This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json) Hash identifier: 4WTUrQ10kcamTBy1zhPN9JX8e8TR7t0Okak7Bta9zpQ= Subject key identifier: 77:0F:E8:67:A0:29:28:6E:5E:D9:FF:B5:42:63:4B:2F:C9:93:F8:B9 Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54 Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254 Certificate serial: 019AF12D9CD73DC062F23FC9027ADE98F6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft Manifest number: 1665 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=) 2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: b2LcIYVYJjuCUO4k5oxmutrv3GviLUdomlpHMNDgSf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9c:d7:3d:c0:62:f2:3f:c9:02:7a:de:98:f6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254 Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=770fe867a029286e5ed9ffb542634b2fc993f8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:36:0e:0d:c2:2d:6e:6d:d9:e5:b3:e2:17: 8b:3f:a5:32:14:34:e2:0b:5b:9b:74:5c:6f:c6:6e: af:5b:c5:a0:e9:de:4c:3a:ef:df:92:08:a1:00:a9: 9b:a8:6e:66:08:ef:d3:54:21:e5:bf:4f:fb:68:c5: 93:38:18:d7:a0:d0:28:06:44:f1:75:a4:97:92:93: 8c:a2:30:f0:b2:61:d4:5d:fa:ff:6f:26:b1:2d:de: 72:0a:26:3f:27:45:c9:99:e4:3d:0b:1b:27:7a:12: c9:89:ef:78:b1:98:3d:6e:29:fb:cc:6b:c2:c4:23: fb:ac:2f:f1:18:42:87:71:a8:1b:30:dc:98:e2:c2: 1e:3b:f7:b0:00:b2:4a:e6:4f:b5:4e:74:4c:7d:3e: 2a:f1:ee:df:6f:b8:ec:dc:1c:39:fe:e9:97:82:bb: 03:c7:0e:b4:31:02:c9:2a:2a:4e:07:b6:28:28:14: 94:f7:55:44:20:e1:f9:78:c2:07:8a:b5:a1:40:e2: 87:09:96:78:8f:46:d4:2c:dd:45:82:e7:e6:a9:3b: de:b7:4f:fb:ff:e1:5b:ab:4e:00:79:f5:9e:d5:79: 6e:76:68:4b:11:80:d9:98:80:c9:cd:7a:fa:0e:93: 1f:cb:43:70:a5:4e:f8:c5:ee:6f:56:28:00:ef:e7: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0F:E8:67:A0:29:28:6E:5E:D9:FF:B5:42:63:4B:2F:C9:93:F8:B9 X509v3 Authority Key Identifier: keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6c:6b:b7:75:ef:ba:e4:2a:ae:40:2b:71:36:86:d2:16:b3: 1e:57:e2:e7:2d:32:dd:5f:6c:3d:3f:b9:15:77:23:6a:bc:39: 26:91:7d:e1:7b:30:9b:c1:aa:9e:85:0f:f3:78:28:12:b6:61: 1b:3d:f7:69:38:fb:e2:97:a3:76:37:d7:bf:d9:73:ef:66:3b: fd:fb:92:10:b5:4c:9d:61:67:e6:ac:4e:f9:dd:0a:9d:74:b6: f1:11:29:0e:bb:75:a8:82:e8:16:f9:1e:8a:40:2c:52:1a:a3: 3b:28:8a:a6:21:18:99:0d:63:fb:13:c7:35:f8:62:28:79:22: c8:71:d9:a7:83:7c:f7:a5:45:37:58:ea:4c:87:c1:09:05:19: d9:e6:24:c8:65:df:de:38:11:14:96:92:2c:a6:e6:2f:23:35: 57:94:21:39:97:50:57:dc:2d:8d:60:cf:00:4b:2a:07:9c:21: 74:f7:25:e0:ff:df:a7:a2:fd:7d:16:12:9d:f8:1e:a5:67:2b: 57:48:65:b0:db:b1:46:5f:26:bc:cb:11:63:68:b3:b8:dd:cd: 65:69:28:5c:7e:f0:f3:b9:64:b8:c8:e6:e1:e7:03:98:e3:08: 7e:10:35:8a:8f:91:62:60:b1:58:f6:8e:91:fe:b5:fa:1e:61: d7:e1:0b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZzXPcBi8j/JAnremPbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZDBlYmQ4ZjU2NmUzZmFiN2UyMzU0YjcxNDA2MGM2ZmE0 N2UyNTQwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD Eyg3NzBmZTg2N2EwMjkyODZlNWVkOWZmYjU0MjYzNGIyZmM5OTNmOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBY2Dg3CLW5t2eWz4heLP6UyFDTi C1ubdFxvxm6vW8Wg6d5MOu/fkgihAKmbqG5mCO/TVCHlv0/7aMWTOBjXoNAoBkTx daSXkpOMojDwsmHUXfr/byaxLd5yCiY/J0XJmeQ9CxsnehLJie94sZg9bin7zGvC xCP7rC/xGEKHcagbMNyY4sIeO/ewALJK5k+1TnRMfT4q8e7fb7js3Bw5/umXgrsD xw60MQLJKipOB7YoKBSU91VEIOH5eMIHirWhQOKHCZZ4j0bULN1FgufmqTvet0/7 /+Fbq04AefWe1XludmhLEYDZmIDJzXr6DpMfy0NwpU74xe5vVigA7+eRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcP6GegKShuXtn/tUJjSy/Jk/i5MB8GA1UdIwQY MBaAFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAt Mzk3NjVhM2Y5ZGJjLzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAtMzk3NjVhM2Y5ZGJj LzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmxrt3Xv uuQqrkArcTaG0hazHlfi5y0y3V9sPT+5FXcjarw5JpF94Xswm8GqnoUP83goErZh Gz33aTj74pejdjfXv9lz72Y7/fuSELVMnWFn5qxO+d0KnXS28REpDrt1qILoFvke ikAsUhqjOyiKpiEYmQ1j+xPHNfhiKHkiyHHZp4N896VFN1jqTIfBCQUZ2eYkyGXf 3jgRFJaSLKbmLyM1V5QhOZdQV9wtjWDPAEsqB5whdPcl4P/fp6L9fRYSnfgepWcr V0hlsNuxRl8mvMsRY2izuN3NZWkoXH7w87lkuMjm4ecDmOMIfhA1io+RYmCxWPaO kf61+h5h1+ELCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:57 2025 by rpki-client