This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json) Hash identifier: xiV+BMImYxSwo6GKttQvIf6pD7CoHKoF48lw86WV4+I= Subject key identifier: B9:62:5A:EB:BB:97:66:D4:C9:76:5E:23:33:AA:36:56:A9:19:B8:69 Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db Certificate serial: 019B4626B96C3DA0B6B1F877AE65342537B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 13:01:41 +0000 Manifest this update: Mon 22 Dec 2025 13:01:41 +0000 Manifest next update: Tue 23 Dec 2025 13:01:41 +0000 Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=) 2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: Zysyj+ui/G62QoR22s+zG3DQgzQGSjtaoiC9cYJgyrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:b9:6c:3d:a0:b6:b1:f8:77:ae:65:34:25:37:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db Validity Not Before: Dec 22 13:01:41 2025 GMT Not After : Dec 23 13:01:41 2025 GMT Subject: CN=b9625aebbb9766d4c9765e2333aa3656a919b869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:3c:56:d9:ed:e6:56:18:1c:2e:30:e6:9e: 5c:c7:e6:c7:93:c6:e3:6d:8f:92:26:01:de:13:30: 87:3a:6c:8b:5e:f8:c0:e5:0c:00:ed:a4:bc:e4:e9: 34:d0:84:36:50:a5:50:3d:6c:bd:5c:ec:f6:74:52: 09:2d:44:50:ae:9d:e9:f5:4a:58:3a:c4:cf:8b:3d: 49:b1:33:06:f6:5e:66:b7:20:65:82:f6:cd:ff:27: 38:61:1c:d6:51:f9:9b:ae:cb:8e:6f:23:98:99:92: 81:81:ef:d0:22:48:89:7a:2c:d7:9e:fc:d1:37:74: 57:39:1d:29:68:83:f9:f7:66:98:9a:ca:21:db:f0: f7:a1:0e:b2:cf:6c:a3:39:ae:85:ea:e7:e6:1a:1c: af:b4:9c:fc:7d:dd:43:4e:fa:6d:ba:00:b9:ef:1b: 4d:5a:58:0a:4f:e3:91:dc:7a:b0:08:7e:33:f8:5b: 0f:23:a3:4b:e4:30:7f:ed:1a:b3:ae:92:c4:20:b5: 5a:b2:3d:39:77:d0:29:99:a1:2c:d4:ea:19:9a:1f: 26:75:72:5f:46:41:56:43:80:05:8f:a2:48:ce:0d: 09:70:fe:e1:a7:f5:0e:97:19:ee:37:ce:b4:9b:f7: b1:1a:1c:38:57:c4:a9:0e:a8:a2:25:f9:5d:b0:25: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:5A:EB:BB:97:66:D4:C9:76:5E:23:33:AA:36:56:A9:19:B8:69 X509v3 Authority Key Identifier: keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:be:b3:69:c8:94:c0:f3:95:c0:b0:d9:8c:13:5c:80:30:48: 7c:0e:62:af:95:73:a5:35:d1:4d:1b:b5:49:b5:96:81:f7:6c: 86:91:fc:a4:5c:60:ad:2c:7c:45:04:92:6a:d2:f1:0c:7e:a5: 36:f4:02:03:2d:29:39:44:32:26:6a:1b:93:54:6f:fc:4a:57: 19:f9:9c:3b:ff:7f:bf:74:5a:5a:6a:9d:56:20:08:b6:07:f2: 9a:ba:77:72:cd:aa:a8:c9:7a:cd:7c:71:0f:aa:6e:d9:db:6b: 1c:23:bb:2d:ed:ee:01:ca:4d:d2:91:c5:5b:14:3c:c1:66:a3: 8b:1a:b3:44:e1:b0:61:66:c9:d1:51:39:71:03:dd:18:86:07: 36:bd:54:a3:90:ad:91:15:63:98:1f:a2:b7:8f:d5:fe:9a:3d: d3:24:60:5a:c8:5d:89:60:31:c9:f8:42:8b:73:e9:4f:43:a7: 10:1b:42:ea:b9:45:5c:4f:16:2d:d8:3a:8f:da:4b:5b:73:7a: ae:0d:00:38:80:51:e6:9b:1e:86:23:b6:ee:35:f9:2d:65:7b: df:a5:16:d1:ca:1d:cf:2a:74:c3:d6:5a:91:18:14:1f:62:f9: e1:0e:d4:39:3d:21:18:e6:7b:ee:e5:2c:2a:35:83:69:f5:84: e6:1e:33:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJrlsPaC2sfh3rmU0JTexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw ZWEzZGIwHhcNMjUxMjIyMTMwMTQxWhcNMjUxMjIzMTMwMTQxWjAzMTEwLwYDVQQD EyhiOTYyNWFlYmJiOTc2NmQ0Yzk3NjVlMjMzM2FhMzY1NmE5MTliODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup48Vtnt5lYYHC4w5p5cx+bHk8bj bY+SJgHeEzCHOmyLXvjA5QwA7aS85Ok00IQ2UKVQPWy9XOz2dFIJLURQrp3p9UpY OsTPiz1JsTMG9l5mtyBlgvbN/yc4YRzWUfmbrsuObyOYmZKBge/QIkiJeizXnvzR N3RXOR0paIP592aYmsoh2/D3oQ6yz2yjOa6F6ufmGhyvtJz8fd1DTvptugC57xtN WlgKT+OR3HqwCH4z+FsPI6NL5DB/7RqzrpLEILVasj05d9ApmaEs1OoZmh8mdXJf RkFWQ4AFj6JIzg0JcP7hp/UOlxnuN860m/exGhw4V8SpDqiiJfldsCVCPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLliWuu7l2bUyXZeIzOqNlapGbhpMB8GA1UdIwQY MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt Y2RlZTk5OTVlOWU3LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3 LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj76zaciU wPOVwLDZjBNcgDBIfA5ir5VzpTXRTRu1SbWWgfdshpH8pFxgrSx8RQSSatLxDH6l NvQCAy0pOUQyJmobk1Rv/EpXGfmcO/9/v3RaWmqdViAItgfymrp3cs2qqMl6zXxx D6pu2dtrHCO7Le3uAcpN0pHFWxQ8wWajixqzROGwYWbJ0VE5cQPdGIYHNr1Uo5Ct kRVjmB+it4/V/po90yRgWshdiWAxyfhCi3PpT0OnEBtC6rlFXE8WLdg6j9pLW3N6 rg0AOIBR5psehiO27jX5LWV736UW0codzyp0w9ZakRgUH2L54Q7UOT0hGOZ77uUs KjWDafWE5h4zbQ== -----END CERTIFICATE-----Generated at Mon Dec 22 18:56:36 2025 by rpki-client