This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: ZKgOklg0p3pgq9MxollKfGx15QxzTpQRrG15wf6HI5M= Subject key identifier: E3:43:00:C5:60:39:46:55:56:AA:4C:9C:F1:6E:2C:ED:97:61:C8:9A Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019B0E5BC2F915FE8BC1EDB6D8B9374FCE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0FDD Signing time: Thu 11 Dec 2025 17:00:53 +0000 Manifest this update: Thu 11 Dec 2025 17:00:53 +0000 Manifest next update: Fri 12 Dec 2025 17:00:53 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: cGaJQrFyE2Zcjl3l4SXu4dXuiys0by3xxdvup/jZ2fY=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: W8-PwKMzVrW65-R2fHKjqVUbX54.roa (hash: C0sW97okII2QoOOpXdKP/WHxFbjbFOar+kEl1869pAo=) 8: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 9: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 10: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 11: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:c2:f9:15:fe:8b:c1:ed:b6:d8:b9:37:4f:ce:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Dec 11 17:00:53 2025 GMT Not After : Dec 12 17:00:53 2025 GMT Subject: CN=e34300c56039465556aa4c9cf16e2ced9761c89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:6d:ba:fa:40:73:1a:e3:5c:cd:8e:88:0f: 9c:ec:02:fa:f9:50:32:93:a4:1b:71:4a:4e:77:84: 94:9a:17:12:0d:3a:4d:bf:8d:ae:04:fa:ac:5b:88: 97:28:fa:0c:cd:69:4e:5a:ef:25:a8:54:32:15:fc: 73:03:d3:8b:52:c6:91:4d:5e:a2:61:58:81:f5:fa: 2e:af:7d:c3:4c:da:e3:22:0c:47:98:48:2e:62:b0: a0:8c:e2:d6:61:73:e0:71:94:c9:fc:a3:b9:b8:68: 3a:52:32:cc:01:ca:bb:d6:2a:be:b5:3d:98:45:6c: 23:41:25:6b:f8:7d:4c:33:5f:f4:e2:c3:6a:29:e5: 73:47:4d:97:16:76:7f:c1:bb:43:82:81:77:1c:a6: 4e:5e:d5:33:9f:56:2e:9d:89:8b:7e:13:51:3d:3a: 2f:73:6c:da:e7:10:2d:8a:cb:7f:3a:27:a8:25:23: e2:d2:87:8f:da:54:26:c9:33:63:c4:0a:65:2b:ec: b4:3a:b8:80:6e:62:39:c1:73:af:cd:fc:eb:2b:23: 65:22:d0:09:37:0a:e1:1b:ab:37:56:17:73:36:20: c8:57:16:07:55:2f:c1:70:32:8a:ad:6f:12:f1:a9: da:af:15:53:f7:d8:6c:a4:74:e6:32:60:70:c2:90: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:43:00:C5:60:39:46:55:56:AA:4C:9C:F1:6E:2C:ED:97:61:C8:9A X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:97:04:81:0f:a4:9e:ec:b9:ce:d3:02:8c:4c:d6:42:bd:ad: 3e:65:16:26:a8:68:89:42:d7:f1:0b:3d:e9:41:10:9b:41:1d: fa:d9:b1:37:92:d6:6b:3b:d9:3a:c6:2a:15:2c:5c:fa:fe:17: b6:cf:9e:f8:27:3d:43:08:4d:ae:96:dd:61:3b:d7:1b:14:00: 28:6a:f0:93:2d:37:3b:18:62:9d:88:4b:20:f5:c6:6a:ab:49: c7:9f:f0:20:f4:1c:80:3b:23:ca:47:5a:fc:c9:8f:fa:f4:f2: 1f:8a:f1:c6:8a:e1:a8:97:ed:fe:89:de:70:7b:ae:74:26:99: 5c:d8:52:59:b2:1a:6f:cb:93:1b:70:33:bc:2f:ff:7d:94:cf: 7b:0a:b7:aa:20:d9:96:89:c0:0f:f4:97:26:13:23:a3:38:14: e5:b1:ce:97:80:e3:e0:08:ac:a7:4c:77:d3:57:ae:6f:af:d6: 48:da:c1:ab:00:60:55:60:98:18:a9:41:db:18:d2:cd:5f:9b: fd:ff:d4:15:1d:92:08:5f:4c:b5:35:4b:c1:c6:1f:b0:25:ea: 01:b5:4e:94:c1:55:45:5e:7b:04:21:cd:ed:27:53:9b:54:01: 6e:a6:5d:28:62:fc:b1:43:2a:a4:a4:a5:c2:48:35:58:6e:04: 23:16:a2:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW8L5Ff6Lwe222Lk3T84GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUxMjExMTcwMDUzWhcNMjUxMjEyMTcwMDUzWjAzMTEwLwYDVQQD EyhlMzQzMDBjNTYwMzk0NjU1NTZhYTRjOWNmMTZlMmNlZDk3NjFjODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YdtuvpAcxrjXM2OiA+c7AL6+VAy k6QbcUpOd4SUmhcSDTpNv42uBPqsW4iXKPoMzWlOWu8lqFQyFfxzA9OLUsaRTV6i YViB9four33DTNrjIgxHmEguYrCgjOLWYXPgcZTJ/KO5uGg6UjLMAcq71iq+tT2Y RWwjQSVr+H1MM1/04sNqKeVzR02XFnZ/wbtDgoF3HKZOXtUzn1YunYmLfhNRPTov c2za5xAtist/OieoJSPi0oeP2lQmyTNjxAplK+y0OriAbmI5wXOvzfzrKyNlItAJ NwrhG6s3VhdzNiDIVxYHVS/BcDKKrW8S8anarxVT99hspHTmMmBwwpDKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONDAMVgOUZVVqpMnPFuLO2XYciaMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZcEgQ+k nuy5ztMCjEzWQr2tPmUWJqhoiULX8Qs96UEQm0Ed+tmxN5LWazvZOsYqFSxc+v4X ts+e+Cc9QwhNrpbdYTvXGxQAKGrwky03OxhinYhLIPXGaqtJx5/wIPQcgDsjykda /MmP+vTyH4rxxorhqJft/onecHuudCaZXNhSWbIab8uTG3AzvC//fZTPewq3qiDZ lonAD/SXJhMjozgU5bHOl4Dj4Aisp0x301eub6/WSNrBqwBgVWCYGKlB2xjSzV+b /f/UFR2SCF9MtTVLwcYfsCXqAbVOlMFVRV57BCHN7SdTm1QBbqZdKGL8sUMqpKSl wkg1WG4EIxaiiA== -----END CERTIFICATE-----Generated at Thu Dec 11 21:39:19 2025 by rpki-client