This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: 1QudbyBE+5yOPjOldC9Rbn0MwIHIjlZKfoUZWL6k+Mk= Subject key identifier: 63:A0:45:D1:59:99:47:B8:C2:C2:E1:4B:9A:CF:95:11:F6:68:9B:8E Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019B3EA3624D70F4E8202171998888E6F6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0FF6 Signing time: Sun 21 Dec 2025 02:00:53 +0000 Manifest this update: Sun 21 Dec 2025 02:00:53 +0000 Manifest next update: Mon 22 Dec 2025 02:00:53 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: VqzqYkhV4m+R+rv1CaEr4kCpKsGJrjRP7hCTHvBdUIY=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: W8-PwKMzVrW65-R2fHKjqVUbX54.roa (hash: C0sW97okII2QoOOpXdKP/WHxFbjbFOar+kEl1869pAo=) 8: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 9: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 10: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 11: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:62:4d:70:f4:e8:20:21:71:99:88:88:e6:f6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Dec 21 02:00:53 2025 GMT Not After : Dec 22 02:00:53 2025 GMT Subject: CN=63a045d1599947b8c2c2e14b9acf9511f6689b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:28:cd:3e:01:e6:f3:c3:f7:31:5f:5b:d8: 06:9d:64:e8:c1:f9:5e:b8:75:f2:df:8a:9e:bf:e0: c3:fb:42:90:63:16:6a:e9:ae:5f:b6:b3:19:0d:d9: e4:0b:9f:e1:cd:f0:11:13:be:95:b7:f0:66:bb:86: 3b:cf:60:b4:33:58:2d:ef:0c:73:2d:84:14:ef:1a: 72:71:98:50:36:c8:fc:f5:a5:79:6f:71:fd:c4:6e: b8:31:9e:ff:a0:08:b5:fb:7d:04:66:5a:65:da:7b: a1:89:18:ba:9b:fa:8c:21:d8:fc:01:f8:43:08:77: 33:4e:a4:53:b7:83:89:f7:01:76:ea:f0:d7:4d:08: c1:38:76:b4:b2:05:54:92:5d:8e:07:28:3e:be:a6: e5:82:f4:33:17:d6:7b:34:c3:9e:d7:79:e6:b5:dd: 75:cb:c5:cd:ae:97:c4:c1:55:c4:95:27:79:1e:85: 5c:d2:28:db:ae:39:00:a2:8c:1d:ac:c6:03:38:6f: 8b:c9:3a:fe:1b:02:02:d8:b3:67:4d:de:45:2d:a2: 96:e4:63:b3:2c:4a:a7:64:83:71:ef:88:8d:69:45: 05:2e:38:2d:6f:5e:3b:c6:45:1e:05:58:95:7c:8f: f4:6d:e6:81:8e:4c:bd:a5:b0:d2:70:77:21:8b:85: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A0:45:D1:59:99:47:B8:C2:C2:E1:4B:9A:CF:95:11:F6:68:9B:8E X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:63:f2:0a:8f:9c:ee:ad:4d:6a:0c:88:dd:fa:55:cc:76:cb: 4b:05:e6:69:c4:48:7e:ce:50:36:9a:13:03:76:19:ec:8e:48: 97:25:c1:d7:4d:de:75:05:8c:d4:9a:c5:b2:f2:ce:bb:39:ba: 91:4b:fa:08:f2:ce:8b:c7:67:c8:4c:d0:b1:0c:2b:a4:1e:7f: 3b:6d:94:15:0b:dc:cd:bb:98:89:eb:ab:c5:03:1d:8d:df:bf: cf:d4:de:12:e8:e8:84:84:b8:0d:01:b3:c1:01:35:64:05:97: 95:c2:39:43:ba:b3:ab:6d:b1:ed:5c:e0:29:40:42:7e:24:7d: 1d:25:7e:15:d7:e9:e2:e7:ea:6f:1b:a8:aa:ed:f4:d5:cd:86: ce:62:34:61:b8:0a:88:92:7f:65:71:d0:81:b9:10:bf:6d:bc: a8:ee:3b:1c:d8:f4:d4:7e:0e:1b:3c:4b:8a:c9:41:a5:e3:49: 11:e7:a3:46:38:16:33:c7:d6:e4:50:db:07:32:20:68:ab:fe: 84:3f:18:6a:98:4a:ac:b2:ea:04:ee:56:4e:88:3e:36:62:29: 58:a1:66:e0:67:1e:2f:c8:97:66:a5:a0:13:d2:28:7a:2e:5c: eb:ac:46:b4:57:f5:d8:de:3a:7a:8b:f7:af:44:b2:e0:7d:3f: cc:03:bd:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2JNcPToICFxmYiI5va0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUxMjIxMDIwMDUzWhcNMjUxMjIyMDIwMDUzWjAzMTEwLwYDVQQD Eyg2M2EwNDVkMTU5OTk0N2I4YzJjMmUxNGI5YWNmOTUxMWY2Njg5YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7IozT4B5vPD9zFfW9gGnWTowfle uHXy34qev+DD+0KQYxZq6a5ftrMZDdnkC5/hzfARE76Vt/Bmu4Y7z2C0M1gt7wxz LYQU7xpycZhQNsj89aV5b3H9xG64MZ7/oAi1+30EZlpl2nuhiRi6m/qMIdj8AfhD CHczTqRTt4OJ9wF26vDXTQjBOHa0sgVUkl2OByg+vqblgvQzF9Z7NMOe13nmtd11 y8XNrpfEwVXElSd5HoVc0ijbrjkAoowdrMYDOG+LyTr+GwIC2LNnTd5FLaKW5GOz LEqnZINx74iNaUUFLjgtb147xkUeBViVfI/0beaBjky9pbDScHchi4Vu1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOgRdFZmUe4wsLhS5rPlRH2aJuOMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmPyCo+c 7q1NagyI3fpVzHbLSwXmacRIfs5QNpoTA3YZ7I5IlyXB103edQWM1JrFsvLOuzm6 kUv6CPLOi8dnyEzQsQwrpB5/O22UFQvczbuYieurxQMdjd+/z9TeEujohIS4DQGz wQE1ZAWXlcI5Q7qzq22x7VzgKUBCfiR9HSV+Fdfp4ufqbxuoqu301c2GzmI0YbgK iJJ/ZXHQgbkQv228qO47HNj01H4OGzxLislBpeNJEeejRjgWM8fW5FDbBzIgaKv+ hD8YaphKrLLqBO5WTog+NmIpWKFm4GceL8iXZqWgE9Ioei5c66xGtFf12N46eov3 r0Sy4H0/zAO9Ew== -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:15 2025 by rpki-client