This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json) Hash identifier: OHoi7dBzUoE14mNaHBpY3f0TL33prYFBbTEXzRX7E9Y= Subject key identifier: 72:F8:C7:54:1E:76:94:3D:7F:14:1E:30:E7:EF:BB:8F:70:64:C1:94 Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Certificate serial: 019B2175898FD790278AE9F5AD2F2FC63880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 10:01:49 +0000 Manifest this update: Mon 15 Dec 2025 10:01:49 +0000 Manifest next update: Tue 16 Dec 2025 10:01:49 +0000 Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 1WZpIBnu4M07Js2rVPBxEZ4zBxCaH/YhFo7YMl9N994=) 2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:89:8f:d7:90:27:8a:e9:f5:ad:2f:2f:c6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Validity Not Before: Dec 15 10:01:49 2025 GMT Not After : Dec 16 10:01:49 2025 GMT Subject: CN=72f8c7541e76943d7f141e30e7efbb8f7064c194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:86:82:65:c6:4d:06:fb:e6:7f:dd:32:0d: 9c:5f:62:e1:fc:43:7b:a2:87:ff:10:0a:8e:f1:df: c1:9e:e7:e2:e3:60:86:52:74:6d:79:08:c6:76:d2: c0:75:33:ea:53:95:78:aa:82:84:31:ea:f6:0c:a3: 10:3e:db:a0:7d:89:56:33:ae:c7:bd:16:60:e5:e0: 82:d0:ca:35:dd:44:ed:b0:cb:c5:4e:17:97:a2:da: 60:7e:31:55:a7:39:8f:1a:54:7e:f4:42:d3:a2:ad: 09:ed:94:24:37:95:5d:d5:44:69:90:d1:83:f9:f5: 39:99:0d:6e:20:eb:7a:15:1a:ba:34:d1:d0:86:df: ae:5a:b8:20:60:6b:63:bf:a6:79:d7:a6:7a:17:26: 62:6b:a5:d1:8d:e8:d6:d0:f4:60:6b:ff:e9:cc:0c: 73:de:9c:54:e2:07:44:fc:60:58:07:33:2b:02:3c: 08:2a:93:0c:2e:53:c5:ce:f2:bd:14:d1:a2:72:af: e2:35:98:a7:4d:82:9f:8a:f3:73:97:e8:a6:34:07: 33:23:70:1e:94:8a:90:73:3e:5e:74:cc:46:08:03: 9f:f6:70:25:47:57:71:37:32:4b:f7:1a:02:25:8f: d8:30:cd:dc:e0:a2:6c:ea:57:42:ca:4e:09:18:87: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:C7:54:1E:76:94:3D:7F:14:1E:30:E7:EF:BB:8F:70:64:C1:94 X509v3 Authority Key Identifier: keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:a3:b2:d2:30:42:81:b3:d2:19:48:7a:7a:bc:0d:c7:66: fc:09:67:8b:00:de:b6:ff:5f:3f:18:8a:c1:03:bf:b2:ca:68: ad:ae:5a:1e:bd:df:df:ba:88:f2:81:84:38:77:4f:98:eb:cd: 12:eb:28:63:fa:19:45:d8:95:10:08:57:dc:29:1a:8a:69:ff: 39:df:ad:4d:d3:3d:72:d4:1a:80:a7:3c:58:0b:74:0c:c9:62: 39:06:df:a4:e3:b5:c6:3d:7c:95:6f:09:e2:ae:1a:90:4f:02: 28:a7:cc:3e:0b:92:3a:96:9c:4c:ee:d1:39:72:4a:d5:36:e9: 83:fd:a3:95:a4:b8:db:e1:67:eb:0f:df:fa:0c:88:01:9c:6a: 99:ca:d9:d4:63:be:ff:a5:8e:3d:00:16:9f:c5:2d:4a:1a:3c: 6d:a4:58:dc:08:10:b9:a3:38:15:3a:c2:f9:bb:6b:1d:61:3b: 4e:32:9c:63:10:3d:70:6b:f7:8c:f8:11:1d:e0:d1:f5:ea:f9: d8:3b:74:fd:8c:19:57:e4:6b:06:a2:3c:eb:f3:48:a2:f0:d6: a2:43:2e:b9:3c:d9:eb:16:8b:01:2e:ae:54:f9:f7:89:59:91: e0:c3:f2:d8:ac:ef:ca:e6:19:95:41:1c:b4:09:b2:64:bc:f6: 52:31:69:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdYmP15Aniun1rS8vxjiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2 OTBmZjIwHhcNMjUxMjE1MTAwMTQ5WhcNMjUxMjE2MTAwMTQ5WjAzMTEwLwYDVQQD Eyg3MmY4Yzc1NDFlNzY5NDNkN2YxNDFlMzBlN2VmYmI4ZjcwNjRjMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/mGgmXGTQb75n/dMg2cX2Lh/EN7 oof/EAqO8d/Bnufi42CGUnRteQjGdtLAdTPqU5V4qoKEMer2DKMQPtugfYlWM67H vRZg5eCC0Mo13UTtsMvFTheXotpgfjFVpzmPGlR+9ELToq0J7ZQkN5Vd1URpkNGD +fU5mQ1uIOt6FRq6NNHQht+uWrggYGtjv6Z516Z6FyZia6XRjejW0PRga//pzAxz 3pxU4gdE/GBYBzMrAjwIKpMMLlPFzvK9FNGicq/iNZinTYKfivNzl+imNAczI3Ae lIqQcz5edMxGCAOf9nAlR1dxNzJL9xoCJY/YMM3c4KJs6ldCyk4JGIdwMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHL4x1QedpQ9fxQeMOfvu49wZMGUMB8GA1UdIwQY MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaOjstIw QoGz0hlIenq8Dcdm/AlniwDetv9fPxiKwQO/sspora5aHr3f37qI8oGEOHdPmOvN EusoY/oZRdiVEAhX3Ckaimn/Od+tTdM9ctQagKc8WAt0DMliOQbfpOO1xj18lW8J 4q4akE8CKKfMPguSOpacTO7ROXJK1Tbpg/2jlaS42+Fn6w/f+gyIAZxqmcrZ1GO+ /6WOPQAWn8UtSho8baRY3AgQuaM4FTrC+btrHWE7TjKcYxA9cGv3jPgRHeDR9er5 2Dt0/YwZV+RrBqI86/NIovDWokMuuTzZ6xaLAS6uVPn3iVmR4MPy2KzvyuYZlUEc tAmyZLz2UjFpAg== -----END CERTIFICATE-----Generated at Mon Dec 15 15:09:05 2025 by rpki-client