This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json) Hash identifier: oEdgIokCACsY8DSOhBOSS2zAlFo3MuocVJoGu38nup4= Subject key identifier: 2C:C3:5E:2F:DF:82:7B:D3:7F:FF:49:F6:8A:80:A6:C7:05:3B:B3:3A Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Certificate serial: 019B405B1111C7107B8AF3C240525FA3070E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 10:01:08 +0000 Manifest this update: Sun 21 Dec 2025 10:01:08 +0000 Manifest next update: Mon 22 Dec 2025 10:01:08 +0000 Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 7zD0yjeu5crMCiVnI5OwJi9Ly5HxpdJdxDO9LRnXMo0=) 2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:11:11:c7:10:7b:8a:f3:c2:40:52:5f:a3:07:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Validity Not Before: Dec 21 10:01:08 2025 GMT Not After : Dec 22 10:01:08 2025 GMT Subject: CN=2cc35e2fdf827bd37fff49f68a80a6c7053bb33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:c3:eb:ce:28:53:9d:98:c7:98:65:93:21: 1d:c2:19:83:0f:1b:e7:d1:51:55:c2:63:f1:6e:9f: f2:fa:ae:e6:53:d8:cd:dc:96:9e:af:a2:0d:b6:d6: ab:6a:0e:b1:4a:58:27:37:e3:0f:70:a5:ef:b1:f8: 45:c3:3d:dc:cb:81:ea:e3:f2:e3:ab:cf:83:89:62: fb:6a:e2:e0:c5:5b:9a:bb:c4:c2:fe:64:32:d0:a9: e3:4c:b1:fb:f9:29:c1:6a:bd:db:d9:04:1e:90:79: c9:72:7a:f2:2c:ec:ea:12:15:85:c9:6c:66:db:23: 9c:c0:8f:c9:2e:6a:3a:34:a6:44:cd:ff:07:3d:c0: b7:61:a0:ae:13:ba:ff:b0:24:17:b1:4d:2a:b3:07: dc:e4:cf:3c:47:1c:6b:61:46:e1:7d:62:d0:a2:4f: b7:78:bb:14:95:a3:c7:52:db:36:c0:9b:74:83:83: 9a:ba:5a:24:68:46:42:7e:6f:b7:ef:ab:75:65:50: ca:38:bb:39:07:bf:a7:3e:ea:6a:f6:9e:82:e6:3c: 57:9d:b2:b6:3a:d2:b7:6d:08:66:37:91:85:56:be: b0:84:4f:b6:83:ca:59:19:ca:ab:32:85:94:18:0d: e9:a3:70:e8:7f:7b:a8:a9:58:1e:81:be:75:a9:e5: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:5E:2F:DF:82:7B:D3:7F:FF:49:F6:8A:80:A6:C7:05:3B:B3:3A X509v3 Authority Key Identifier: keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6d:25:62:1d:10:ae:e1:5c:db:c6:df:6a:af:08:4b:87:c0: 06:f0:7c:ee:a3:34:7e:8a:f7:d7:1a:f3:ff:6c:4f:05:91:be: b7:bf:16:49:26:8c:3b:db:73:26:08:79:f7:0d:1e:e3:9a:c9: fa:a1:3c:5e:9e:d1:f2:e2:f9:11:d4:4d:fc:b7:71:35:72:86: 8e:6a:42:cc:7d:57:54:6a:69:8f:c3:43:7c:bc:50:64:b5:1a: ea:2d:cd:31:28:19:d7:1a:27:1e:d0:56:12:b4:bc:ad:9f:a5: cf:02:08:da:76:c2:4b:6e:10:38:d1:cf:27:c6:e4:19:00:50: 62:60:8a:bb:a9:13:2a:e8:09:a1:a5:63:b1:dc:e7:02:f9:71: 88:3c:28:b1:56:39:68:c3:37:97:2f:b9:9b:ed:c5:3f:7f:1d: cf:8c:96:79:35:8b:37:ba:68:1a:2f:1f:5b:2a:2a:ea:ef:b9: 03:45:d8:20:e4:33:78:28:cc:6f:f0:0c:9d:86:95:e6:5e:e5: 55:f7:26:87:47:f3:cf:b2:6d:6e:b2:31:86:a9:a8:25:a0:3c: 78:65:c7:2f:49:91:73:98:62:ae:60:3a:03:27:24:00:d8:76: 07:26:2f:8c:9c:5e:87:88:ad:80:1e:d4:f0:94:c6:ae:47:85: d2:7c:7d:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxERxxB7ivPCQFJfowcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2 OTBmZjIwHhcNMjUxMjIxMTAwMTA4WhcNMjUxMjIyMTAwMTA4WjAzMTEwLwYDVQQD EygyY2MzNWUyZmRmODI3YmQzN2ZmZjQ5ZjY4YTgwYTZjNzA1M2JiMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RHD684oU52Yx5hlkyEdwhmDDxvn 0VFVwmPxbp/y+q7mU9jN3Jaer6INttarag6xSlgnN+MPcKXvsfhFwz3cy4Hq4/Lj q8+DiWL7auLgxVuau8TC/mQy0KnjTLH7+SnBar3b2QQekHnJcnryLOzqEhWFyWxm 2yOcwI/JLmo6NKZEzf8HPcC3YaCuE7r/sCQXsU0qswfc5M88RxxrYUbhfWLQok+3 eLsUlaPHUts2wJt0g4OaulokaEZCfm+376t1ZVDKOLs5B7+nPupq9p6C5jxXnbK2 OtK3bQhmN5GFVr6whE+2g8pZGcqrMoWUGA3po3Dof3uoqVgegb51qeVSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzDXi/fgnvTf/9J9oqApscFO7M6MB8GA1UdIwQY MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW0lYh0Q ruFc28bfaq8IS4fABvB87qM0for31xrz/2xPBZG+t78WSSaMO9tzJgh59w0e45rJ +qE8Xp7R8uL5EdRN/LdxNXKGjmpCzH1XVGppj8NDfLxQZLUa6i3NMSgZ1xonHtBW ErS8rZ+lzwII2nbCS24QONHPJ8bkGQBQYmCKu6kTKugJoaVjsdznAvlxiDwosVY5 aMM3ly+5m+3FP38dz4yWeTWLN7poGi8fWyoq6u+5A0XYIOQzeCjMb/AMnYaV5l7l Vfcmh0fzz7JtbrIxhqmoJaA8eGXHL0mRc5hirmA6AyckANh2ByYvjJxeh4itgB7U 8JTGrkeF0nx9gA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:04 2025 by rpki-client