This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json) Hash identifier: 1rP4ZWiqdf5aEupCi14jMnt8zjvERW+CbHsWq+UAT94= Subject key identifier: 4B:9C:40:2A:EA:10:29:1E:28:2B:CE:5F:A4:6D:23:1A:A9:49:55:B1 Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d Certificate serial: 019AF38A04140DCAA3BC2236A2C8FFCC3236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft Manifest number: 0D76 Signing time: Sat 06 Dec 2025 12:01:39 +0000 Manifest this update: Sat 06 Dec 2025 12:01:39 +0000 Manifest next update: Sun 07 Dec 2025 12:01:39 +0000 Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: cQCGfxSmOZvQA5amAxuUlRhV+K6E5VqcVE281kEDXG8=) 2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:04:14:0d:ca:a3:bc:22:36:a2:c8:ff:cc:32:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d Validity Not Before: Dec 6 12:01:39 2025 GMT Not After : Dec 7 12:01:39 2025 GMT Subject: CN=4b9c402aea10291e282bce5fa46d231aa94955b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:44:55:fc:97:03:8c:b3:6b:ab:ba:c1:72: c3:9a:ae:93:15:9d:c8:15:28:41:44:50:28:b0:5e: c5:ac:a3:6e:10:b0:b9:c7:93:e7:4d:49:39:07:ac: 2a:2b:ec:a5:e4:cd:fe:4c:58:42:a0:30:ad:cc:04: a1:27:54:60:e7:27:20:09:b9:47:98:39:bc:41:2d: 08:80:24:c7:a4:03:94:a9:92:a9:ad:5a:ae:c5:3f: 4a:06:d4:1a:be:a1:e1:f0:24:67:ca:de:af:9e:98: d9:62:f6:3a:17:02:0a:09:e8:a1:96:97:ea:db:ba: 5f:d6:e2:ce:ed:8f:64:3a:a7:a8:ba:a5:b9:15:09: bb:8b:e5:08:01:82:15:96:4b:d5:60:8f:1c:87:8e: b9:57:a8:e9:e7:ff:61:e3:32:2a:2b:55:af:b6:d0: d1:7e:2f:b6:b6:48:28:aa:22:22:2d:bf:63:6b:cb: e8:f0:37:9a:f7:f9:29:d5:a3:d4:ee:c6:77:50:92: b3:6d:a6:c3:4a:55:ad:d6:a3:8f:15:6b:a5:03:ad: 3e:ae:31:c3:90:1c:3b:48:7e:ac:69:1d:9b:8a:90: ca:b1:29:f6:3d:3e:e1:da:50:f2:3f:21:67:83:63: 70:aa:e4:38:54:c0:36:8e:c9:69:3d:da:58:04:34: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:40:2A:EA:10:29:1E:28:2B:CE:5F:A4:6D:23:1A:A9:49:55:B1 X509v3 Authority Key Identifier: keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e3:c9:94:82:dd:48:c1:12:7f:49:b6:1b:00:de:bd:4b:51: 22:06:35:36:73:29:92:0d:6e:de:f4:10:76:96:68:7c:f7:8b: 6a:55:5b:5f:a8:8e:81:14:1a:b2:3b:64:0f:e6:4d:34:ac:c2: 78:08:1e:f1:29:55:76:e6:ad:0e:0a:aa:a9:1d:67:3a:6f:f3: de:e0:c4:79:60:d1:30:c7:37:92:26:e7:da:d6:b4:9b:ae:db: 7b:87:57:35:00:91:fe:30:80:c5:0f:21:ef:c7:79:7d:a2:33: 62:19:47:63:a1:69:5b:66:83:5f:a9:f9:c7:23:48:a0:9c:a1: f2:9a:7d:d8:57:42:43:cf:3d:dc:58:4c:f6:de:59:f8:af:dc: 3d:62:e6:f8:45:b4:f8:fd:7d:45:f6:7f:d4:fd:03:57:f0:36: 31:99:fa:2c:e9:a3:64:37:95:a2:66:0b:7c:dd:01:db:84:86: 2c:f7:e3:28:95:d2:bc:b6:45:74:59:b6:b5:50:b3:f9:98:c1: 29:8b:a5:ab:24:af:8e:7a:ce:35:d8:2d:ad:13:24:d6:68:b6: 29:55:c7:66:b1:b4:90:18:20:af:f9:99:76:8e:61:6e:79:e5: 9a:c3:9e:0f:6e:7b:a2:41:3a:1a:3b:ca:50:95:fe:3b:d2:76: 81:1f:da:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigQUDcqjvCI2osj/zDI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw N2FjN2QwHhcNMjUxMjA2MTIwMTM5WhcNMjUxMjA3MTIwMTM5WjAzMTEwLwYDVQQD Eyg0YjljNDAyYWVhMTAyOTFlMjgyYmNlNWZhNDZkMjMxYWE5NDk1NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUVEVfyXA4yza6u6wXLDmq6TFZ3I FShBRFAosF7FrKNuELC5x5PnTUk5B6wqK+yl5M3+TFhCoDCtzAShJ1Rg5ycgCblH mDm8QS0IgCTHpAOUqZKprVquxT9KBtQavqHh8CRnyt6vnpjZYvY6FwIKCeihlpfq 27pf1uLO7Y9kOqeouqW5FQm7i+UIAYIVlkvVYI8ch465V6jp5/9h4zIqK1WvttDR fi+2tkgoqiIiLb9ja8vo8Dea9/kp1aPU7sZ3UJKzbabDSlWt1qOPFWulA60+rjHD kBw7SH6saR2bipDKsSn2PT7h2lDyPyFng2NwquQ4VMA2jslpPdpYBDQgIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEucQCrqECkeKCvOX6RtIxqpSVWxMB8GA1UdIwQY MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1 LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOPJlILd SMESf0m2GwDevUtRIgY1NnMpkg1u3vQQdpZofPeLalVbX6iOgRQasjtkD+ZNNKzC eAge8SlVduatDgqqqR1nOm/z3uDEeWDRMMc3kibn2ta0m67be4dXNQCR/jCAxQ8h 78d5faIzYhlHY6FpW2aDX6n5xyNIoJyh8pp92FdCQ8893FhM9t5Z+K/cPWLm+EW0 +P19RfZ/1P0DV/A2MZn6LOmjZDeVomYLfN0B24SGLPfjKJXSvLZFdFm2tVCz+ZjB KYulqySvjnrONdgtrRMk1mi2KVXHZrG0kBggr/mZdo5hbnnlmsOeD257okE6GjvK UJX+O9J2gR/a5g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:44 2025 by rpki-client