This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json) Hash identifier: tFGx2rlbOtt69o6zFlMmfoUj9CI8HVPZxsIb89Yef7M= Subject key identifier: B0:33:D4:8D:99:CA:73:B2:DD:CA:27:AB:BA:D0:E4:C4:09:CD:97:CD Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd Certificate serial: 019B514E1D8FD914ECAE62D63902ED45E78F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft Manifest number: 1328 Signing time: Wed 24 Dec 2025 17:00:32 +0000 Manifest this update: Wed 24 Dec 2025 17:00:32 +0000 Manifest next update: Thu 25 Dec 2025 17:00:32 +0000 Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=) 2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: NT2AYy69agVIWuggVrKsglHPS9i+cAXFfQ63a9jV9fY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:1d:8f:d9:14:ec:ae:62:d6:39:02:ed:45:e7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd Validity Not Before: Dec 24 17:00:32 2025 GMT Not After : Dec 25 17:00:32 2025 GMT Subject: CN=b033d48d99ca73b2ddca27abbad0e4c409cd97cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:3e:6f:de:c9:71:15:6d:a7:d2:1f:50:11: 5c:08:36:22:12:c8:45:1e:85:5c:8e:93:49:78:5f: 76:bd:df:9a:20:c1:5d:1c:eb:41:7e:8e:51:af:06: 3a:df:2f:fc:fb:54:4d:77:32:6b:b9:41:40:34:cf: 40:d3:6f:a3:ce:16:c2:8c:ea:30:ca:03:fd:11:42: a2:68:70:f1:19:3c:a6:93:b2:41:d9:4a:e0:1b:d8: e0:ad:21:02:18:72:64:7c:19:91:56:06:bd:c2:3a: e0:87:6e:7d:09:a7:a2:cc:14:11:e8:3c:38:11:de: 07:ae:dd:76:7d:a7:db:67:63:b0:d6:d9:05:51:8a: c6:04:8d:72:a3:dc:1e:fa:a8:d2:b0:31:b7:b6:10: f2:24:72:cd:d7:b8:ea:6f:6a:b7:f9:a8:ac:18:cc: 1f:b7:f6:7c:af:95:f6:c6:dd:08:05:cb:f9:ec:23: 58:e4:88:39:3f:4d:c9:26:7a:01:0b:80:cd:c3:6d: 79:ad:6e:ee:b6:c7:70:9f:dc:a5:78:19:3f:fa:df: 4a:ee:c4:d4:f2:f0:2b:1d:b8:05:3b:11:6f:58:65: 09:5c:18:fe:71:9e:bc:68:75:cd:1d:b9:ac:d0:b9: 56:8c:eb:4c:28:94:4b:5e:be:08:d4:4d:08:91:93: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:D4:8D:99:CA:73:B2:DD:CA:27:AB:BA:D0:E4:C4:09:CD:97:CD X509v3 Authority Key Identifier: keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:00:2f:9a:d0:ca:a6:63:9f:d9:83:11:a6:85:fe:c8:db:30: 06:f8:b3:e9:45:23:99:c9:47:17:0d:da:f8:85:91:59:3d:96: e9:80:54:fc:ca:79:04:fb:de:c4:fe:d8:36:4c:ce:ce:11:a1: 9b:36:f2:db:8e:cd:1b:f2:95:63:0a:2a:6f:61:82:ff:53:57: 53:5a:b0:86:ad:e3:97:28:93:b7:c2:b3:7c:9e:39:f8:8e:9a: 4c:02:31:26:78:d9:0a:c4:a3:d1:b8:72:f8:08:89:44:54:27: 75:41:f3:cc:0b:46:c1:c8:1c:b5:79:61:43:99:02:b6:35:17: 6f:b0:11:d5:1b:eb:69:2f:35:4f:2a:e7:82:f6:c8:ce:08:8d: f4:de:5c:6d:9b:85:bf:9b:b0:aa:4c:91:b8:a3:e3:e1:d7:72: 6c:30:54:71:fa:42:a1:f1:a8:b5:18:9c:c5:c0:35:a0:c2:7f: ce:b5:24:cb:3a:56:a6:dc:56:8c:92:ac:7e:d5:38:6e:d9:3c: 92:4c:ab:a3:79:02:31:2f:09:7b:56:1c:29:bf:47:ca:bc:07: 21:0d:80:a4:49:ce:9b:bf:44:2a:14:b2:1b:34:66:ad:4c:3e: 50:6d:f7:aa:4b:67:fc:2a:e2:72:16:87:30:fe:5f:ae:f9:da: 9b:5b:32:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTh2P2RTsrmLWOQLtReePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZGU2MzE3MzExZmU2ZDUzODU3N2MxN2ZlYzk4MmI4MmVl YTlhYmQwHhcNMjUxMjI0MTcwMDMyWhcNMjUxMjI1MTcwMDMyWjAzMTEwLwYDVQQD EyhiMDMzZDQ4ZDk5Y2E3M2IyZGRjYTI3YWJiYWQwZTRjNDA5Y2Q5N2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQo+b97JcRVtp9IfUBFcCDYiEshF HoVcjpNJeF92vd+aIMFdHOtBfo5RrwY63y/8+1RNdzJruUFANM9A02+jzhbCjOow ygP9EUKiaHDxGTymk7JB2UrgG9jgrSECGHJkfBmRVga9wjrgh259CaeizBQR6Dw4 Ed4Hrt12fafbZ2Ow1tkFUYrGBI1yo9we+qjSsDG3thDyJHLN17jqb2q3+aisGMwf t/Z8r5X2xt0IBcv57CNY5Ig5P03JJnoBC4DNw215rW7utsdwn9yleBk/+t9K7sTU 8vArHbgFOxFvWGUJXBj+cZ68aHXNHbms0LlWjOtMKJRLXr4I1E0IkZPf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAz1I2ZynOy3conq7rQ5MQJzZfNMB8GA1UdIwQY MBaAFA3eYxcxH+bVOFd8F/7Jgrgu6pq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGQ1akZ6RWY1dFU0VjN3WF9zbUN1QzdxbXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83OTRlODAtZTcwYS00MDQzLWJiNzIt ZWNhNDU0NWUxNzhiLzEvRGQ1akZ6RWY1dFU0VjN3WF9zbUN1QzdxbXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83OTRlODAtZTcwYS00MDQzLWJiNzItZWNhNDU0NWUxNzhi LzEvRGQ1akZ6RWY1dFU0VjN3WF9zbUN1QzdxbXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQAvmtDK pmOf2YMRpoX+yNswBviz6UUjmclHFw3a+IWRWT2W6YBU/Mp5BPvexP7YNkzOzhGh mzby247NG/KVYwoqb2GC/1NXU1qwhq3jlyiTt8KzfJ45+I6aTAIxJnjZCsSj0bhy +AiJRFQndUHzzAtGwcgctXlhQ5kCtjUXb7AR1RvraS81TyrngvbIzgiN9N5cbZuF v5uwqkyRuKPj4ddybDBUcfpCofGotRicxcA1oMJ/zrUkyzpWptxWjJKsftU4btk8 kkyro3kCMS8Je1YcKb9HyrwHIQ2ApEnOm79EKhSyGzRmrUw+UG33qktn/CrichaH MP5frvnam1syTA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:41 2025 by rpki-client