This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json) Hash identifier: zdHURT+xpAX44C7zMTFtM/yJ1UYktk68l3dlVTfH12s= Subject key identifier: C5:B6:F7:90:12:AE:F9:32:B8:53:D7:8A:58:D9:B6:35:67:F3:35:E5 Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a Certificate serial: 019B3E6C4D4E472A1885642FC85CA69C8863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft Manifest number: 0345 Signing time: Sun 21 Dec 2025 01:00:43 +0000 Manifest this update: Sun 21 Dec 2025 01:00:43 +0000 Manifest next update: Mon 22 Dec 2025 01:00:43 +0000 Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: hoK9U9JK0dnn17VSSoIWkQlPTzBNKgLD/5PNxKvnhJY=) 2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:4d:4e:47:2a:18:85:64:2f:c8:5c:a6:9c:88:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a Validity Not Before: Dec 21 01:00:43 2025 GMT Not After : Dec 22 01:00:43 2025 GMT Subject: CN=c5b6f79012aef932b853d78a58d9b63567f335e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:21:2e:f5:ea:ff:f1:e3:15:01:d8:e9:f5: 99:5d:e7:7d:09:3c:68:1c:f6:bf:63:9b:38:ba:66: 58:54:40:1a:31:a0:b3:40:d7:ec:cc:18:26:6e:bc: 41:82:7f:2f:14:fe:94:4d:11:23:f3:aa:0f:2a:15: 01:b6:57:e4:bc:62:f8:a0:0a:ec:f6:16:a2:d8:c5: d6:d3:e8:3b:5a:ac:38:d4:f1:01:8c:d9:0d:f6:23: bf:50:57:e0:6f:98:d7:b6:53:80:ac:cc:cd:a9:52: b1:fa:ad:41:fb:4f:df:85:35:42:b4:ee:5a:e7:dd: f2:76:d2:00:9f:18:47:f8:dd:64:aa:f4:b0:42:e6: 10:a7:ec:4b:6b:85:a4:ad:09:a8:26:2d:70:42:eb: 6f:db:bc:73:77:ea:d1:78:5b:84:15:0f:c4:a0:77: 4e:2e:1e:9c:f5:d2:2b:30:2c:92:bb:66:a6:e2:0e: 51:03:54:b1:1d:50:3d:46:d7:b2:0f:b0:a2:c1:ca: 0f:85:bd:d6:82:c7:af:fa:79:b9:8f:9d:08:e8:eb: f6:96:10:76:41:2f:66:6e:c2:6b:fc:3b:e2:c0:a4: 77:b4:cd:80:f1:ff:b9:7f:3c:f1:0d:be:4e:2d:a5: b8:0f:e4:fb:91:2b:91:29:bb:d6:cb:dd:0c:04:21: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:F7:90:12:AE:F9:32:B8:53:D7:8A:58:D9:B6:35:67:F3:35:E5 X509v3 Authority Key Identifier: keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:02:14:de:18:59:3d:26:cb:ab:a8:27:34:51:54:e1:39:87: 41:f5:d4:de:26:94:13:88:86:cb:51:b3:84:f7:9d:9a:fb:fb: a1:99:57:52:bc:2c:93:32:a1:82:28:3e:f4:e0:1f:40:ca:f2: 21:5d:14:69:fe:00:37:80:ae:15:30:eb:ac:6b:8c:d8:df:0f: b5:8b:e4:6f:4e:a7:39:f4:01:1a:b5:bb:4e:ce:04:d7:08:90: 0a:e1:7f:b8:50:64:47:cb:e4:bf:a1:e2:71:74:da:97:b3:da: 03:bf:24:8c:6c:ad:5b:78:be:9d:65:3d:e8:8e:c8:3d:a8:af: 86:54:0d:38:7a:fe:27:d3:cd:33:ca:c9:cc:93:65:d0:6c:53: 92:60:42:3a:cf:37:d5:68:8a:d5:2e:d6:23:23:55:76:73:4d: f2:12:02:a9:17:2d:09:f4:8e:6b:68:95:b8:7b:19:19:64:60: a7:aa:a9:a6:2c:57:a1:c3:0b:fb:45:f1:07:b5:7f:1b:c0:89: 90:45:53:ea:08:37:39:2b:96:3e:5d:aa:7b:67:ed:37:aa:ca: e3:48:93:13:fb:14:de:4a:76:1c:da:e8:f1:3c:0f:84:df:17: ac:e1:fe:8c:72:f7:ec:74:0f:04:6b:4a:7c:c4:4c:05:b4:5f: 94:9c:ad:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bE1ORyoYhWQvyFymnIhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj MWMzMWEwHhcNMjUxMjIxMDEwMDQzWhcNMjUxMjIyMDEwMDQzWjAzMTEwLwYDVQQD EyhjNWI2Zjc5MDEyYWVmOTMyYjg1M2Q3OGE1OGQ5YjYzNTY3ZjMzNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKEhLvXq//HjFQHY6fWZXed9CTxo HPa/Y5s4umZYVEAaMaCzQNfszBgmbrxBgn8vFP6UTREj86oPKhUBtlfkvGL4oArs 9hai2MXW0+g7Wqw41PEBjNkN9iO/UFfgb5jXtlOArMzNqVKx+q1B+0/fhTVCtO5a 593ydtIAnxhH+N1kqvSwQuYQp+xLa4WkrQmoJi1wQutv27xzd+rReFuEFQ/EoHdO Lh6c9dIrMCySu2am4g5RA1SxHVA9RteyD7CiwcoPhb3Wgsev+nm5j50I6Ov2lhB2 QS9mbsJr/DviwKR3tM2A8f+5fzzxDb5OLaW4D+T7kSuRKbvWy90MBCF09QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW295ASrvkyuFPXiljZtjVn8zXlMB8GA1UdIwQY MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt MmM2NjRjZTA4MDc3LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3 LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgIU3hhZ PSbLq6gnNFFU4TmHQfXU3iaUE4iGy1GzhPedmvv7oZlXUrwskzKhgig+9OAfQMry IV0Uaf4AN4CuFTDrrGuM2N8PtYvkb06nOfQBGrW7Ts4E1wiQCuF/uFBkR8vkv6Hi cXTal7PaA78kjGytW3i+nWU96I7IPaivhlQNOHr+J9PNM8rJzJNl0GxTkmBCOs83 1WiK1S7WIyNVdnNN8hICqRctCfSOa2iVuHsZGWRgp6qppixXocML+0XxB7V/G8CJ kEVT6gg3OSuWPl2qe2ftN6rK40iTE/sU3kp2HNro8TwPhN8XrOH+jHL37HQPBGtK fMRMBbRflJytPw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:10 2025 by rpki-client