This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json) Hash identifier: fzwTvOiK7d9PdxjJcepiLqNdUpupuL0CivZwYMv7EF0= Subject key identifier: 79:A6:BD:33:58:6A:45:61:2E:69:5F:B2:4E:53:49:73:54:18:85:E4 Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53 Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53 Certificate serial: 019AF2AD6D6A52A95985E2C6116DF7F1A7F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft Manifest number: 0E8A Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: 3rYS88qSL9JiR17iMUs5uKNZpy/+tiacK2z5D9oJDeU=) 2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6d:6a:52:a9:59:85:e2:c6:11:6d:f7:f1:a7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=79a6bd33586a45612e695fb24e534973541885e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:54:91:a1:41:6b:98:8a:40:aa:a0:ca:b6: 87:b5:ba:24:6c:2b:6e:4e:15:9a:4c:cf:56:cc:cf: 95:46:0e:ec:f4:53:c1:d7:ed:01:b4:ea:33:ba:80: 87:86:e5:22:e8:d5:e1:13:b6:05:26:51:c4:d8:6c: d5:a8:f2:b8:7c:58:80:00:2d:f4:22:e3:b2:d7:ca: 70:3f:35:1b:7c:35:55:7f:ad:46:d8:7f:c9:1a:eb: dc:15:54:71:5b:e6:8b:b9:e6:fd:8c:78:79:56:6a: 4d:72:48:7b:91:69:d3:aa:ac:6c:41:ab:a0:bf:64: ed:81:03:77:b7:ba:3e:d1:5a:1b:60:6b:d2:2f:fb: dd:84:c5:7c:e6:b3:e7:13:c8:53:ce:d2:db:ed:5d: f5:5c:79:07:62:95:3b:2b:4d:cf:db:68:0e:49:22: c8:9f:29:e1:fd:db:ca:d6:02:9f:48:61:d5:9b:28: a9:15:0d:a9:79:19:26:80:71:9d:2d:15:3b:b4:d9: c5:ba:8c:93:8a:c7:ac:fd:88:26:a2:cd:75:0c:5c: 94:68:f3:14:af:0d:e9:be:4c:be:76:86:a6:c3:d7: d4:b9:af:f3:22:a4:ae:b6:f2:ad:8b:85:7d:d7:6b: 39:2c:ca:1e:32:ff:41:b5:cb:5d:28:ab:39:8c:bf: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A6:BD:33:58:6A:45:61:2E:69:5F:B2:4E:53:49:73:54:18:85:E4 X509v3 Authority Key Identifier: keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:8c:b7:b2:f7:81:cf:e5:77:49:bd:ca:8b:9b:1b:ee:ae: 6b:09:9c:23:1e:99:67:b7:7e:73:80:6d:a3:cb:25:7a:56:f3: 8f:56:86:d6:1b:03:19:40:f4:2c:98:9e:7c:5b:6a:d6:50:f7: 17:81:26:8a:d2:85:1b:0d:07:2e:3d:55:5f:e5:f6:eb:3a:b1: 27:d2:2c:f6:d0:e9:e4:01:c6:31:51:e2:7d:09:17:d0:4a:56: dd:fb:f8:68:7e:8e:99:e8:0e:a5:55:cb:a6:7a:a7:fd:dd:e6: 84:53:0a:6f:4f:0e:75:37:1b:bd:d1:66:ae:d1:10:0b:aa:92: 6d:25:c2:fa:6f:c5:9c:21:57:f2:33:a3:58:f3:01:a8:a3:92: 07:4d:bd:1d:db:b9:e4:63:9b:46:e1:ce:e6:d4:2d:54:33:57: c9:28:b3:c7:ee:f9:8d:cb:69:26:4b:61:f1:9f:f4:d6:09:77: a3:23:4b:82:e8:00:e9:11:b1:c7:e6:49:cf:d9:87:23:87:fe: c4:71:d5:12:49:29:b7:9e:e3:52:8d:51:44:b0:31:71:1c:83: fb:74:3e:67:14:6b:b6:59:32:d8:a2:cb:d0:e2:76:27:de:0f: ae:b3:29:2f:10:df:47:cd:bc:13:73:e1:12:89:f5:d1:2c:39: 6d:89:78:a2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrW1qUqlZheLGEW338afzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj M2NmNTMwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg3OWE2YmQzMzU4NmE0NTYxMmU2OTVmYjI0ZTUzNDk3MzU0MTg4NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8RUkaFBa5iKQKqgyraHtbokbCtu ThWaTM9WzM+VRg7s9FPB1+0BtOozuoCHhuUi6NXhE7YFJlHE2GzVqPK4fFiAAC30 IuOy18pwPzUbfDVVf61G2H/JGuvcFVRxW+aLueb9jHh5VmpNckh7kWnTqqxsQaug v2TtgQN3t7o+0VobYGvSL/vdhMV85rPnE8hTztLb7V31XHkHYpU7K03P22gOSSLI nynh/dvK1gKfSGHVmyipFQ2peRkmgHGdLRU7tNnFuoyTises/Ygmos11DFyUaPMU rw3pvky+doamw9fUua/zIqSutvKti4V912s5LMoeMv9BtctdKKs5jL+XzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHmmvTNYakVhLmlfsk5TSXNUGIXkMB8GA1UdIwQY MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0 LTBlYzEyY2ZjZTQyMS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg1Lzk5NWU0Zi1jZDQyLTRkYzktYWUyNC0wZWMxMmNmY2U0 MjEvMS8xLWRkR20tRFp4THFJblQ0Z0pxMkszRUxEejFNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja2M t7L3gc/ld0m9youbG+6uawmcIx6ZZ7d+c4Bto8slelbzj1aG1hsDGUD0LJiefFtq 1lD3F4EmitKFGw0HLj1VX+X26zqxJ9Is9tDp5AHGMVHifQkX0EpW3fv4aH6OmegO pVXLpnqn/d3mhFMKb08OdTcbvdFmrtEQC6qSbSXC+m/FnCFX8jOjWPMBqKOSB029 Hdu55GObRuHO5tQtVDNXySizx+75jctpJkth8Z/01gl3oyNLgugA6RGxx+ZJz9mH I4f+xHHVEkkpt57jUo1RRLAxcRyD+3Q+ZxRrtlky2KLL0OJ2J94PrrMpLxDfR828 E3PhEon10Sw5bYl4og== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:47 2025 by rpki-client