This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json) Hash identifier: h2C06M8cJZRquOnlPvKRtUB0UUjMKvgxwbOntaXN/lw= Subject key identifier: 53:23:39:B8:FA:84:F8:AB:F7:02:36:67:35:CF:57:25:EA:99:35:14 Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc Certificate serial: 019B3B6B519118ED74DD2729F13022E3655E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft Manifest number: 123F Signing time: Sat 20 Dec 2025 11:00:47 +0000 Manifest this update: Sat 20 Dec 2025 11:00:47 +0000 Manifest next update: Sun 21 Dec 2025 11:00:47 +0000 Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=) 2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: e6aNLNIfhTt57yT3yJIzZIaQjJjhuZXH6Dqzk4/lz3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:51:91:18:ed:74:dd:27:29:f1:30:22:e3:65:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc Validity Not Before: Dec 20 11:00:47 2025 GMT Not After : Dec 21 11:00:47 2025 GMT Subject: CN=532339b8fa84f8abf702366735cf5725ea993514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b9:7c:89:9d:ef:fe:fc:40:77:3f:41:0e:a2: 61:da:2a:cc:54:79:d3:0d:83:25:38:5f:29:6a:8d: 2d:10:cc:54:01:2c:24:4e:67:5a:19:c6:c0:98:4c: 34:c6:75:11:52:b6:d8:7e:6c:3b:9b:52:3b:d2:ed: 16:70:b1:9b:c4:eb:d8:52:24:be:7c:4d:b2:4b:b4: 1d:ee:29:1c:33:2b:b1:11:50:8f:b3:c8:0b:a7:48: 4c:45:61:1c:3b:93:c2:9b:ff:23:d3:0c:6e:17:f6: 90:e2:40:e5:33:8e:f1:03:cd:9d:04:4a:17:62:47: 73:b8:aa:a1:1e:6e:27:31:b2:ff:4b:74:2d:97:f2: d5:cb:aa:fc:3c:02:e5:b6:b1:d7:f5:99:d2:8f:86: 7b:43:f2:ba:54:6d:18:5d:78:b5:e2:06:93:46:99: 2e:a4:f3:be:2b:d6:07:63:1c:64:12:35:b4:55:82: c2:3c:b7:8c:ed:6b:10:b7:6b:fe:2b:71:64:ce:cb: fa:71:94:d5:2d:96:b8:b6:fd:6c:fa:df:aa:45:b5: 44:53:42:98:b0:0e:92:37:1e:ce:96:ef:4a:46:15: 6c:e0:3d:18:50:7a:b4:d6:fc:5d:6c:af:d1:28:0c: a4:19:81:b3:aa:72:4a:57:6c:42:25:75:16:06:e7: 44:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:23:39:B8:FA:84:F8:AB:F7:02:36:67:35:CF:57:25:EA:99:35:14 X509v3 Authority Key Identifier: keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ee:dc:17:7c:22:14:64:ea:9a:82:bd:70:80:a1:98:44:af: c7:89:7d:7b:8a:57:32:a3:78:1c:f5:4f:1b:78:c2:90:b5:af: c0:69:24:a1:66:df:53:fe:3a:73:75:af:bd:80:82:62:8c:75: e1:69:fd:5a:e8:11:5b:bd:0f:31:06:1e:4d:6f:ef:41:9e:e5: b4:e6:2d:f3:ad:0e:cc:8f:f8:1e:e5:cb:0d:fc:ae:6c:4b:3a: 5f:34:c9:18:30:90:98:5a:ba:3e:54:9a:fa:4d:6d:45:ce:1d: b1:c5:50:0c:8f:87:6f:18:a3:1e:a6:8a:91:9f:3c:c3:e5:eb: f2:68:81:9e:57:82:eb:b1:e7:57:b3:3e:32:4b:57:db:7f:cb: 6a:89:e0:f9:46:53:68:ed:63:2a:9d:c3:f1:1c:e4:d3:53:9e: ac:5f:f7:9c:51:c3:ce:1c:a4:ae:47:5d:39:8b:32:99:0c:dc: 1d:f5:4a:d7:d7:63:a9:fa:c1:0a:61:ba:0a:aa:c3:14:62:e9: 37:14:9a:12:26:8e:2d:27:be:fd:d9:4c:97:cd:68:60:ba:e7: 98:0a:51:6d:f1:d2:4b:a7:3d:ff:30:7e:62:46:24:4e:e6:f1: 6a:63:ef:75:4e:6d:26:c0:e2:54:97:4e:c3:36:2a:dc:ca:69: ed:c9:77:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1GRGO103Scp8TAi42VeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDJmOGUwZGVhMTM4N2RhZjkwMzVkMmNkZjRlYjhjOTNh ZDg5Y2MwHhcNMjUxMjIwMTEwMDQ3WhcNMjUxMjIxMTEwMDQ3WjAzMTEwLwYDVQQD Eyg1MzIzMzliOGZhODRmOGFiZjcwMjM2NjczNWNmNTcyNWVhOTkzNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ll8iZ3v/vxAdz9BDqJh2irMVHnT DYMlOF8pao0tEMxUASwkTmdaGcbAmEw0xnURUrbYfmw7m1I70u0WcLGbxOvYUiS+ fE2yS7Qd7ikcMyuxEVCPs8gLp0hMRWEcO5PCm/8j0wxuF/aQ4kDlM47xA82dBEoX YkdzuKqhHm4nMbL/S3Qtl/LVy6r8PALltrHX9ZnSj4Z7Q/K6VG0YXXi14gaTRpku pPO+K9YHYxxkEjW0VYLCPLeM7WsQt2v+K3Fkzsv6cZTVLZa4tv1s+t+qRbVEU0KY sA6SNx7Olu9KRhVs4D0YUHq01vxdbK/RKAykGYGzqnJKV2xCJXUWBudESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMjObj6hPir9wI2ZzXPVyXqmTUUMB8GA1UdIwQY MBaAFA3S+ODeoTh9r5A10s3064yTrYnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAt YWE4NDg1Y2YzMDY4LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAtYWE4NDg1Y2YzMDY4 LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAke7cF3wi FGTqmoK9cIChmESvx4l9e4pXMqN4HPVPG3jCkLWvwGkkoWbfU/46c3WvvYCCYox1 4Wn9WugRW70PMQYeTW/vQZ7ltOYt860OzI/4HuXLDfyubEs6XzTJGDCQmFq6PlSa +k1tRc4dscVQDI+HbxijHqaKkZ88w+Xr8miBnleC67HnV7M+MktX23/Laong+UZT aO1jKp3D8Rzk01OerF/3nFHDzhykrkddOYsymQzcHfVK19djqfrBCmG6CqrDFGLp NxSaEiaOLSe+/dlMl81oYLrnmApRbfHSS6c9/zB+YkYkTubxamPvdU5tJsDiVJdO wzYq3Mpp7cl3vQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:30 2025 by rpki-client