This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json) Hash identifier: Oc2fNfdXvYNlc/EeElONz9MdOP5ZGOSn07z7cWCWm9o= Subject key identifier: DC:8A:69:76:81:61:05:1F:06:C7:2A:D0:56:8A:C3:B8:16:2D:B9:9B Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d Certificate serial: 019B6D3364F6E4BFD1D6226B97A1A23566CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft Manifest number: 05D4 Signing time: Tue 30 Dec 2025 03:00:43 +0000 Manifest this update: Tue 30 Dec 2025 03:00:43 +0000 Manifest next update: Wed 31 Dec 2025 03:00:43 +0000 Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: TJ1RDn2qniAbYqRPyN/Is5iToE5TMFAniMMa+4HyPYg=) 2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:64:f6:e4:bf:d1:d6:22:6b:97:a1:a2:35:66:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d Validity Not Before: Dec 30 03:00:43 2025 GMT Not After : Dec 31 03:00:43 2025 GMT Subject: CN=dc8a69768161051f06c72ad0568ac3b8162db99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:4a:2e:d3:4f:43:30:f5:41:23:30:5f:f1: cd:c0:0f:5c:b7:4f:6b:14:2f:2c:01:eb:1c:3c:ad: 25:ad:b3:ec:0c:06:bc:fb:40:dd:07:dd:ca:bb:eb: fd:e7:35:c8:e8:9e:39:98:0d:88:5b:71:7a:96:a0: cb:54:94:5e:23:76:df:af:d1:64:ac:65:01:a1:80: 78:e0:a9:bd:07:d5:c1:20:b4:19:d3:db:bc:56:0d: a1:01:e3:ac:74:d6:d8:e6:86:19:90:4b:27:a6:3d: cc:21:d7:08:07:93:17:20:13:34:62:07:c9:b5:af: 90:d0:17:9f:3a:9a:0a:d8:ed:4b:b4:e2:28:86:9e: 83:79:1a:82:7c:d5:c7:fb:97:1c:56:c4:e9:da:ea: 63:54:58:52:1a:8d:a3:43:96:65:9a:87:92:7a:79: 98:c3:39:03:f3:4f:2e:c8:e4:94:34:89:98:e6:07: ac:77:ec:e3:56:41:e3:2f:ba:e4:9c:3b:38:30:55: 1d:d1:4e:de:3d:f8:db:38:2d:46:3b:30:5f:23:b2: f1:be:cb:85:39:1f:03:b0:d5:64:5f:57:ac:0e:ad: d0:b0:1c:61:42:76:4d:f7:cb:28:1c:55:04:24:37: a3:c3:6d:52:ad:16:1b:2e:0f:09:a2:b3:f2:bf:23: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8A:69:76:81:61:05:1F:06:C7:2A:D0:56:8A:C3:B8:16:2D:B9:9B X509v3 Authority Key Identifier: keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:88:a5:42:14:43:f9:f4:af:56:63:62:0c:9c:c7:d2:07:f4: b7:b6:89:b1:a4:55:09:dd:87:a9:61:b0:88:b8:30:84:69:4c: 9d:80:44:78:ef:e0:d2:29:cb:77:59:f1:da:b1:54:24:60:71: 4a:5c:91:26:2f:bf:71:da:37:f2:6c:43:26:c5:90:f6:41:fe: e1:ef:ee:59:fe:14:c8:8e:15:ab:b4:91:dd:d5:15:51:92:e2: 36:2f:a2:80:30:93:b7:5e:99:97:eb:e3:ee:34:1e:44:6c:c9: b7:aa:05:f1:ce:9d:fc:cb:f9:c6:35:16:08:74:50:a6:c3:28: 2f:dc:a1:65:43:34:85:f9:ce:ad:12:74:e1:e4:3b:26:eb:e9: 91:b1:61:f1:13:6d:20:38:3a:a9:a5:12:9d:2b:07:32:96:2e: e9:03:61:fa:96:04:7d:25:5e:d4:1d:a1:2f:55:75:9a:56:ad: d6:b9:02:23:9a:7d:af:96:ee:79:33:77:b7:6b:6c:85:d3:bf: f1:02:fe:db:ca:9b:9a:2a:4d:38:12:94:2a:be:d2:9f:8d:5d: 42:ad:97:ea:32:a5:4d:e3:7e:e8:db:a2:48:7f:39:c0:db:98: a8:1c:57:9c:8e:2d:ff:42:5d:e7:f4:8c:53:ac:2e:51:08:e7: 7a:4a:50:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM2T25L/R1iJrl6GiNWbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDIyNDA4NjQ4N2VjODY2NmJhNjE1YzE1ZGM4ZjQ3OWRm NmE0OGQwHhcNMjUxMjMwMDMwMDQzWhcNMjUxMjMxMDMwMDQzWjAzMTEwLwYDVQQD EyhkYzhhNjk3NjgxNjEwNTFmMDZjNzJhZDA1NjhhYzNiODE2MmRiOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DNKLtNPQzD1QSMwX/HNwA9ct09r FC8sAescPK0lrbPsDAa8+0DdB93Ku+v95zXI6J45mA2IW3F6lqDLVJReI3bfr9Fk rGUBoYB44Km9B9XBILQZ09u8Vg2hAeOsdNbY5oYZkEsnpj3MIdcIB5MXIBM0YgfJ ta+Q0BefOpoK2O1LtOIohp6DeRqCfNXH+5ccVsTp2upjVFhSGo2jQ5ZlmoeSenmY wzkD808uyOSUNImY5gesd+zjVkHjL7rknDs4MFUd0U7ePfjbOC1GOzBfI7LxvsuF OR8DsNVkX1esDq3QsBxhQnZN98soHFUEJDejw21SrRYbLg8JorPyvyMe2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyKaXaBYQUfBscq0FaKw7gWLbmbMB8GA1UdIwQY MBaAFA3SJAhkh+yGZrphXBXcj0ed9qSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDkt Mjk3MTgwMDc5NDIyLzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDktMjk3MTgwMDc5NDIy LzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoilQhRD +fSvVmNiDJzH0gf0t7aJsaRVCd2HqWGwiLgwhGlMnYBEeO/g0inLd1nx2rFUJGBx SlyRJi+/cdo38mxDJsWQ9kH+4e/uWf4UyI4Vq7SR3dUVUZLiNi+igDCTt16Zl+vj 7jQeRGzJt6oF8c6d/Mv5xjUWCHRQpsMoL9yhZUM0hfnOrRJ04eQ7JuvpkbFh8RNt IDg6qaUSnSsHMpYu6QNh+pYEfSVe1B2hL1V1mlat1rkCI5p9r5bueTN3t2tshdO/ 8QL+28qbmipNOBKUKr7Sn41dQq2X6jKlTeN+6NuiSH85wNuYqBxXnI4t/0Jd5/SM U6wuUQjnekpQ4A== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:51 2025 by rpki-client