This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json) Hash identifier: rv5Bkcko/NoxSWsDdu1oljnyKb4QWmEQ14+2+FYQtxc= Subject key identifier: 34:D0:32:A1:51:1A:03:01:A0:2E:16:0B:2E:F8:85:B1:D3:F2:5C:E6 Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Certificate serial: 019AF50A9B3D001C15C01919F6852B86A2B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:44 +0000 Manifest this update: Sat 06 Dec 2025 19:01:44 +0000 Manifest next update: Sun 07 Dec 2025 19:01:44 +0000 Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: liG9ZTu6pNYfZyluPIO9i3c62xxhxJFYkN9tlBQJVPQ=) 2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9b:3d:00:1c:15:c0:19:19:f6:85:2b:86:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Validity Not Before: Dec 6 19:01:44 2025 GMT Not After : Dec 7 19:01:44 2025 GMT Subject: CN=34d032a1511a0301a02e160b2ef885b1d3f25ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:21:ba:65:89:80:21:01:0c:e0:f0:ea:89: 1f:b0:13:f0:1b:4a:73:47:c7:dd:34:2c:6b:22:7b: 59:e9:28:a7:70:c0:48:99:2a:78:dd:06:dc:03:f5: 5a:a0:fd:a3:76:93:21:ae:0f:68:7f:a6:50:d3:3e: e6:c8:21:21:dd:d3:4f:38:72:70:92:62:19:80:68: 81:d2:6e:a8:4f:48:01:1e:d2:02:fd:96:91:62:e6: 8c:e3:3c:fe:98:62:0c:79:a2:ab:91:db:f2:b6:3e: 22:c5:da:f7:18:d0:82:db:a3:e7:1f:5c:9a:16:8f: 9c:68:23:0d:81:bf:2f:ea:e3:81:5e:f6:80:38:d9: a2:f5:33:55:6d:48:b7:fe:91:c8:ba:d6:2e:c5:ac: 75:38:de:59:01:93:2e:ad:c6:14:77:22:5c:b9:bf: 22:61:25:32:4a:d0:b2:1c:c1:20:e9:90:17:4f:42: 8e:73:c0:c8:93:2d:8f:e1:b4:2d:6c:15:d7:a5:f0: c6:3b:eb:54:e5:87:1c:f6:f0:c1:63:1e:7b:88:29: b8:25:5c:0b:80:d7:12:bf:81:1d:6a:0b:aa:32:77: 19:50:55:93:45:51:a0:52:5d:c8:76:88:2a:69:52: 71:4f:7d:1a:66:95:a0:a4:8e:7f:71:f9:73:e5:af: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D0:32:A1:51:1A:03:01:A0:2E:16:0B:2E:F8:85:B1:D3:F2:5C:E6 X509v3 Authority Key Identifier: keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ab:04:81:65:59:ca:71:81:ca:6c:a6:a6:38:cf:ec:77:a3: dd:3b:a3:1f:a9:7f:0c:bd:0a:81:3f:9c:73:79:70:49:9e:e2: 95:2a:bb:6a:11:28:43:a9:88:4c:d8:4a:dc:0a:ba:ac:bc:41: 77:aa:13:7c:ae:1c:b2:89:30:2b:45:c7:8e:35:e7:5b:77:e3: 0c:d3:06:e4:b2:62:b6:44:1c:cd:7e:c9:58:b5:f8:5d:39:23: 86:f5:8f:3c:96:80:73:65:ac:51:5b:eb:6b:3f:fe:8f:fa:86: 4b:d8:c1:81:2c:9d:4e:e8:47:96:1d:c3:4b:f1:7e:96:64:a4: 1c:ab:45:6e:58:f9:98:79:34:98:af:2e:dc:77:ee:3f:de:ca: 19:8a:b7:90:41:29:3e:79:51:f4:0b:b6:2a:2d:3c:b7:83:50: e2:f5:2d:96:43:63:14:05:ce:be:e6:09:43:99:5d:22:4a:13: ba:7f:fa:fc:1b:cc:ed:9a:01:62:79:e3:5e:ab:95:0c:23:df: e9:7d:28:14:8b:a2:f4:fc:7e:71:3f:e5:3e:50:33:fc:61:c2: 51:b1:ac:69:5c:85:5b:ae:d8:11:2d:02:13:27:7e:15:09:9d: a1:16:ce:14:41:9a:41:46:9d:3e:85:a5:01:ec:66:29:d3:44: b4:68:08:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cps9ABwVwBkZ9oUrhqKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2 OTBmZjIwHhcNMjUxMjA2MTkwMTQ0WhcNMjUxMjA3MTkwMTQ0WjAzMTEwLwYDVQQD EygzNGQwMzJhMTUxMWEwMzAxYTAyZTE2MGIyZWY4ODViMWQzZjI1Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHUhumWJgCEBDODw6okfsBPwG0pz R8fdNCxrIntZ6SincMBImSp43QbcA/VaoP2jdpMhrg9of6ZQ0z7myCEh3dNPOHJw kmIZgGiB0m6oT0gBHtIC/ZaRYuaM4zz+mGIMeaKrkdvytj4ixdr3GNCC26PnH1ya Fo+caCMNgb8v6uOBXvaAONmi9TNVbUi3/pHIutYuxax1ON5ZAZMurcYUdyJcub8i YSUyStCyHMEg6ZAXT0KOc8DIky2P4bQtbBXXpfDGO+tU5Ycc9vDBYx57iCm4JVwL gNcSv4EdaguqMncZUFWTRVGgUl3IdogqaVJxT30aZpWgpI5/cflz5a8+OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTQMqFRGgMBoC4WCy74hbHT8lzmMB8GA1UdIwQY MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKsEgWVZ ynGBymympjjP7Hej3TujH6l/DL0KgT+cc3lwSZ7ilSq7ahEoQ6mITNhK3Aq6rLxB d6oTfK4csokwK0XHjjXnW3fjDNMG5LJitkQczX7JWLX4XTkjhvWPPJaAc2WsUVvr az/+j/qGS9jBgSydTuhHlh3DS/F+lmSkHKtFblj5mHk0mK8u3HfuP97KGYq3kEEp PnlR9Au2Ki08t4NQ4vUtlkNjFAXOvuYJQ5ldIkoTun/6/BvM7ZoBYnnjXquVDCPf 6X0oFIui9Px+cT/lPlAz/GHCUbGsaVyFW67YES0CEyd+FQmdoRbOFEGaQUadPoWl AexmKdNEtGgI0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:58 2025 by rpki-client