This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json) Hash identifier: 1Oc5DumUcd1KP7Nth8ImOxu6LOLa+ZBDyeRr1hW3ARs= Subject key identifier: B4:74:EA:C3:73:EB:BD:25:BE:63:DF:3E:A5:B9:AE:21:36:C9:BB:DE Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67 Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467 Certificate serial: 019B608A513D7289F2C73BFB40A66CB3B817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft Manifest number: 179D Signing time: Sat 27 Dec 2025 16:00:36 +0000 Manifest this update: Sat 27 Dec 2025 16:00:36 +0000 Manifest next update: Sun 28 Dec 2025 16:00:36 +0000 Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: zk0+S2ktAVkNt86/R3zM28Yl10lompmTRe5Hjf2xXhY=) 2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:51:3d:72:89:f2:c7:3b:fb:40:a6:6c:b3:b8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467 Validity Not Before: Dec 27 16:00:36 2025 GMT Not After : Dec 28 16:00:36 2025 GMT Subject: CN=b474eac373ebbd25be63df3ea5b9ae2136c9bbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:35:cc:f9:77:27:37:0b:31:dd:69:fc:83: 37:50:09:56:36:01:da:16:54:ae:9d:db:e2:31:69: a2:84:4e:4d:45:ed:69:00:0b:45:b8:94:ef:b9:e2: 48:44:41:48:f1:64:1b:bd:d3:bd:1d:36:fe:41:7a: ca:50:11:df:79:6a:d4:8a:6f:ab:bd:8b:39:42:ed: b3:e5:25:07:e3:f2:e8:f7:68:b7:54:c6:be:6c:10: 87:18:ca:c6:7e:21:05:be:93:ac:a9:c5:7a:03:37: 6d:1f:ec:cd:ec:6e:a2:8c:e8:c5:0c:89:34:3e:c2: df:a9:b0:e3:e6:bf:75:ea:07:f1:26:ce:02:83:70: cf:2b:b0:8f:27:8d:8a:87:0f:39:91:77:33:39:6b: 3f:b8:c9:97:8d:9f:41:77:3e:a5:05:23:ac:e4:e1: 9d:23:97:97:ee:cf:78:32:65:77:c2:b8:a7:03:e9: de:93:e3:3a:b9:ab:3f:7e:64:a2:5b:11:08:1e:18: 77:68:c0:2d:62:4b:47:0d:e2:8e:ad:e7:fc:68:ab: 62:19:6d:2d:0f:53:ec:2b:89:03:40:0d:47:a7:f5: 96:1d:f4:02:b7:70:68:b2:36:1f:42:5c:ff:c4:b3: 7f:8b:64:8e:85:e4:90:b7:3f:9d:87:45:60:0f:1c: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:EA:C3:73:EB:BD:25:BE:63:DF:3E:A5:B9:AE:21:36:C9:BB:DE X509v3 Authority Key Identifier: keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:04:a2:ad:69:79:2f:2b:ef:ee:dd:cd:5f:1f:8f:d2:e3:35: b4:69:c8:4b:37:52:2a:51:29:1b:f1:5d:80:2c:54:38:7a:0e: 18:13:cb:b0:bf:34:65:56:05:53:f1:e5:a6:68:24:85:f1:f2: 59:2d:f1:4b:6c:bd:37:fc:99:f3:94:b9:40:fa:73:96:2f:5b: fa:c9:3d:f6:1d:52:fa:4e:a4:89:cf:85:f3:e7:ae:8a:6b:bd: 88:0f:75:f8:6e:0f:ef:2c:44:e1:fa:ee:46:1f:b9:e5:8e:de: ca:b1:05:30:3f:a6:f2:64:4e:66:49:ce:b1:44:ae:23:04:0f: 31:ca:81:a6:09:7e:16:b8:7e:a6:0d:67:0c:c8:3a:35:85:85: 91:ef:c8:79:54:2d:2c:5c:da:d3:1e:ac:b4:ac:27:06:55:55: e1:6c:70:0e:73:77:88:d9:05:12:ac:5b:13:4d:55:d8:52:41: 1f:26:93:93:7d:fa:61:42:11:07:5f:8c:7e:73:0a:98:51:c9: 3e:89:a4:29:c6:8a:81:41:90:3d:66:1b:51:d1:10:7f:05:36: c6:e3:15:ee:6b:c0:6c:17:8d:2a:cc:27:63:d4:56:5c:55:7b: 16:90:6f:01:3d:f5:de:24:bc:93:1c:e3:ea:dc:8c:9d:95:76: d6:df:b4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgilE9conyxzv7QKZss7gXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDZlZmJlNTQ2NzFkNzFhNTkwNTFlMjlhMjQ0OGNkNmFm OGQ0NjcwHhcNMjUxMjI3MTYwMDM2WhcNMjUxMjI4MTYwMDM2WjAzMTEwLwYDVQQD EyhiNDc0ZWFjMzczZWJiZDI1YmU2M2RmM2VhNWI5YWUyMTM2YzliYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+g1zPl3JzcLMd1p/IM3UAlWNgHa FlSundviMWmihE5NRe1pAAtFuJTvueJIREFI8WQbvdO9HTb+QXrKUBHfeWrUim+r vYs5Qu2z5SUH4/Lo92i3VMa+bBCHGMrGfiEFvpOsqcV6AzdtH+zN7G6ijOjFDIk0 PsLfqbDj5r916gfxJs4Cg3DPK7CPJ42Khw85kXczOWs/uMmXjZ9Bdz6lBSOs5OGd I5eX7s94MmV3wrinA+nek+M6uas/fmSiWxEIHhh3aMAtYktHDeKOref8aKtiGW0t D1PsK4kDQA1Hp/WWHfQCt3BosjYfQlz/xLN/i2SOheSQtz+dh0VgDxz5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR06sNz670lvmPfPqW5riE2ybveMB8GA1UdIwQY MBaAFA3W775UZx1xpZBR4pokSM1q+NRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRidnZsUm5IWEdsa0ZIaW1pUkl6V3I0MUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zZWE0NzgtYTUwMy00N2QzLTg4ZjUt NDliZThkOTBmNTllLzEvRGRidnZsUm5IWEdsa0ZIaW1pUkl6V3I0MUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zZWE0NzgtYTUwMy00N2QzLTg4ZjUtNDliZThkOTBmNTll LzEvRGRidnZsUm5IWEdsa0ZIaW1pUkl6V3I0MUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgSirWl5 Lyvv7t3NXx+P0uM1tGnISzdSKlEpG/FdgCxUOHoOGBPLsL80ZVYFU/HlpmgkhfHy WS3xS2y9N/yZ85S5QPpzli9b+sk99h1S+k6kic+F8+euimu9iA91+G4P7yxE4fru Rh+55Y7eyrEFMD+m8mROZknOsUSuIwQPMcqBpgl+Frh+pg1nDMg6NYWFke/IeVQt LFza0x6stKwnBlVV4WxwDnN3iNkFEqxbE01V2FJBHyaTk336YUIRB1+MfnMKmFHJ PomkKcaKgUGQPWYbUdEQfwU2xuMV7mvAbBeNKswnY9RWXFV7FpBvAT313iS8kxzj 6tyMnZV21t+0IQ== -----END CERTIFICATE-----Generated at Sat Dec 27 19:24:46 2025 by rpki-client