVDfojkx1RkW7VFybo6lWGYum3m RHJm6+xUpNGAcysRvNyP22Ov0BKFng/mxW2/pf3VRKU3JaVu1xEISP+xaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItWJIwZtB5rV/jiwH8Tm8p1KPRXMB8GA1UdIwQY MBaAFAw50ErYOqwd5amM33YkCpc2LErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTkt NDI3NDI5ZmNkNzRjLzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTktNDI3NDI5ZmNkNzRj LzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1adjL/7 urIu+BhSWWUbfuwVcF3Ol4l0b+5lZw4K31j3Eu4FnaULvsA47ybv9q+MNSKnz01T kNFB4TRrrxigqEgWHDKu4R0CVwZaOHd94Pl9MQuXLkIBCELR8XldKf29aWovKBqM swjvw/YT1vreBCKuzTohEYmYhiqAt5mUu+Ya7bHCfMPdWZtuQ4Mb19Di0LxubOyI SZekq2lank3vk79mGoREzNcTVYURTu8NCP81t84a3lr4qmnDtSI54c1+m8ykXpWK Hte55RNm9e13G4sQnHm7UrEt/nwGPRFp4tMR6iSXHf7bA4EwLZNQSXiDqon0BFjR vOZzWJLLM5vz/w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:23 2025 by rpki-client