This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json) Hash identifier: Q3F8Rdy0/MQqIp+UYC2OlMoaNwjo87o58J1dREiiOU4= Subject key identifier: CB:51:BD:D6:16:82:F7:F4:B3:58:BC:86:D3:A7:29:C3:F5:78:78:1C Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47 Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547 Certificate serial: 019AFAD62C1A40D0FBCD55EF6B713B8C8573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft Manifest number: 16D3 Signing time: Sun 07 Dec 2025 22:02:11 +0000 Manifest this update: Sun 07 Dec 2025 22:02:11 +0000 Manifest next update: Mon 08 Dec 2025 22:02:11 +0000 Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: TK/gdAkMF7IMF5Pm5L3qk9Qg4Hy7lsZIn4YlGjZfXY4=) 2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d6:2c:1a:40:d0:fb:cd:55:ef:6b:71:3b:8c:85:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547 Validity Not Before: Dec 7 22:02:11 2025 GMT Not After : Dec 8 22:02:11 2025 GMT Subject: CN=cb51bdd61682f7f4b358bc86d3a729c3f578781c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:d6:99:a3:85:1e:88:8e:30:49:c5:ed:26: 3f:95:5a:6b:15:c3:d7:fe:e0:bd:04:e7:fd:11:85: 89:4a:67:77:ad:f5:b0:ca:ad:b8:5f:1f:54:2c:32: 1a:09:b1:4a:d8:d4:9a:cd:97:4e:4c:96:6b:fb:c8: 23:c5:d1:40:98:c5:0e:e0:9f:ad:10:7c:cf:6c:23: 2f:db:e3:56:92:c1:83:c0:bd:e5:75:a4:52:5c:b7: 8a:92:01:12:45:d3:3c:6b:e1:f5:62:70:db:3b:38: db:f6:de:ea:05:93:5c:80:66:66:4e:69:c9:3d:61: 2c:a9:6e:a2:eb:80:ff:4f:24:a5:75:59:56:1b:7d: 4e:ac:79:34:46:d2:4a:37:bb:4a:0c:2b:23:02:11: 47:58:fa:c3:02:f1:ef:e9:71:0f:c4:70:a8:e0:ea: a9:92:bc:98:6c:50:5f:6b:c4:25:30:83:53:c5:91: 6c:0a:8d:cb:d3:a3:6f:8c:4b:e3:d7:95:4b:03:51: db:57:8f:b2:e8:f5:d5:ff:3b:09:c4:83:10:29:25: 5b:1d:77:fe:6c:86:d6:f1:63:de:d2:1f:3a:aa:2b: 38:87:89:bc:bc:1b:5f:a6:f1:96:0f:7b:19:f4:e5: 83:80:49:9d:01:8d:a4:6d:59:eb:ec:8c:52:df:61: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:51:BD:D6:16:82:F7:F4:B3:58:BC:86:D3:A7:29:C3:F5:78:78:1C X509v3 Authority Key Identifier: keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:63:67:f0:d5:19:a9:3d:02:25:54:84:6e:c3:11:fe:df: 90:2d:57:df:f5:a6:f9:ed:26:ab:a7:60:1c:b2:96:27:41:d0: f1:d2:b0:59:fa:b2:c9:8e:67:04:74:ad:cf:02:ee:cb:04:d5: c9:84:81:1b:b5:cd:42:60:ed:b1:b6:39:c4:9b:5b:75:93:39: 48:f7:55:d1:0b:b7:1f:d6:fd:9f:d5:51:b2:49:f1:05:0d:1c: e0:39:7c:0b:c4:26:c4:51:ea:49:ef:f6:ad:81:ec:d9:76:2c: 7d:a7:5a:48:fe:7d:ba:49:2d:90:d3:00:eb:a6:87:eb:5c:b2: 7a:db:62:ee:6a:64:72:b3:e5:c7:a3:27:82:24:07:90:31:37: 84:ff:b3:1a:04:19:9d:e0:53:99:a9:8a:2b:87:54:64:ea:00: a6:f7:2b:17:c8:52:d4:28:a8:39:d7:db:aa:12:0c:12:bf:16: 32:06:84:d9:73:74:d2:54:18:a1:cf:45:69:95:1a:ce:9f:4f: 8b:81:28:54:24:fb:85:a4:0d:81:72:41:77:04:45:52:7d:02: 09:38:77:9a:1d:e2:cb:ce:f1:9d:97:fe:8b:63:44:81:0b:06: cb:ba:b6:e9:6b:64:63:51:16:ac:cc:36:0c:ef:7e:2b:6d:55: 8e:6e:2a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61iwaQND7zVXva3E7jIVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDMzY2E4M2FmZmJiODAxMTcyZDUwOTRiMDBlMDY4NTZl NmY1NDcwHhcNMjUxMjA3MjIwMjExWhcNMjUxMjA4MjIwMjExWjAzMTEwLwYDVQQD EyhjYjUxYmRkNjE2ODJmN2Y0YjM1OGJjODZkM2E3MjljM2Y1Nzg3ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvXWmaOFHoiOMEnF7SY/lVprFcPX /uC9BOf9EYWJSmd3rfWwyq24Xx9ULDIaCbFK2NSazZdOTJZr+8gjxdFAmMUO4J+t EHzPbCMv2+NWksGDwL3ldaRSXLeKkgESRdM8a+H1YnDbOzjb9t7qBZNcgGZmTmnJ PWEsqW6i64D/TySldVlWG31OrHk0RtJKN7tKDCsjAhFHWPrDAvHv6XEPxHCo4Oqp kryYbFBfa8QlMINTxZFsCo3L06NvjEvj15VLA1HbV4+y6PXV/zsJxIMQKSVbHXf+ bIbW8WPe0h86qis4h4m8vBtfpvGWD3sZ9OWDgEmdAY2kbVnr7IxS32HatQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtRvdYWgvf0s1i8htOnKcP1eHgcMB8GA1UdIwQY MBaAFA3TPKg6/7uAEXLVCUsA4GhW5vVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEt ODkwZWIyMjY2NjU3LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEtODkwZWIyMjY2NjU3 LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBFjZ/DV Gak9AiVUhG7DEf7fkC1X3/Wm+e0mq6dgHLKWJ0HQ8dKwWfqyyY5nBHStzwLuywTV yYSBG7XNQmDtsbY5xJtbdZM5SPdV0Qu3H9b9n9VRsknxBQ0c4Dl8C8QmxFHqSe/2 rYHs2XYsfadaSP59ukktkNMA66aH61yyetti7mpkcrPlx6MngiQHkDE3hP+zGgQZ neBTmamKK4dUZOoApvcrF8hS1CioOdfbqhIMEr8WMgaE2XN00lQYoc9FaZUazp9P i4EoVCT7haQNgXJBdwRFUn0CCTh3mh3iy87xnZf+i2NEgQsGy7q26WtkY1EWrMw2 DO9+K21Vjm4qSg== -----END CERTIFICATE-----Generated at Mon Dec 8 02:54:53 2025 by rpki-client