This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json) Hash identifier: d3WRMY6OWlYQ2+U67/JsUi/9NtPeptTFXLzDw9p8x2w= Subject key identifier: 05:E1:94:B6:58:02:D3:38:9E:46:2E:C1:00:D3:6F:13:52:A0:BE:29 Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc Certificate serial: 019B3F48AE23CECA9D1004DD5EB780424284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft Manifest number: 1241 Signing time: Sun 21 Dec 2025 05:01:26 +0000 Manifest this update: Sun 21 Dec 2025 05:01:26 +0000 Manifest next update: Mon 22 Dec 2025 05:01:26 +0000 Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=) 2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: eyqeA8Siq3M639HY5/BYraGQh0cMtMI1cMqhq2nUnlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:ae:23:ce:ca:9d:10:04:dd:5e:b7:80:42:42:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc Validity Not Before: Dec 21 05:01:26 2025 GMT Not After : Dec 22 05:01:26 2025 GMT Subject: CN=05e194b65802d3389e462ec100d36f1352a0be29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:d6:cc:c6:a7:f9:5b:c8:8f:eb:1d:ec:fb: e2:da:aa:cb:89:7f:8c:a2:1b:01:a4:ea:90:85:32: 65:f6:d4:7f:d6:48:73:9e:65:bc:27:99:87:49:1e: c4:f3:dc:ac:2d:aa:6c:c0:2f:8e:0e:a1:db:1e:85: 21:0d:81:65:d9:74:0f:03:d6:65:fe:5a:59:79:e0: 23:6f:8a:8b:48:38:9a:54:0d:08:1a:01:5c:2c:4b: a6:92:27:ff:fd:89:fe:a1:66:4f:4a:65:f9:cc:e5: d3:07:6a:2d:bf:95:40:7a:ad:eb:88:2e:db:66:1f: 7c:70:72:ef:4c:66:c1:f3:5f:d0:21:a5:4c:4f:af: e9:a6:6e:b4:38:a6:c3:36:48:6b:e3:3e:c4:cc:4c: 07:c5:94:cb:27:fb:5e:8f:ec:5b:43:d1:60:41:86: c7:60:1b:ea:c8:7b:e2:ce:1b:c4:9e:96:1c:d7:33: 08:63:44:d8:69:20:3a:e4:b0:f0:56:e1:9e:a2:be: 6a:6a:25:cc:55:d8:a9:e8:23:97:73:5a:e2:89:77: 49:8b:7b:90:9a:b9:a2:00:96:7a:b5:c9:1a:c4:fb: 29:f9:71:1b:16:39:71:84:08:ea:8b:42:c4:77:77: ad:63:f2:13:5f:0a:18:3d:82:33:ff:3b:15:f9:c3: 92:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E1:94:B6:58:02:D3:38:9E:46:2E:C1:00:D3:6F:13:52:A0:BE:29 X509v3 Authority Key Identifier: keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1f:9a:dd:29:f9:f5:14:d7:5f:a4:68:c8:6c:a7:e3:0e:05: fd:9c:91:be:7a:51:71:85:11:ed:83:e6:db:70:2b:c1:27:dd: 3e:1e:b9:80:1e:bd:3e:e4:4e:c4:f9:bb:1e:72:5c:28:75:5b: 83:c5:e5:f7:d9:86:a8:4a:a6:4b:f4:6e:d2:c8:db:03:38:5f: 7d:b4:c2:72:64:21:14:a5:42:e3:40:e7:63:bc:f7:ff:24:d1: ef:ca:6d:83:b1:8b:5f:98:02:b4:23:95:29:56:df:55:5c:de: 4b:b3:b7:37:34:ed:8f:a0:21:46:88:33:01:e0:2d:22:5c:55: 7a:e2:2e:52:1e:df:ad:ea:08:18:fb:94:84:3f:97:98:e7:04: 4a:56:17:e2:1f:59:c9:7a:5c:30:d9:96:3c:f9:c9:ff:32:81: dd:75:35:6c:12:07:21:5b:19:a6:fb:2c:7d:97:8a:89:a4:d9: 38:c6:64:56:b5:8e:cc:75:53:b6:75:9c:3f:59:e2:0e:99:3e: 7b:d4:49:69:72:28:35:71:29:8c:c2:75:45:49:21:b0:11:bd: 3c:23:47:f5:55:f5:40:67:8c:ce:1f:d2:55:03:9f:6a:db:07: 71:b0:d7:86:41:ec:e3:7c:b6:a9:10:67:bb:9e:47:ce:f7:e3: fe:a0:96:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SK4jzsqdEATdXreAQkKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDJmOGUwZGVhMTM4N2RhZjkwMzVkMmNkZjRlYjhjOTNh ZDg5Y2MwHhcNMjUxMjIxMDUwMTI2WhcNMjUxMjIyMDUwMTI2WjAzMTEwLwYDVQQD EygwNWUxOTRiNjU4MDJkMzM4OWU0NjJlYzEwMGQzNmYxMzUyYTBiZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTbWzMan+VvIj+sd7Pvi2qrLiX+M ohsBpOqQhTJl9tR/1khznmW8J5mHSR7E89ysLapswC+ODqHbHoUhDYFl2XQPA9Zl /lpZeeAjb4qLSDiaVA0IGgFcLEumkif//Yn+oWZPSmX5zOXTB2otv5VAeq3riC7b Zh98cHLvTGbB81/QIaVMT6/ppm60OKbDNkhr4z7EzEwHxZTLJ/tej+xbQ9FgQYbH YBvqyHvizhvEnpYc1zMIY0TYaSA65LDwVuGeor5qaiXMVdip6COXc1riiXdJi3uQ mrmiAJZ6tckaxPsp+XEbFjlxhAjqi0LEd3etY/ITXwoYPYIz/zsV+cOSQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXhlLZYAtM4nkYuwQDTbxNSoL4pMB8GA1UdIwQY MBaAFA3S+ODeoTh9r5A10s3064yTrYnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAt YWE4NDg1Y2YzMDY4LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAtYWE4NDg1Y2YzMDY4 LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx+a3Sn5 9RTXX6RoyGyn4w4F/ZyRvnpRcYUR7YPm23ArwSfdPh65gB69PuROxPm7HnJcKHVb g8Xl99mGqEqmS/Ru0sjbAzhffbTCcmQhFKVC40DnY7z3/yTR78ptg7GLX5gCtCOV KVbfVVzeS7O3NzTtj6AhRogzAeAtIlxVeuIuUh7freoIGPuUhD+XmOcESlYX4h9Z yXpcMNmWPPnJ/zKB3XU1bBIHIVsZpvssfZeKiaTZOMZkVrWOzHVTtnWcP1niDpk+ e9RJaXIoNXEpjMJ1RUkhsBG9PCNH9VX1QGeMzh/SVQOfatsHcbDXhkHs43y2qRBn u55Hzvfj/qCWOg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:24 2025 by rpki-client