This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json) Hash identifier: fu/psO/Fps+LKwJD2E/Epb9A21aYOK4mOC0AR4J+p/Y= Subject key identifier: 20:26:E7:71:71:2B:D7:3E:B3:1F:2C:52:89:EB:6B:3E:50:FC:09:B3 Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0 Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0 Certificate serial: 019AF3F753FD21DC40195122B16B56C07868 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:01:03 +0000 Manifest this update: Sat 06 Dec 2025 14:01:03 +0000 Manifest next update: Sun 07 Dec 2025 14:01:03 +0000 Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: iFM1s55VToFJ48bH9G7Oq8tjsksmMAL/+g0A32dRnCo=) 2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:53:fd:21:dc:40:19:51:22:b1:6b:56:c0:78:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0 Validity Not Before: Dec 6 14:01:03 2025 GMT Not After : Dec 7 14:01:03 2025 GMT Subject: CN=2026e771712bd73eb31f2c5289eb6b3e50fc09b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:f5:7d:c1:70:5f:ef:3f:fa:c4:16:83:b0: 2d:3a:a4:80:02:33:85:85:c1:a4:bd:18:a3:3c:05: 98:ac:c0:90:b1:4f:94:57:1a:f3:b1:aa:50:3f:4d: ae:0b:25:64:7d:41:e0:d6:b4:52:81:fd:c8:b3:3f: f2:3f:a4:b3:72:cd:48:63:a3:33:09:ef:08:be:20: ad:04:2d:f4:4d:61:62:75:3e:fe:f3:e6:ae:5c:2d: 41:e9:ac:a4:fc:f4:a4:45:7c:2a:77:c4:70:af:cb: 0e:a3:cc:5a:a7:82:a8:07:07:3f:3e:83:66:33:b7: 06:db:c4:8d:0e:bf:35:db:9e:ab:b9:79:f9:5a:42: 95:42:13:b0:dc:a8:46:3a:99:c0:a7:49:35:46:96: d7:91:87:12:e3:1d:e6:42:76:0a:8b:0e:5c:8f:d1: 38:56:78:b0:dc:51:7f:22:d6:be:42:75:f1:3b:2a: 2e:c2:52:60:54:1c:76:4e:47:84:a1:3a:67:5a:20: 9e:0b:f4:10:5c:3d:52:0d:32:e3:93:da:cb:d7:1e: e7:00:5b:0a:d5:56:98:68:fa:73:a8:ff:bd:4d:22: af:3d:b4:3b:5b:40:54:3f:d1:b8:d4:7f:31:52:33: 21:60:2f:96:72:39:17:d5:5f:2d:09:91:33:6e:78: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:E7:71:71:2B:D7:3E:B3:1F:2C:52:89:EB:6B:3E:50:FC:09:B3 X509v3 Authority Key Identifier: keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:af:47:4e:72:76:1e:f0:9e:55:74:7f:91:7b:48:79:81:7f: 6f:d4:83:0b:bd:b1:24:62:ab:09:ec:4b:0c:5e:59:20:f8:8e: 2f:a8:bc:f7:e8:31:41:60:0d:78:00:71:50:4c:11:eb:84:1a: 26:57:4b:79:ad:58:88:0d:98:a8:3d:0d:31:61:ca:eb:39:33: 0d:af:2a:00:52:de:60:3a:83:71:00:5d:0c:44:86:94:64:7d: e2:c3:5b:42:48:26:27:34:7d:1b:ed:28:18:c7:30:1f:51:8f: 75:49:fc:0c:6e:fc:47:e6:24:df:41:27:3d:a0:90:6c:4b:0d: 07:ff:45:40:b2:b9:89:25:13:8d:b8:c6:6c:e2:83:a9:09:db: 32:49:9e:70:1d:44:9c:03:92:79:67:93:b0:22:e8:25:d7:8a: aa:a1:c5:4c:43:39:63:fd:e5:03:59:43:b7:8e:f9:71:1e:09: 50:3b:09:b8:67:70:ad:be:fc:b1:bf:8a:1f:cd:89:42:48:6b: 91:b9:65:4e:60:c0:fb:d3:e9:c3:30:3d:35:e9:90:9d:a2:eb: 3a:51:1e:0a:47:7d:44:02:94:46:51:af:85:04:f6:da:2a:5b: 1f:34:e1:84:77:fc:c9:b6:9f:5b:58:c5:b6:2d:3e:81:8c:13: 5d:38:f7:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91P9IdxAGVEisWtWwHhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZGQxMDg3NWU5ZTRjOWU3ZTg3ZTcwMWJiNTE2YWE2ZTFi OTUyYjAwHhcNMjUxMjA2MTQwMTAzWhcNMjUxMjA3MTQwMTAzWjAzMTEwLwYDVQQD EygyMDI2ZTc3MTcxMmJkNzNlYjMxZjJjNTI4OWViNmIzZTUwZmMwOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kf1fcFwX+8/+sQWg7AtOqSAAjOF hcGkvRijPAWYrMCQsU+UVxrzsapQP02uCyVkfUHg1rRSgf3Isz/yP6Szcs1IY6Mz Ce8IviCtBC30TWFidT7+8+auXC1B6ayk/PSkRXwqd8Rwr8sOo8xap4KoBwc/PoNm M7cG28SNDr81256ruXn5WkKVQhOw3KhGOpnAp0k1RpbXkYcS4x3mQnYKiw5cj9E4 Vniw3FF/Ita+QnXxOyouwlJgVBx2TkeEoTpnWiCeC/QQXD1SDTLjk9rL1x7nAFsK 1VaYaPpzqP+9TSKvPbQ7W0BUP9G41H8xUjMhYC+WcjkX1V8tCZEzbniWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAm53FxK9c+sx8sUonraz5Q/AmzMB8GA1UdIwQY MBaAFA3dEIdenkyefofnAbtRaqbhuVKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWIt OTgzYzcxZmY3MDUzLzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWItOTgzYzcxZmY3MDUz LzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAma9HTnJ2 HvCeVXR/kXtIeYF/b9SDC72xJGKrCexLDF5ZIPiOL6i89+gxQWANeABxUEwR64Qa JldLea1YiA2YqD0NMWHK6zkzDa8qAFLeYDqDcQBdDESGlGR94sNbQkgmJzR9G+0o GMcwH1GPdUn8DG78R+Yk30EnPaCQbEsNB/9FQLK5iSUTjbjGbOKDqQnbMkmecB1E nAOSeWeTsCLoJdeKqqHFTEM5Y/3lA1lDt475cR4JUDsJuGdwrb78sb+KH82JQkhr kbllTmDA+9PpwzA9NemQnaLrOlEeCkd9RAKURlGvhQT22ipbHzThhHf8ybafW1jF ti0+gYwTXTj3CQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:40 2025 by rpki-client