This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json) Hash identifier: 46lcY5QEM/drGcs5g3/9cr7uL2dMog90HNvR3HvTY9I= Subject key identifier: F3:88:80:84:53:BD:6B:38:12:33:33:D4:60:2B:91:B8:A4:F8:0F:84 Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e Certificate serial: 019AF31D36258E6E1ADB802542CEFA9ED16C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=) 2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: 8rJo9YqO05ERXf9v+rIMzs0NVEzilsNuzBDjfSbTJ40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:36:25:8e:6e:1a:db:80:25:42:ce:fa:9e:d1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=f388808453bd6b38123333d4602b91b8a4f80f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:eb:b0:94:e4:6d:41:b1:ef:f0:13:19:a8: ea:87:66:da:70:41:d4:dc:91:36:15:21:d9:b6:0f: a7:90:7e:81:ae:7d:a3:3a:be:75:2f:db:a4:98:fc: f3:51:9a:a7:98:45:d5:53:dc:88:4b:4a:4f:80:28: e1:29:fb:0c:08:3c:70:ad:4d:69:d7:be:ab:0a:6f: ab:dd:ea:cc:a0:5a:61:0c:45:91:31:cf:94:f4:a4: 33:bd:0d:33:d6:20:ec:dc:21:36:53:f6:53:85:46: 58:9f:19:e6:74:54:83:36:cb:7c:01:e0:10:9b:e5: a3:df:db:27:21:b9:4f:f0:cb:04:cd:e8:23:89:b3: ef:13:0d:1b:8a:4a:6c:ed:b5:bc:b9:bf:0b:d9:cc: 6c:92:e0:df:a8:6b:f8:4a:32:76:ca:50:74:a0:2e: a1:62:0d:c7:5d:2f:91:50:00:ed:89:c9:e0:7c:80: 95:12:45:6d:3c:c4:ef:ee:ce:8a:26:95:ef:c0:6e: 9e:64:d5:99:c1:43:f0:3a:31:f1:a1:64:b3:c2:78: 5e:22:d5:bb:3e:9a:1d:76:80:10:c4:be:07:2e:c7: c4:92:aa:fc:89:8a:97:01:23:89:4b:ad:56:07:f7: 00:7b:40:85:56:f2:ad:a4:01:35:8d:c2:5d:8a:cf: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:88:80:84:53:BD:6B:38:12:33:33:D4:60:2B:91:B8:A4:F8:0F:84 X509v3 Authority Key Identifier: keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:fd:51:b3:69:e6:54:f0:af:df:12:48:3b:d5:5a:b8:9f: 74:22:d6:1a:3d:e8:e1:30:c5:82:7c:a4:af:6a:35:db:bc:3a: 39:79:1a:01:c2:15:e7:44:18:ad:7b:ba:24:50:a5:7f:ba:54: 99:ad:eb:f7:d2:17:26:11:3c:b4:20:ba:0b:88:b1:54:4f:ef: 0f:fa:a0:e6:fe:1f:39:47:e9:11:63:c0:44:c5:3e:b8:41:3e: b4:c2:dc:d5:d1:aa:90:0c:d1:24:a0:44:4b:d7:78:cb:d1:12: d4:9d:c3:3a:e5:72:9f:a1:45:43:b2:82:6b:5c:78:a8:ea:c2: 9d:ca:04:f2:19:a0:93:c6:90:2c:14:e3:b9:cb:8d:a6:3b:f4: ba:2f:45:67:1d:4a:88:46:58:f9:38:54:10:04:cf:7f:19:4c: b9:af:dc:98:78:13:89:4b:68:5d:a6:81:26:01:2c:57:5f:46: 8b:87:c3:61:f1:2d:7b:0a:d3:56:13:9a:e6:b0:84:01:85:dd: e6:fe:c3:c9:71:81:87:41:78:20:4e:67:fc:af:cc:e8:33:2c: 9a:a2:15:b1:f3:23:a3:5b:8d:61:9f:5a:7a:89:b8:1d:76:a3: 12:6e:c1:8b:b0:06:05:92:db:51:17:ec:62:2b:70:72:58:72: 69:af:94:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTYljm4a24AlQs76ntFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj ODZkNGUwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD EyhmMzg4ODA4NDUzYmQ2YjM4MTIzMzMzZDQ2MDJiOTFiOGE0ZjgwZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmXrsJTkbUGx7/ATGajqh2bacEHU 3JE2FSHZtg+nkH6Brn2jOr51L9ukmPzzUZqnmEXVU9yIS0pPgCjhKfsMCDxwrU1p 176rCm+r3erMoFphDEWRMc+U9KQzvQ0z1iDs3CE2U/ZThUZYnxnmdFSDNst8AeAQ m+Wj39snIblP8MsEzegjibPvEw0bikps7bW8ub8L2cxskuDfqGv4SjJ2ylB0oC6h Yg3HXS+RUADticngfICVEkVtPMTv7s6KJpXvwG6eZNWZwUPwOjHxoWSzwnheItW7 PpoddoAQxL4HLsfEkqr8iYqXASOJS61WB/cAe0CFVvKtpAE1jcJdis+RDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOIgIRTvWs4EjMz1GArkbik+A+EMB8GA1UdIwQY MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0 LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGj9UbNp 5lTwr98SSDvVWrifdCLWGj3o4TDFgnykr2o127w6OXkaAcIV50QYrXu6JFClf7pU ma3r99IXJhE8tCC6C4ixVE/vD/qg5v4fOUfpEWPARMU+uEE+tMLc1dGqkAzRJKBE S9d4y9ES1J3DOuVyn6FFQ7KCa1x4qOrCncoE8hmgk8aQLBTjucuNpjv0ui9FZx1K iEZY+ThUEATPfxlMua/cmHgTiUtoXaaBJgEsV19Gi4fDYfEtewrTVhOa5rCEAYXd 5v7DyXGBh0F4IE5n/K/M6DMsmqIVsfMjo1uNYZ9aeom4HXajEm7Bi7AGBZLbURfs Yitwclhyaa+UuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:57 2025 by rpki-client