This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json) Hash identifier: zt8iD+lB2JnHHkg2SDSPTih6JNU8/iW9ukFFGMTL28Q= Subject key identifier: AA:7C:34:46:ED:4F:10:8A:47:0C:CE:26:F1:7A:2C:C3:A5:CE:3E:AA Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Certificate serial: 019BAE389CDBCE5F1306A5DF27BDE58340AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 18:01:44 +0000 Manifest this update: Sun 11 Jan 2026 18:01:44 +0000 Manifest next update: Mon 12 Jan 2026 18:01:44 +0000 Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 0nMhQnZoZY517bG9XaUErT//z8SdHuVxSGqOGEUe/gU=) 2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:9c:db:ce:5f:13:06:a5:df:27:bd:e5:83:40:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Validity Not Before: Jan 11 18:01:44 2026 GMT Not After : Jan 12 18:01:44 2026 GMT Subject: CN=aa7c3446ed4f108a470cce26f17a2cc3a5ce3eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:76:9a:e8:a3:8e:c8:82:ea:f9:e9:bf:8c: 24:2e:9a:c2:b2:9e:63:58:bf:35:2f:31:f5:3e:48: 0d:44:df:87:6c:76:91:32:ae:e6:8e:a1:ce:d7:fc: 8f:85:d4:eb:0f:68:b5:8c:d3:6a:b8:07:41:11:70: d1:cd:73:5c:f8:3c:39:b3:1d:98:91:2f:88:4d:6b: f8:be:ee:87:3d:46:8b:28:25:de:6a:c2:3f:f1:c0: 9b:24:a7:b7:96:c6:94:29:ed:55:48:00:ba:be:0e: ab:63:f4:1c:e0:7f:aa:46:95:47:42:73:82:fc:af: 8d:81:11:c5:53:d5:8f:d1:b0:d6:d2:eb:5c:17:c7: 98:d2:c2:24:23:89:dc:d2:2f:e6:52:fe:3a:4e:7e: ca:d1:e3:bb:ad:10:64:94:09:4c:a2:dd:1b:70:89: c9:93:00:9f:1a:d1:7c:30:d6:6f:76:87:04:bf:0a: cc:2e:4c:86:f5:37:eb:c8:1d:c0:3b:c3:c8:4e:a7: bd:48:33:8e:0e:b2:47:75:6a:60:69:11:94:94:c1: e1:e8:ee:83:91:66:82:14:a3:0d:25:7b:3c:9c:eb: 7c:9d:4b:97:6a:b8:16:73:83:b9:d3:6d:1d:43:5d: 57:69:b4:5f:cf:f7:6e:09:5f:e7:30:66:64:7d:1d: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7C:34:46:ED:4F:10:8A:47:0C:CE:26:F1:7A:2C:C3:A5:CE:3E:AA X509v3 Authority Key Identifier: keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:56:41:87:20:79:a1:c3:f5:29:6f:c7:8e:0c:e5:ee:ef:9b: 3c:19:60:68:24:8d:e4:fb:77:52:55:a8:52:5a:a0:d2:0f:d6: b2:ca:a8:b5:de:f6:d1:2c:5a:5b:c6:40:b7:8b:1b:de:24:e1: 6c:d5:b7:39:45:e2:1f:c7:9c:43:19:12:fa:51:f5:6b:5c:e8: 40:63:07:c0:d6:1f:8e:56:83:58:a7:18:39:c7:6f:dd:22:65: 5f:25:82:43:a4:6d:c5:bc:6b:da:52:43:58:7f:e0:b4:51:0c: 6b:07:3b:e7:13:ed:74:76:ea:20:ab:97:59:e1:76:e1:b9:ca: c4:1b:f1:ae:8e:1b:a9:c0:b4:c0:37:a7:db:aa:75:80:35:b4: 7e:79:a4:20:f7:24:cf:9e:c7:09:fd:e1:2d:d2:16:62:68:fb: aa:89:f3:4c:5b:73:6f:54:b1:b4:69:dd:11:13:67:15:09:bd: f6:8d:9a:5f:75:96:fa:68:f5:99:e8:4e:df:71:02:5d:0c:e1: 8c:5a:6e:4f:27:08:42:d2:29:3a:b1:8c:ed:c0:9f:ab:db:a4: 82:d3:8c:e7:2d:9c:3d:12:19:76:19:a5:c4:80:8c:83:34:ae: b9:6c:5c:ce:10:a0:69:69:c2:77:03:dd:eb:c4:bf:90:ad:56: 20:c5:c1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOJzbzl8TBqXfJ73lg0CqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2 OTBmZjIwHhcNMjYwMTExMTgwMTQ0WhcNMjYwMTEyMTgwMTQ0WjAzMTEwLwYDVQQD EyhhYTdjMzQ0NmVkNGYxMDhhNDcwY2NlMjZmMTdhMmNjM2E1Y2UzZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTN2muijjsiC6vnpv4wkLprCsp5j WL81LzH1PkgNRN+HbHaRMq7mjqHO1/yPhdTrD2i1jNNquAdBEXDRzXNc+Dw5sx2Y kS+ITWv4vu6HPUaLKCXeasI/8cCbJKe3lsaUKe1VSAC6vg6rY/Qc4H+qRpVHQnOC /K+NgRHFU9WP0bDW0utcF8eY0sIkI4nc0i/mUv46Tn7K0eO7rRBklAlMot0bcInJ kwCfGtF8MNZvdocEvwrMLkyG9TfryB3AO8PITqe9SDOODrJHdWpgaRGUlMHh6O6D kWaCFKMNJXs8nOt8nUuXargWc4O5020dQ11XabRfz/duCV/nMGZkfR2XBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp8NEbtTxCKRwzOJvF6LMOlzj6qMB8GA1UdIwQY MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVZBhyB5 ocP1KW/Hjgzl7u+bPBlgaCSN5Pt3UlWoUlqg0g/Wssqotd720SxaW8ZAt4sb3iTh bNW3OUXiH8ecQxkS+lH1a1zoQGMHwNYfjlaDWKcYOcdv3SJlXyWCQ6Rtxbxr2lJD WH/gtFEMawc75xPtdHbqIKuXWeF24bnKxBvxro4bqcC0wDen26p1gDW0fnmkIPck z57HCf3hLdIWYmj7qonzTFtzb1SxtGndERNnFQm99o2aX3WW+mj1mehO33ECXQzh jFpuTycIQtIpOrGM7cCfq9ukgtOM5y2cPRIZdhmlxICMgzSuuWxczhCgaWnCdwPd 68S/kK1WIMXB8Q== -----END CERTIFICATE-----Generated at Sun Jan 11 20:39:59 2026 by rpki-client