This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json) Hash identifier: PsRBpHZG28iiI8GgtbBJ6h+b4juhSil/l4efcFFBBHs= Subject key identifier: 9E:86:1E:48:8C:AA:CE:81:87:F7:49:F2:FE:69:A4:49:22:4F:A0:F7 Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e Certificate serial: 019B3C7F31EBAE652F7DA4F8A5FB45859715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:07 +0000 Manifest this update: Sat 20 Dec 2025 16:02:07 +0000 Manifest next update: Sun 21 Dec 2025 16:02:07 +0000 Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=) 2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: 82ZIBZx6TImAM563upPs6j7quruUgFZYYAdhp94Z+IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:31:eb:ae:65:2f:7d:a4:f8:a5:fb:45:85:97:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e Validity Not Before: Dec 20 16:02:07 2025 GMT Not After : Dec 21 16:02:07 2025 GMT Subject: CN=9e861e488caace8187f749f2fe69a449224fa0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:a8:7e:c2:7e:af:de:eb:02:50:b6:91:d2: 73:56:1f:e2:66:16:d2:04:45:af:c6:13:a2:1b:18: e5:8d:22:d9:c8:1b:a6:e7:ed:d5:3f:66:02:60:cf: 62:5e:0e:bd:f3:bb:6d:02:57:3a:50:95:61:4d:6f: dd:15:51:ea:b7:ca:6e:ae:b4:69:5c:74:13:5b:ec: 5c:93:e7:17:56:94:7f:80:0a:55:09:c5:73:7f:e2: 74:26:61:01:4d:ab:20:ee:23:2b:81:fe:d3:54:41: fd:b4:1c:bf:a6:95:bc:ce:69:b3:0b:d1:42:ef:76: 22:dd:26:73:24:31:a8:bb:a5:79:a6:b1:fb:65:51: b4:fe:f2:9c:11:f2:ef:35:21:8b:65:0c:21:e8:26: f3:d2:36:64:75:72:05:6d:c5:f6:6e:a4:b7:25:72: 44:22:d9:81:4e:e6:f7:c0:5d:63:f0:b6:e4:d9:a4: 10:fe:00:93:c0:3b:8d:10:f8:8d:4c:2b:ca:3c:ac: da:dd:16:21:7c:07:55:8f:19:8f:33:05:cd:81:b0: 25:4c:9c:b9:75:3f:74:72:84:d6:80:7c:70:2c:35: 59:5b:da:22:d5:6e:1e:35:33:ae:f0:79:19:3c:18: 49:80:d7:cd:a3:ff:90:5b:b2:22:7e:38:ad:2c:37: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:1E:48:8C:AA:CE:81:87:F7:49:F2:FE:69:A4:49:22:4F:A0:F7 X509v3 Authority Key Identifier: keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bd:9b:2f:33:f5:d7:47:45:4a:1f:9c:2f:cd:11:84:49:10: 8a:b8:79:56:98:23:0f:97:d7:74:2c:4f:0a:da:5b:ce:a8:9b: 02:5d:67:6c:9d:ec:5f:29:e6:08:1b:bf:af:8c:1d:dd:5a:d6: 40:e4:a8:f2:3e:70:d9:83:be:04:05:74:8c:28:22:88:05:07: 0d:4a:7c:a4:8d:a4:62:5e:1c:bb:44:9f:b7:a5:97:64:44:08: e6:b7:40:db:72:fb:9d:a7:7d:12:1b:61:0d:8b:75:e0:d2:01: 28:f8:04:b5:64:c6:dc:41:f3:35:a2:dd:9e:a7:1b:10:54:08: 05:fe:b0:d0:ca:48:51:20:a0:a8:da:48:fc:75:b7:7c:0e:c0: 08:3d:51:b5:47:f7:61:cc:31:ca:64:3d:e2:aa:ed:4a:f7:e4: a0:50:7f:3f:99:c9:19:c6:ff:49:b5:bb:99:e6:28:53:18:41: 44:03:2f:15:46:61:1e:db:00:a3:c6:96:7b:e1:ce:c9:91:05: 38:82:68:a2:5c:c8:e7:05:cc:6d:f9:a7:bc:0a:46:32:3b:fa: e8:d1:8f:bd:3c:66:f6:77:3c:70:38:5e:99:a4:2f:95:c8:d8: c2:2b:0a:6c:20:77:1a:29:58:26:56:d6:b6:e5:8b:94:f2:33: 15:b7:47:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fzHrrmUvfaT4pftFhZcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj ODZkNGUwHhcNMjUxMjIwMTYwMjA3WhcNMjUxMjIxMTYwMjA3WjAzMTEwLwYDVQQD Eyg5ZTg2MWU0ODhjYWFjZTgxODdmNzQ5ZjJmZTY5YTQ0OTIyNGZhMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue+ofsJ+r97rAlC2kdJzVh/iZhbS BEWvxhOiGxjljSLZyBum5+3VP2YCYM9iXg6987ttAlc6UJVhTW/dFVHqt8purrRp XHQTW+xck+cXVpR/gApVCcVzf+J0JmEBTasg7iMrgf7TVEH9tBy/ppW8zmmzC9FC 73Yi3SZzJDGou6V5prH7ZVG0/vKcEfLvNSGLZQwh6Cbz0jZkdXIFbcX2bqS3JXJE ItmBTub3wF1j8Lbk2aQQ/gCTwDuNEPiNTCvKPKza3RYhfAdVjxmPMwXNgbAlTJy5 dT90coTWgHxwLDVZW9oi1W4eNTOu8HkZPBhJgNfNo/+QW7IifjitLDdMbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6GHkiMqs6Bh/dJ8v5ppEkiT6D3MB8GA1UdIwQY MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0 LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr2bLzP1 10dFSh+cL80RhEkQirh5VpgjD5fXdCxPCtpbzqibAl1nbJ3sXynmCBu/r4wd3VrW QOSo8j5w2YO+BAV0jCgiiAUHDUp8pI2kYl4cu0Sft6WXZEQI5rdA23L7nad9Ehth DYt14NIBKPgEtWTG3EHzNaLdnqcbEFQIBf6w0MpIUSCgqNpI/HW3fA7ACD1RtUf3 YcwxymQ94qrtSvfkoFB/P5nJGcb/SbW7meYoUxhBRAMvFUZhHtsAo8aWe+HOyZEF OIJoolzI5wXMbfmnvApGMjv66NGPvTxm9nc8cDhemaQvlcjYwisKbCB3GilYJlbW tuWLlPIzFbdHNA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:57 2025 by rpki-client