This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json) Hash identifier: SNnWNAcQFslDYKPKsDBKfqhfSpNj2dnU6slf6RawL4E= Subject key identifier: 1A:61:DE:4C:E7:22:CB:87:FD:E7:1B:DB:91:F8:D9:89:D6:6E:2A:64 Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d Certificate serial: 019B44A61670474934AFE39A9E4FA4AF225F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft Manifest number: 0DA0 Signing time: Mon 22 Dec 2025 06:01:33 +0000 Manifest this update: Mon 22 Dec 2025 06:01:33 +0000 Manifest next update: Tue 23 Dec 2025 06:01:33 +0000 Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: ITsinvFx+9FZAKvqBQig2hUiIfB4SiI3vU4ZQToxfuU=) 2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:16:70:47:49:34:af:e3:9a:9e:4f:a4:af:22:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d Validity Not Before: Dec 22 06:01:33 2025 GMT Not After : Dec 23 06:01:33 2025 GMT Subject: CN=1a61de4ce722cb87fde71bdb91f8d989d66e2a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:ef:01:5d:dd:51:42:22:48:71:63:16:c4: f5:ff:a8:8e:44:b9:6d:4f:28:13:86:12:1f:29:6d: bc:e8:27:ec:23:01:35:97:46:48:af:f2:49:b3:5e: 0e:4e:13:8b:53:e0:a3:65:d6:a9:7b:7a:1f:c3:e9: 83:d7:ce:77:dc:c5:41:84:3d:0c:02:c9:91:e3:1a: f8:42:5c:64:1f:b3:96:55:6f:f9:14:bc:58:de:34: 56:19:86:8a:8f:87:31:98:38:4c:e5:8e:b2:58:01: 0c:3c:b5:3e:b1:95:90:a8:09:a9:6f:ed:89:e7:3c: 83:51:b8:48:c8:c1:ad:9e:ec:b5:e4:23:d6:f3:f0: c5:57:ae:77:05:3f:13:ee:4e:1e:6a:17:67:32:a1: 7f:ed:68:22:9e:db:3f:9a:1d:41:c5:7a:aa:42:30: 38:e9:75:ae:e8:c7:2b:9d:5a:33:4c:c8:cb:6f:44: 6a:c2:21:9d:4e:7c:66:8b:a3:f5:15:5e:8d:f5:20: 9c:ae:78:9e:1a:78:94:c1:52:40:5c:e9:f4:9a:2d: cf:b2:62:6e:10:0c:39:3f:ef:a8:db:28:71:4b:21: 6c:70:73:d0:b6:8f:b5:a1:f4:fd:0c:61:f7:c1:ce: 58:19:1d:80:ea:ad:78:cd:8a:7c:ec:e5:8a:b3:e8: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:61:DE:4C:E7:22:CB:87:FD:E7:1B:DB:91:F8:D9:89:D6:6E:2A:64 X509v3 Authority Key Identifier: keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ea:a7:ea:81:ae:a2:a0:cd:7b:e6:4b:3c:2f:fc:9e:37:47: 8b:5e:a5:c7:8e:4d:16:20:b6:55:c1:31:98:d0:e7:34:19:74: bf:3d:65:2a:c1:3c:d4:ec:ce:1f:70:6b:7c:83:4c:54:ee:03: 33:f6:ea:f4:3f:f4:76:31:e2:c6:99:4c:ea:30:df:a3:c6:1b: 1b:c5:3d:68:10:85:02:99:e4:87:a7:b9:99:43:32:fd:a1:67: c3:9e:7b:8b:41:80:ca:97:7a:4d:9c:bf:9e:a4:a1:6d:74:c8: 28:43:fc:94:5d:67:90:87:df:2d:60:8b:e8:9c:3d:83:8c:b7: 25:8d:e9:64:d3:f8:4d:72:38:84:62:d7:ee:f9:9b:53:f1:b8: c8:93:1f:bf:1f:46:4f:ad:20:77:92:3d:2d:5c:4b:4d:98:b9: dc:fd:55:ff:da:bd:4d:5a:08:98:ec:8a:6d:ff:48:46:ad:f5: b4:5d:f1:87:41:72:7a:3c:a4:7c:bc:76:df:3b:df:3b:8a:8c: 21:dc:32:c1:3f:14:a9:7d:6c:a4:ab:d4:de:2c:46:d5:b5:bf: 0d:33:8a:71:d0:ba:27:da:10:1f:bf:8b:b7:b2:5c:d7:95:90: ce:73:17:37:bf:4c:f1:7a:b8:26:76:4d:15:31:ff:ab:0b:8f: f4:26:4c:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEphZwR0k0r+Oank+kryJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw N2FjN2QwHhcNMjUxMjIyMDYwMTMzWhcNMjUxMjIzMDYwMTMzWjAzMTEwLwYDVQQD EygxYTYxZGU0Y2U3MjJjYjg3ZmRlNzFiZGI5MWY4ZDk4OWQ2NmUyYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10XvAV3dUUIiSHFjFsT1/6iORLlt TygThhIfKW286CfsIwE1l0ZIr/JJs14OThOLU+CjZdape3ofw+mD18533MVBhD0M AsmR4xr4QlxkH7OWVW/5FLxY3jRWGYaKj4cxmDhM5Y6yWAEMPLU+sZWQqAmpb+2J 5zyDUbhIyMGtnuy15CPW8/DFV653BT8T7k4eahdnMqF/7Wgints/mh1BxXqqQjA4 6XWu6McrnVozTMjLb0RqwiGdTnxmi6P1FV6N9SCcrnieGniUwVJAXOn0mi3PsmJu EAw5P++o2yhxSyFscHPQto+1ofT9DGH3wc5YGR2A6q14zYp87OWKs+geCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBph3kznIsuH/ecb25H42YnWbipkMB8GA1UdIwQY MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1 LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+qn6oGu oqDNe+ZLPC/8njdHi16lx45NFiC2VcExmNDnNBl0vz1lKsE81OzOH3BrfINMVO4D M/bq9D/0djHixplM6jDfo8YbG8U9aBCFApnkh6e5mUMy/aFnw557i0GAypd6TZy/ nqShbXTIKEP8lF1nkIffLWCL6Jw9g4y3JY3pZNP4TXI4hGLX7vmbU/G4yJMfvx9G T60gd5I9LVxLTZi53P1V/9q9TVoImOyKbf9IRq31tF3xh0FyejykfLx23zvfO4qM IdwywT8UqX1spKvU3ixG1bW/DTOKcdC6J9oQH7+Lt7Jc15WQznMXN79M8Xq4JnZN FTH/qwuP9CZMxg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:48:01 2025 by rpki-client