This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json) Hash identifier: jSW2uIKqaxlCBQik25DzAL7pC2ptr6cAJLA/9q+rh0I= Subject key identifier: EE:19:53:1F:E8:6C:89:CB:72:CC:04:38:5F:DC:EF:AC:93:8C:DB:F1 Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db Certificate serial: 019AF12D9B9DAB9294A88955079A8403A867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=) 2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: XgWZBPVHEhglTqWozKAEHY+kEmxzMAUSmXfKkv2lWHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9b:9d:ab:92:94:a8:89:55:07:9a:84:03:a8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=ee19531fe86c89cb72cc04385fdcefac938cdbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:a6:dd:54:ba:09:9f:8e:85:11:7e:6a:c1: 85:bc:9e:01:1b:1d:35:36:85:14:ad:a4:da:a7:96: dc:c9:b5:94:db:66:e9:3d:1a:98:ce:3d:98:ac:82: ee:91:e8:26:35:2a:e4:06:17:53:dd:2b:67:79:e6: 3c:83:d5:6c:fb:5e:50:49:c4:b2:bf:0c:b9:09:80: 8e:a9:cd:7d:6c:9b:44:35:99:cd:2b:ee:7c:4e:ce: 3e:be:3e:40:04:8f:ff:6e:08:e4:45:87:e9:68:3c: 7b:3f:6f:a3:d5:90:f8:db:70:e4:83:bf:e3:ab:b9: 7b:18:11:94:68:c5:c5:d2:65:38:7c:40:ac:e0:60: 0a:b9:f7:71:d1:1f:ab:24:30:ec:90:f2:8f:19:12: e2:dd:19:2d:c3:42:86:ae:cb:35:0e:56:7e:8f:a3: d6:c6:e2:c0:9a:21:f8:59:30:69:2c:45:4b:71:be: 6b:73:44:d9:3e:10:87:b3:ba:bf:d9:5c:88:16:9a: f1:e5:f8:d9:b0:67:eb:cb:fe:9a:19:87:6a:28:f4: b4:4c:de:fb:1e:28:5c:c3:58:58:31:cc:21:c2:fc: 7d:fd:e5:23:d2:2b:55:da:fa:a8:22:29:f6:ab:a4: dc:1e:38:d6:7c:f6:7f:1c:c8:3a:26:08:e9:a2:27: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:19:53:1F:E8:6C:89:CB:72:CC:04:38:5F:DC:EF:AC:93:8C:DB:F1 X509v3 Authority Key Identifier: keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:16:7b:4d:0e:5c:76:84:5b:02:2c:ea:d4:ea:12:ca:6c:ae: 97:1b:10:fa:12:f1:b4:39:5f:da:6d:10:6e:74:b8:1a:34:67: 7b:e0:e0:66:5b:56:78:54:06:00:72:85:63:b2:69:38:7f:8e: f3:ba:c8:8a:de:e0:f1:18:4b:be:10:c3:b3:fd:21:73:f7:be: ba:b1:50:d0:de:a3:93:ee:b6:86:2d:24:75:70:e5:d2:66:ca: e3:77:0e:b1:76:0a:b5:58:46:fc:68:37:04:b4:eb:fe:e0:95: d5:a2:63:b5:7a:97:b6:c0:db:2e:43:18:af:8d:43:99:7d:9d: ed:4c:96:ac:d0:95:f5:35:9b:54:6c:3a:1c:a4:cd:0f:67:41: ad:ed:e8:38:cb:27:46:40:d3:e2:96:28:bc:10:47:d5:ba:b7: 16:5f:86:2a:90:d6:64:d4:d1:41:18:cc:20:21:95:65:08:d6: 02:c4:19:80:ee:fb:7e:cd:a3:00:90:e1:c5:49:0d:e2:42:2e: e9:04:d4:a6:18:3e:ce:bb:f9:cb:e6:04:62:9f:37:5f:cf:15: 32:e6:03:d8:0c:61:d3:e9:b1:84:a7:90:92:23:0b:21:cc:a1: 55:46:ad:1e:63:4a:96:82:69:5c:88:e6:59:83:39:84:06:3a: b5:96:46:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZudq5KUqIlVB5qEA6hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw ZWEzZGIwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EyhlZTE5NTMxZmU4NmM4OWNiNzJjYzA0Mzg1ZmRjZWZhYzkzOGNkYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuWm3VS6CZ+OhRF+asGFvJ4BGx01 NoUUraTap5bcybWU22bpPRqYzj2YrILukegmNSrkBhdT3StneeY8g9Vs+15QScSy vwy5CYCOqc19bJtENZnNK+58Ts4+vj5ABI//bgjkRYfpaDx7P2+j1ZD423Dkg7/j q7l7GBGUaMXF0mU4fECs4GAKufdx0R+rJDDskPKPGRLi3Rktw0KGrss1DlZ+j6PW xuLAmiH4WTBpLEVLcb5rc0TZPhCHs7q/2VyIFprx5fjZsGfry/6aGYdqKPS0TN77 Hihcw1hYMcwhwvx9/eUj0itV2vqoIin2q6TcHjjWfPZ/HMg6JgjpoicbIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4ZUx/obInLcswEOF/c76yTjNvxMB8GA1UdIwQY MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt Y2RlZTk5OTVlOWU3LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3 LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBZ7TQ5c doRbAizq1OoSymyulxsQ+hLxtDlf2m0QbnS4GjRne+DgZltWeFQGAHKFY7JpOH+O 87rIit7g8RhLvhDDs/0hc/e+urFQ0N6jk+62hi0kdXDl0mbK43cOsXYKtVhG/Gg3 BLTr/uCV1aJjtXqXtsDbLkMYr41DmX2d7UyWrNCV9TWbVGw6HKTND2dBre3oOMsn RkDT4pYovBBH1bq3Fl+GKpDWZNTRQRjMICGVZQjWAsQZgO77fs2jAJDhxUkN4kIu 6QTUphg+zrv5y+YEYp83X88VMuYD2Axh0+mxhKeQkiMLIcyhVUatHmNKloJpXIjm WYM5hAY6tZZGKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:25 2025 by rpki-client