This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json) Hash identifier: iWnWTJENbs3ZjPIp3Zm+Nej2n/Eblo6MFJMgGEk2IAk= Subject key identifier: 34:9A:55:A2:3D:C1:74:DA:9D:CB:58:46:8C:C5:A9:14:F4:48:2B:F6 Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca Certificate serial: 019AF2093DC71AC77996634264374C5CF70B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: Qij-xPisZGBBqpNgu1KPeAhYyeA.roa (hash: 0qt3Er+wn2Xj8MdmWfSXDbZ9aYW82PDchwg6o4/NTxg=) 2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: LuqaL1QmJIbejMDnYsHQf4YYGx4FJw1G2z8gNCWlfOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3d:c7:1a:c7:79:96:63:42:64:37:4c:5c:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=349a55a23dc174da9dcb58468cc5a914f4482bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:b0:55:51:71:e9:a9:a1:4d:fd:79:4b:4c: 69:9a:45:ba:6e:bb:84:9f:2a:21:f6:10:03:95:c8: d5:77:00:69:b1:16:78:ad:9a:e1:6b:18:68:ae:e8: 0d:6d:d3:7b:c7:e3:1f:70:45:7c:85:2e:56:e5:7d: d6:44:d1:14:c5:0e:9b:c5:e3:97:9b:27:9f:cc:cb: 9d:1b:49:9a:d1:70:82:69:4a:0d:43:07:97:0e:63: 19:01:8d:6c:dd:a9:87:31:e5:ea:de:27:8b:81:26: 02:99:62:f8:b6:76:e3:33:98:68:6a:a9:f5:6d:af: 99:91:b1:2e:41:18:1e:7e:10:f0:f3:be:b0:1f:de: 7e:59:88:e0:b4:68:6e:90:91:12:5f:24:2b:3b:45: 00:28:9d:23:95:6f:87:25:74:66:47:fb:85:cf:fa: dd:ec:40:35:65:25:55:c9:77:25:8b:30:08:ed:e3: ae:4d:bd:e9:bb:05:f6:52:97:b2:fc:89:95:e8:61: db:41:31:53:14:99:8c:f8:2c:d9:68:63:80:83:76: 69:9f:15:b8:57:78:1e:82:4b:6f:c4:d7:f6:91:ed: 73:cd:c6:90:d2:b9:5e:96:f3:70:7c:1f:e7:06:05: 4d:36:c6:44:60:db:67:30:63:17:55:ed:eb:70:18: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9A:55:A2:3D:C1:74:DA:9D:CB:58:46:8C:C5:A9:14:F4:48:2B:F6 X509v3 Authority Key Identifier: keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:89:1a:69:2e:c0:87:bf:44:57:0c:e3:fe:89:00:9d:8f:9b: 57:5e:0b:77:d3:08:1f:42:e5:bc:b7:16:a7:3e:d0:99:cf:ac: d6:a8:03:59:3f:b5:c6:15:44:cc:fa:79:35:b2:a9:3d:50:00: 94:42:e2:ee:97:49:3c:97:22:07:be:44:22:95:3d:f5:68:42: 28:8f:43:a0:95:0c:73:1b:d5:86:b8:e9:fd:be:82:ef:92:e2: 56:ce:54:21:35:33:13:91:1a:ab:19:45:8f:fa:8c:01:ea:c3: 1e:d8:b3:8e:d5:71:c9:6f:c1:04:bb:a2:4f:e5:59:d9:7c:9d: 3b:2c:37:99:f6:a6:ff:ac:b8:3e:c0:7a:0f:50:75:f1:26:d5: 46:36:94:cc:c2:7e:64:25:1f:d7:e6:fc:4b:15:13:37:30:50: 0f:3f:9b:c3:8f:74:88:56:3c:01:7e:5d:ff:d3:a2:78:d1:3d: bd:e0:c3:05:a9:6a:15:1e:00:6c:0c:66:93:b0:f9:09:03:67: 32:90:1d:06:cd:57:db:3b:16:45:04:25:59:86:c6:90:d7:ea: 7e:6b:ab:4e:bf:1b:77:34:24:a8:e3:d7:e7:b4:53:14:c4:39: 33:d8:6a:ac:8e:75:d8:2e:89:d3:73:08:bf:2e:3d:ef:e5:f3: 8f:03:90:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT3HGsd5lmNCZDdMXPcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZGEwZTYzZWIyNDdkOWEwYjEzYjRjYjM2ZGQ2NzI0OTky MGJiY2EwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EygzNDlhNTVhMjNkYzE3NGRhOWRjYjU4NDY4Y2M1YTkxNGY0NDgyYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ywVVFx6amhTf15S0xpmkW6bruE nyoh9hADlcjVdwBpsRZ4rZrhaxhorugNbdN7x+MfcEV8hS5W5X3WRNEUxQ6bxeOX myefzMudG0ma0XCCaUoNQweXDmMZAY1s3amHMeXq3ieLgSYCmWL4tnbjM5hoaqn1 ba+ZkbEuQRgefhDw876wH95+WYjgtGhukJESXyQrO0UAKJ0jlW+HJXRmR/uFz/rd 7EA1ZSVVyXclizAI7eOuTb3puwX2Upey/ImV6GHbQTFTFJmM+CzZaGOAg3ZpnxW4 V3gegktvxNf2ke1zzcaQ0rlelvNwfB/nBgVNNsZEYNtnMGMXVe3rcBgPBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSaVaI9wXTanctYRozFqRT0SCv2MB8GA1UdIwQY MBaAFHXaDmPrJH2aCxO0yzbdZySZILvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGRvT1ktc2tmWm9MRTdUTE50MW5KSmtndThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YjVjMTktODIxYS00MGNlLTkxNjgt ZGY0YTMxNzM1MjJiLzEvZGRvT1ktc2tmWm9MRTdUTE50MW5KSmtndThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80YjVjMTktODIxYS00MGNlLTkxNjgtZGY0YTMxNzM1MjJi LzEvZGRvT1ktc2tmWm9MRTdUTE50MW5KSmtndThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYkaaS7A h79EVwzj/okAnY+bV14Ld9MIH0LlvLcWpz7Qmc+s1qgDWT+1xhVEzPp5NbKpPVAA lELi7pdJPJciB75EIpU99WhCKI9DoJUMcxvVhrjp/b6C75LiVs5UITUzE5EaqxlF j/qMAerDHtizjtVxyW/BBLuiT+VZ2XydOyw3mfam/6y4PsB6D1B18SbVRjaUzMJ+ ZCUf1+b8SxUTNzBQDz+bw490iFY8AX5d/9OieNE9veDDBalqFR4AbAxmk7D5CQNn MpAdBs1X2zsWRQQlWYbGkNfqfmurTr8bdzQkqOPX57RTFMQ5M9hqrI512C6J03MI vy497+XzjwOQbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:51 2025 by rpki-client