This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json) Hash identifier: iC7/b6bMODWmklX5c39fW76vu3UXDqzV4YUP6IFVa7Q= Subject key identifier: 17:FE:C9:14:C0:E9:BB:6C:34:53:9A:9A:6E:5D:7F:54:63:C0:A2:60 Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed Certificate serial: 019B4A70DCCCF404A9CC06D535926AF7E7D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft Manifest number: 02CC Signing time: Tue 23 Dec 2025 09:01:09 +0000 Manifest this update: Tue 23 Dec 2025 09:01:09 +0000 Manifest next update: Wed 24 Dec 2025 09:01:09 +0000 Files and hashes: 1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: Hw/ALFbfi4VUSmvW7tK9Ah43nVTm7HU1vGMUPBuV70M=) 2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:dc:cc:f4:04:a9:cc:06:d5:35:92:6a:f7:e7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed Validity Not Before: Dec 23 09:01:09 2025 GMT Not After : Dec 24 09:01:09 2025 GMT Subject: CN=17fec914c0e9bb6c34539a9a6e5d7f5463c0a260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:cd:6d:ab:e0:69:e6:2b:36:f3:c2:4d:84: 5b:ca:b0:b3:9e:e2:d5:80:34:ba:47:14:2d:88:b0: 6e:a9:e8:bc:dc:e0:9a:c3:83:16:90:60:ca:27:24: 1b:86:a7:a3:28:d7:3d:ea:f3:b9:f2:50:66:d2:4a: e4:40:f7:05:8f:c1:27:fd:f8:a0:5b:51:c5:e2:13: e6:f1:93:47:81:ef:0d:13:34:3e:1f:cc:af:c6:86: a4:41:25:51:1d:03:7d:42:6a:71:ad:67:9f:67:30: 8e:81:b0:84:03:99:40:0a:87:61:7d:b8:36:bf:b3: 65:e3:a3:69:a8:0a:06:66:ef:d3:fb:f7:5e:91:11: f5:62:7c:94:06:ba:76:ce:6f:b4:09:d6:c7:29:8f: 8b:8b:47:24:a0:ed:5f:a0:37:95:b9:b7:b7:97:87: 8e:00:70:72:8b:c8:88:db:a2:6a:ff:08:2d:c1:2e: 71:d4:d5:a9:b8:b4:03:b4:16:38:a6:8c:74:59:df: 6b:ab:36:32:46:e5:d7:e1:dd:e9:97:c8:9e:0c:fe: 78:5c:b0:25:be:60:c8:75:f9:5b:8b:6b:af:1f:7a: 69:11:69:49:11:f4:5f:56:23:2f:e8:a4:34:3a:06: 1d:1c:f0:56:c5:17:0b:3a:42:b4:eb:17:13:fd:5b: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:C9:14:C0:E9:BB:6C:34:53:9A:9A:6E:5D:7F:54:63:C0:A2:60 X509v3 Authority Key Identifier: keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ee:00:93:38:7f:41:a7:6a:2d:12:d1:ac:d6:b1:db:40:b7: 62:21:35:63:f8:2b:b3:6c:9d:b3:7a:2c:b8:dd:2b:12:2a:b5: 40:dc:6d:82:11:d6:d4:41:b3:8c:f8:de:b4:3d:4e:02:8f:fa: bd:c3:e0:8c:bf:5d:61:07:4b:8b:3e:7f:57:62:94:13:7b:72: b7:fc:2a:98:55:53:f0:7d:c0:a0:68:f9:31:9b:eb:96:49:48: 4d:fc:4b:87:ed:7a:90:7d:f3:f3:55:6a:08:78:df:9e:e1:d2: 77:c2:a6:cf:81:07:5c:d0:3f:fe:1f:bb:ba:bd:16:9f:0b:2f: 71:62:43:7c:94:88:e5:54:e4:41:b0:01:18:95:35:aa:d0:5b: f7:af:01:75:26:8b:65:b4:ac:99:7d:e2:66:df:e0:66:d6:d0: fb:3f:a0:4f:42:65:83:1c:fe:c1:ee:1f:81:2a:48:e8:a6:dd: f5:33:ba:d1:c0:e0:29:6b:d1:a9:2a:bf:39:c4:e7:08:b7:c9: 62:2d:ba:98:76:97:8f:2c:26:3d:78:f1:9c:9b:b7:17:39:b9: b4:07:7e:03:d3:b9:d2:39:6f:12:76:7e:e7:97:7f:ed:3d:1e: bf:61:1c:c2:73:34:da:1e:34:13:bd:be:36:83:9a:e5:ae:c9: 0d:ce:ce:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcNzM9ASpzAbVNZJq9+fUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZDUxZmQ5MTc5NGFlMGNhMDdmMzkzMDczMGQwNjlhYWMx YjkyZWQwHhcNMjUxMjIzMDkwMTA5WhcNMjUxMjI0MDkwMTA5WjAzMTEwLwYDVQQD EygxN2ZlYzkxNGMwZTliYjZjMzQ1MzlhOWE2ZTVkN2Y1NDYzYzBhMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzTNbavgaeYrNvPCTYRbyrCznuLV gDS6RxQtiLBuqei83OCaw4MWkGDKJyQbhqejKNc96vO58lBm0krkQPcFj8En/fig W1HF4hPm8ZNHge8NEzQ+H8yvxoakQSVRHQN9QmpxrWefZzCOgbCEA5lACodhfbg2 v7Nl46NpqAoGZu/T+/dekRH1YnyUBrp2zm+0CdbHKY+Li0ckoO1foDeVube3l4eO AHByi8iI26Jq/wgtwS5x1NWpuLQDtBY4pox0Wd9rqzYyRuXX4d3pl8ieDP54XLAl vmDIdflbi2uvH3ppEWlJEfRfViMv6KQ0OgYdHPBWxRcLOkK06xcT/Vu7fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf+yRTA6btsNFOamm5df1RjwKJgMB8GA1UdIwQY MBaAFHXVH9kXlK4MoH85MHMNBpqsG5LtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85MTEwMWMtMzQzNy00ZjNjLWIxMjAt NzUyYzkzMzYzOWU1LzEvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85MTEwMWMtMzQzNy00ZjNjLWIxMjAtNzUyYzkzMzYzOWU1 LzEvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu4Akzh/ QadqLRLRrNax20C3YiE1Y/grs2yds3osuN0rEiq1QNxtghHW1EGzjPjetD1OAo/6 vcPgjL9dYQdLiz5/V2KUE3tyt/wqmFVT8H3AoGj5MZvrlklITfxLh+16kH3z81Vq CHjfnuHSd8Kmz4EHXNA//h+7ur0WnwsvcWJDfJSI5VTkQbABGJU1qtBb968BdSaL ZbSsmX3iZt/gZtbQ+z+gT0Jlgxz+we4fgSpI6Kbd9TO60cDgKWvRqSq/OcTnCLfJ Yi26mHaXjywmPXjxnJu3Fzm5tAd+A9O50jlvEnZ+55d/7T0ev2EcwnM02h40E72+ NoOa5a7JDc7OPQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:23 2025 by rpki-client