This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json) Hash identifier: mX028EKT4dYZvrWTdI1wh/LntiYfSRrdJkJuz0S9uLc= Subject key identifier: 19:EC:B0:4E:D4:CC:CE:31:FC:54:47:E0:FA:22:FD:0E:35:1F:A1:5C Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Certificate serial: 019B4F29506F43F4520EB7015F92DB4EF717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft Manifest number: 0474 Signing time: Wed 24 Dec 2025 07:01:06 +0000 Manifest this update: Wed 24 Dec 2025 07:01:06 +0000 Manifest next update: Thu 25 Dec 2025 07:01:06 +0000 Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: O6U547/QmSvY1c6OLzEcamP5aQbpQFjImEbvPjzZl94=) 2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:50:6f:43:f4:52:0e:b7:01:5f:92:db:4e:f7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Validity Not Before: Dec 24 07:01:06 2025 GMT Not After : Dec 25 07:01:06 2025 GMT Subject: CN=19ecb04ed4ccce31fc5447e0fa22fd0e351fa15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:a4:0a:27:51:bc:1c:44:2b:55:74:d6:f0: ac:3b:8b:dc:1b:f5:c4:2a:9d:b6:64:72:23:f6:62: 6e:eb:d0:59:4a:b0:d1:f3:74:a5:ef:96:39:91:54: 29:f7:3e:88:36:35:1a:8f:ad:55:2d:ed:01:8e:c0: b4:94:c1:2f:ca:b8:aa:99:72:44:f4:17:24:47:40: 47:58:ea:7d:52:a2:67:11:5d:84:e8:c1:98:45:fd: 84:9b:a5:52:d4:f8:8d:dc:1f:7d:91:9e:7e:a9:87: a3:cf:3e:0c:2c:4c:c9:5e:71:a8:c6:ab:bd:a2:96: 40:3d:94:43:f8:fc:fb:9d:57:71:de:00:6d:18:4f: 95:0c:b8:fe:a0:05:b0:0f:3f:b0:1a:24:03:36:96: cb:d8:09:50:a1:21:80:19:68:6a:7d:92:3d:46:cf: 3a:81:74:04:ca:e1:36:1d:c0:5b:62:88:dd:98:61: f6:12:10:12:07:33:f3:47:7e:b9:74:37:ad:d3:74: 42:a7:61:2f:e0:a8:48:22:7f:e2:8d:af:d8:af:36: 11:8d:99:24:a1:55:6e:24:fb:2c:1f:16:75:cc:86: c3:37:01:b1:68:23:65:39:dc:02:d1:cd:2f:2f:24: 8d:59:83:4b:b2:14:46:6d:1b:d7:37:94:f1:13:3d: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:B0:4E:D4:CC:CE:31:FC:54:47:E0:FA:22:FD:0E:35:1F:A1:5C X509v3 Authority Key Identifier: keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d0:7c:4d:d3:f1:36:e9:00:2d:ea:f5:a7:e2:17:99:85:75: ff:eb:ae:fd:b2:d5:77:2e:ee:77:66:a5:ba:de:15:a5:41:ee: 0e:e3:e8:f7:12:a6:86:85:de:44:93:d4:c7:a4:ba:19:58:d9: fc:40:c6:9a:2e:ad:48:8c:3e:be:2b:ce:d1:fe:3d:db:06:02: 16:28:97:10:f0:4c:3e:ba:ce:62:5a:be:18:f4:88:7c:92:99: b9:14:89:bc:45:ac:02:d7:5f:09:de:c2:ad:8d:a1:99:21:72: 47:3d:2e:a3:d9:98:36:b9:c8:68:f3:84:0b:b1:86:75:aa:4a: b7:14:65:9b:a4:c4:bb:71:64:81:88:07:33:44:d7:26:e5:f4: 0c:9e:56:2c:f4:f9:1c:3b:11:a6:7f:21:83:08:75:0c:29:7b: d8:db:c9:f8:35:46:af:1e:f7:71:50:bb:4c:11:19:3a:8e:67: 67:66:a7:2f:63:ee:a8:12:c0:28:62:f3:68:5c:f8:10:f3:31: 1a:7a:94:fe:a5:56:60:00:5e:40:51:08:fb:4a:39:c1:81:7a: 26:fa:d0:8f:c0:bf:c2:04:8c:a9:61:75:81:d2:64:14:22:fe: d5:4f:a7:c4:b8:96:1d:8a:1d:1b:57:5f:5a:f6:65:07:75:18: 44:c3:d0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKVBvQ/RSDrcBX5LbTvcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzlkMDRhZDgzYWFjMWRlNWE5OGNkZjc2MjQwYTk3MzYy YzRhYzYwHhcNMjUxMjI0MDcwMTA2WhcNMjUxMjI1MDcwMTA2WjAzMTEwLwYDVQQD EygxOWVjYjA0ZWQ0Y2NjZTMxZmM1NDQ3ZTBmYTIyZmQwZTM1MWZhMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUykCidRvBxEK1V01vCsO4vcG/XE Kp22ZHIj9mJu69BZSrDR83Sl75Y5kVQp9z6INjUaj61VLe0BjsC0lMEvyriqmXJE 9BckR0BHWOp9UqJnEV2E6MGYRf2Em6VS1PiN3B99kZ5+qYejzz4MLEzJXnGoxqu9 opZAPZRD+Pz7nVdx3gBtGE+VDLj+oAWwDz+wGiQDNpbL2AlQoSGAGWhqfZI9Rs86 gXQEyuE2HcBbYojdmGH2EhASBzPzR365dDet03RCp2Ev4KhIIn/ija/YrzYRjZkk oVVuJPssHxZ1zIbDNwGxaCNlOdwC0c0vLySNWYNLshRGbRvXN5TxEz2dnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnssE7UzM4x/FRH4Poi/Q41H6FcMB8GA1UdIwQY MBaAFAw50ErYOqwd5amM33YkCpc2LErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTkt NDI3NDI5ZmNkNzRjLzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTktNDI3NDI5ZmNkNzRj LzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9B8TdPx NukALer1p+IXmYV1/+uu/bLVdy7ud2alut4VpUHuDuPo9xKmhoXeRJPUx6S6GVjZ /EDGmi6tSIw+vivO0f492wYCFiiXEPBMPrrOYlq+GPSIfJKZuRSJvEWsAtdfCd7C rY2hmSFyRz0uo9mYNrnIaPOEC7GGdapKtxRlm6TEu3FkgYgHM0TXJuX0DJ5WLPT5 HDsRpn8hgwh1DCl72NvJ+DVGrx73cVC7TBEZOo5nZ2anL2PuqBLAKGLzaFz4EPMx GnqU/qVWYABeQFEI+0o5wYF6JvrQj8C/wgSMqWF1gdJkFCL+1U+nxLiWHYodG1df WvZlB3UYRMPQiA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:18 2025 by rpki-client