This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json) Hash identifier: mz98ouFh0Fj21E9uPjyWO64XZLjDJHpbGIy7F27QbtM= Subject key identifier: 16:19:6B:85:1D:36:75:54:F3:DC:8E:D3:56:B3:2C:05:99:F6:14:18 Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd Certificate serial: 019B649E691F562936392BE94DC650357FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft Manifest number: 1332 Signing time: Sun 28 Dec 2025 11:01:01 +0000 Manifest this update: Sun 28 Dec 2025 11:01:01 +0000 Manifest next update: Mon 29 Dec 2025 11:01:01 +0000 Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=) 2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: V99PpMPM6Y+l/ePKXkz5wZygs/HTducPoUIbWXB7+eU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:69:1f:56:29:36:39:2b:e9:4d:c6:50:35:7f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd Validity Not Before: Dec 28 11:01:01 2025 GMT Not After : Dec 29 11:01:01 2025 GMT Subject: CN=16196b851d367554f3dc8ed356b32c0599f61418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:e5:1c:b1:b8:ed:91:b8:27:3d:4c:d5:b0: 14:0a:bb:04:e0:4d:8c:77:dd:49:96:f2:4d:57:97: 9e:a1:11:69:96:c7:79:80:85:50:fe:08:a4:5f:0f: 10:d0:94:17:8d:37:48:07:49:5a:a5:a0:e5:bb:ba: 7d:c0:b6:e5:51:12:4c:32:17:20:a7:2b:68:f9:f3: c4:20:0f:72:dc:9c:3d:41:c9:e1:71:2b:7b:5a:e6: 93:60:33:e6:61:3b:43:73:72:5c:dc:07:5c:2e:ca: a1:07:8d:79:52:6c:e2:e0:a4:e6:1a:43:49:ff:f8: 3a:aa:95:0f:aa:d5:13:9a:6b:7b:21:d8:dd:96:a9: 10:4f:6f:7a:b9:47:91:43:5e:92:ff:e7:15:35:a9: f2:57:3d:15:41:7b:76:8e:d5:b5:9c:80:43:6a:7f: 22:64:74:a4:22:08:4d:2f:cd:14:1d:b6:c4:f3:1e: dc:d8:77:ae:25:67:ad:a3:c7:c1:b8:dd:f2:48:9d: 98:a8:60:d0:c8:2f:dc:a5:87:de:55:22:23:3e:58: 11:36:da:63:88:51:9c:f5:c5:6c:df:15:f1:4d:f9: b1:4d:97:04:59:3f:d7:be:58:8c:f7:77:51:cb:1a: 75:87:c0:cc:b5:5a:82:ea:02:74:ab:4b:59:39:64: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:19:6B:85:1D:36:75:54:F3:DC:8E:D3:56:B3:2C:05:99:F6:14:18 X509v3 Authority Key Identifier: keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:74:b4:49:7e:ac:46:9a:64:3d:1e:1d:2f:25:2b:ec:b4:36: 0e:f9:fe:8c:81:ae:8d:0b:f7:5c:60:92:28:d4:d5:bf:bf:fe: f9:20:9d:68:34:b1:9c:11:53:4b:38:9f:b3:f2:a6:f3:ee:f6: fc:85:ae:cd:d0:0c:90:f0:e6:a0:12:a2:26:0c:f7:a8:2f:92: c3:a9:56:92:09:28:bb:64:8d:79:21:1f:7a:65:c4:24:79:cd: db:b8:1a:e6:a0:da:a8:51:03:f6:96:76:e8:7c:94:c4:e9:56: b4:96:74:1d:9a:de:01:d8:c5:86:27:cf:ad:6d:df:37:07:7d: 6d:9d:37:2b:2c:0c:d5:65:97:8c:38:82:59:2f:05:28:ea:05: 10:9f:bb:c2:5b:fc:ca:02:2f:a5:99:4c:75:12:f8:61:18:51: 93:10:2f:ef:21:ed:04:4b:2a:37:b4:01:a2:d7:86:0b:36:cf: 33:a2:e7:ae:00:7e:cf:78:2a:70:4c:84:9e:a8:20:fc:69:3c: 54:bb:93:96:31:49:e1:28:2c:c8:cf:03:cf:95:eb:bd:f7:01: e5:1f:56:b6:a7:38:5f:6b:12:cc:e6:3c:b6:b1:0d:cd:37:e4: 7f:d1:22:3e:19:6e:ee:12:e6:85:3a:69:22:0e:a7:54:d6:dd: 48:05:6e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknmkfVik2OSvpTcZQNX/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZGU2MzE3MzExZmU2ZDUzODU3N2MxN2ZlYzk4MmI4MmVl YTlhYmQwHhcNMjUxMjI4MTEwMTAxWhcNMjUxMjI5MTEwMTAxWjAzMTEwLwYDVQQD EygxNjE5NmI4NTFkMzY3NTU0ZjNkYzhlZDM1NmIzMmMwNTk5ZjYxNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7jlHLG47ZG4Jz1M1bAUCrsE4E2M d91JlvJNV5eeoRFplsd5gIVQ/gikXw8Q0JQXjTdIB0lapaDlu7p9wLblURJMMhcg pyto+fPEIA9y3Jw9QcnhcSt7WuaTYDPmYTtDc3Jc3AdcLsqhB415Umzi4KTmGkNJ //g6qpUPqtUTmmt7IdjdlqkQT296uUeRQ16S/+cVNanyVz0VQXt2jtW1nIBDan8i ZHSkIghNL80UHbbE8x7c2HeuJWeto8fBuN3ySJ2YqGDQyC/cpYfeVSIjPlgRNtpj iFGc9cVs3xXxTfmxTZcEWT/XvliM93dRyxp1h8DMtVqC6gJ0q0tZOWSAcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYZa4UdNnVU89yO01azLAWZ9hQYMB8GA1UdIwQY MBaAFA3eYxcxH+bVOFd8F/7Jgrgu6pq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGQ1akZ6RWY1dFU0VjN3WF9zbUN1QzdxbXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83OTRlODAtZTcwYS00MDQzLWJiNzIt ZWNhNDU0NWUxNzhiLzEvRGQ1akZ6RWY1dFU0VjN3WF9zbUN1QzdxbXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83OTRlODAtZTcwYS00MDQzLWJiNzItZWNhNDU0NWUxNzhi LzEvRGQ1akZ6RWY1dFU0VjN3WF9zbUN1QzdxbXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHS0SX6s RppkPR4dLyUr7LQ2Dvn+jIGujQv3XGCSKNTVv7/++SCdaDSxnBFTSzifs/Km8+72 /IWuzdAMkPDmoBKiJgz3qC+Sw6lWkgkou2SNeSEfemXEJHnN27ga5qDaqFED9pZ2 6HyUxOlWtJZ0HZreAdjFhifPrW3fNwd9bZ03KywM1WWXjDiCWS8FKOoFEJ+7wlv8 ygIvpZlMdRL4YRhRkxAv7yHtBEsqN7QBoteGCzbPM6LnrgB+z3gqcEyEnqgg/Gk8 VLuTljFJ4SgsyM8Dz5XrvfcB5R9Wtqc4X2sSzOY8trENzTfkf9EiPhlu7hLmhTpp Ig6nVNbdSAVuXw== -----END CERTIFICATE-----Generated at Sun Dec 28 18:58:47 2025 by rpki-client