This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json) Hash identifier: 8Ak6YyF0ia4ZKzVtF6/tfz4tuCgoXkVopVpFyf9PABE= Subject key identifier: C6:48:2A:F4:C8:A9:49:F4:96:9A:EA:55:74:70:AA:94:AB:FA:2D:AB Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Certificate serial: 019B35324AB1077ED91A23239050F6660FA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 06:00:46 +0000 Manifest this update: Fri 19 Dec 2025 06:00:46 +0000 Manifest next update: Sat 20 Dec 2025 06:00:46 +0000 Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=) 2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: WAku+ObdtAphZpnEp/dS7N0Ut3i0ZUyjuVDYbJE7gQY=) 3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:4a:b1:07:7e:d9:1a:23:23:90:50:f6:66:0f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Validity Not Before: Dec 19 06:00:46 2025 GMT Not After : Dec 20 06:00:46 2025 GMT Subject: CN=c6482af4c8a949f4969aea557470aa94abfa2dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:7c:4f:88:39:92:12:8d:3e:b0:68:08:41: 60:e4:96:b9:e4:6a:41:4b:27:49:90:8f:e3:38:a8: 54:14:22:a8:04:6f:59:d9:22:b0:84:18:2d:26:4b: a9:22:1b:1c:e4:5a:c3:6c:1b:f6:1d:dc:ae:30:5f: 69:1e:39:65:04:b3:d7:42:54:14:ef:13:4e:4e:32: e4:ac:3c:95:cc:47:f4:52:b0:e4:87:5f:60:3a:21: 4c:72:e1:9d:97:fd:90:aa:69:2c:ae:d4:8c:dd:25: b0:70:e1:57:0c:ad:d5:78:7d:5a:9e:ac:ea:f7:fc: 42:e8:0f:b9:b9:7c:85:d4:7d:0e:29:07:cc:a1:6e: 79:89:15:13:47:3f:64:04:d4:f1:bc:cc:a6:ac:80: ac:17:bc:06:39:de:01:2a:ec:09:0f:c6:21:0a:da: 37:17:49:b0:12:90:b0:b8:ea:aa:45:bd:b4:ca:4a: 2c:0f:90:a7:f2:8d:47:64:b5:54:0f:59:8d:b8:61: 15:e8:17:27:39:ae:71:78:7e:75:e5:cf:9e:04:3a: 69:87:a4:8d:79:01:02:3a:9c:dc:32:3f:cb:45:50: a1:68:44:d0:c8:92:2c:c3:97:53:66:cb:68:bc:f0: 2c:78:75:09:70:b6:eb:84:1f:f9:5c:95:c7:14:dc: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:2A:F4:C8:A9:49:F4:96:9A:EA:55:74:70:AA:94:AB:FA:2D:AB X509v3 Authority Key Identifier: keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:20:f1:20:2b:d9:05:c3:c7:3b:0a:d9:35:9a:2a:1d:3d:a7: 09:b1:cc:29:86:14:6a:10:bd:f9:3a:6c:a5:21:66:6e:ae:45: 6c:25:be:c1:09:5b:ef:26:2f:e7:e6:46:22:83:95:cc:df:41: d0:93:55:d7:8e:ef:2e:b7:a2:63:ee:e2:37:a6:17:60:b0:eb: 17:2a:27:fd:bd:bc:55:2e:0d:b2:ac:81:84:d3:3f:b8:97:f4: 99:b1:3b:97:98:b2:d9:23:d6:93:3f:bb:b5:51:92:f4:b1:e9: 77:69:73:19:c7:55:dd:ff:fe:12:2d:45:49:08:32:fb:84:27: d7:33:df:04:de:cb:4b:0b:de:17:e8:e1:56:2b:4f:09:87:69: b4:b8:f3:19:69:e2:b8:9b:53:b6:66:b6:7a:a7:9d:39:45:c7: 97:15:94:29:cd:08:74:35:53:cc:37:df:60:41:fd:c9:25:7d: 5f:db:cd:c0:cd:d6:71:bd:f3:f1:56:1a:ff:81:37:39:0d:7f: 6c:9f:9e:be:9c:c8:74:34:91:c3:36:18:c5:ef:0d:3b:ff:4e: 99:78:f8:c3:aa:96:88:2f:70:30:67:c0:d5:71:5e:cb:1f:26: e8:fa:7c:61:59:c4:1a:ef:c5:5b:97:c8:0d:4f:43:3a:54:99: 73:99:38:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MkqxB37ZGiMjkFD2Zg+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw YTIxNzYwHhcNMjUxMjE5MDYwMDQ2WhcNMjUxMjIwMDYwMDQ2WjAzMTEwLwYDVQQD EyhjNjQ4MmFmNGM4YTk0OWY0OTY5YWVhNTU3NDcwYWE5NGFiZmEyZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwt8T4g5khKNPrBoCEFg5Ja55GpB SydJkI/jOKhUFCKoBG9Z2SKwhBgtJkupIhsc5FrDbBv2HdyuMF9pHjllBLPXQlQU 7xNOTjLkrDyVzEf0UrDkh19gOiFMcuGdl/2QqmksrtSM3SWwcOFXDK3VeH1anqzq 9/xC6A+5uXyF1H0OKQfMoW55iRUTRz9kBNTxvMymrICsF7wGOd4BKuwJD8YhCto3 F0mwEpCwuOqqRb20ykosD5Cn8o1HZLVUD1mNuGEV6BcnOa5xeH515c+eBDpph6SN eQECOpzcMj/LRVChaETQyJIsw5dTZstovPAseHUJcLbrhB/5XJXHFNyi6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZIKvTIqUn0lprqVXRwqpSr+i2rMB8GA1UdIwQY MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0 LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSDxICvZ BcPHOwrZNZoqHT2nCbHMKYYUahC9+TpspSFmbq5FbCW+wQlb7yYv5+ZGIoOVzN9B 0JNV147vLreiY+7iN6YXYLDrFyon/b28VS4NsqyBhNM/uJf0mbE7l5iy2SPWkz+7 tVGS9LHpd2lzGcdV3f/+Ei1FSQgy+4Qn1zPfBN7LSwveF+jhVitPCYdptLjzGWni uJtTtma2eqedOUXHlxWUKc0IdDVTzDffYEH9ySV9X9vNwM3Wcb3z8VYa/4E3OQ1/ bJ+evpzIdDSRwzYYxe8NO/9OmXj4w6qWiC9wMGfA1XFeyx8m6Pp8YVnEGu/FW5fI DU9DOlSZc5k4dA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:28 2025 by rpki-client