This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json) Hash identifier: kdOmTi74wWAezxP+7YeDIBkP5RqNcC7/QBGav71vbCE= Subject key identifier: 4E:85:BD:E7:BF:59:43:28:FB:CB:A7:7C:97:C5:62:20:49:F7:60:8A Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Certificate serial: 019B43933C90826F81DB40E0CD7265DAFF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft Manifest number: 046E Signing time: Mon 22 Dec 2025 01:01:21 +0000 Manifest this update: Mon 22 Dec 2025 01:01:21 +0000 Manifest next update: Tue 23 Dec 2025 01:01:21 +0000 Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: E1ErhRyafAjTBX7awgJcqtzw0gZ1UFlJCdpritzdaho=) 2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:3c:90:82:6f:81:db:40:e0:cd:72:65:da:ff:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Validity Not Before: Dec 22 01:01:21 2025 GMT Not After : Dec 23 01:01:21 2025 GMT Subject: CN=4e85bde7bf594328fbcba77c97c5622049f7608a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:38:ea:ad:12:79:34:58:13:96:b7:56:13: f8:7c:cb:c9:71:65:ac:df:49:f1:29:e5:3b:47:8a: 4a:d3:57:4d:a4:38:3e:dd:4e:8c:5d:2a:4b:be:5d: eb:cd:75:f8:05:e9:3e:5f:ce:09:a1:b2:39:cf:e7: f2:01:3d:f7:4d:78:5b:9e:48:45:ac:39:27:2b:79: 7e:47:cb:5f:e4:e5:b2:6c:15:cd:eb:f5:01:f6:45: a5:ad:45:5f:8e:88:4c:a8:4b:81:c0:21:6f:03:79: 59:af:70:0f:64:6c:7c:90:ee:28:6b:bd:9b:7c:59: ac:2c:fb:2e:12:76:e4:26:7c:ab:21:08:7d:c2:73: 91:9d:56:fe:3d:86:74:69:92:74:9b:04:7a:db:a7: 0e:94:44:e2:fe:71:0d:d4:d6:af:99:28:0d:c9:16: 2a:ef:fc:26:b2:b2:7f:7d:72:67:40:03:4c:f3:ad: 4a:0a:88:cf:08:8e:1a:06:31:e8:1b:31:7f:3e:10: 95:a8:16:8e:aa:b9:df:3e:35:32:78:38:06:27:55: 08:00:ee:28:5e:e8:b4:d5:4e:59:59:b9:df:02:4d: 2b:f4:63:08:93:d6:67:db:17:77:4d:c2:44:c5:dd: ca:3a:f2:d6:12:54:94:c4:af:83:4f:4e:ce:32:5b: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:BD:E7:BF:59:43:28:FB:CB:A7:7C:97:C5:62:20:49:F7:60:8A X509v3 Authority Key Identifier: keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0c:2c:e1:8e:6c:06:c2:25:df:8f:67:7d:31:71:38:90:b2: b2:9e:4f:b6:85:d2:93:f7:d2:1a:a0:a4:6d:db:a4:26:c1:eb: 76:ec:09:0a:d5:52:e5:dc:b6:b1:fe:f8:bf:ab:1f:ad:4b:a2: f2:db:6a:41:e7:00:60:95:7c:f9:47:08:2e:87:21:cc:57:c7: c4:a1:ed:0c:fa:be:9b:70:a0:d4:6f:c1:b1:fe:4c:3d:cb:25: b2:8f:2a:38:22:fd:3f:3c:1b:d4:91:ef:8c:63:09:36:29:57: d1:78:35:a8:0e:e2:b9:6d:d3:ab:b6:82:79:de:01:1a:3e:89: b6:02:10:ee:38:4d:30:c8:0b:1f:6c:05:76:93:9b:86:6b:b8: 3b:aa:28:81:fd:e8:6b:f7:ee:9b:b1:0b:c9:36:49:79:95:d0: b0:7f:fa:e2:ca:ca:b2:c0:07:22:6a:01:7d:68:3e:33:6c:12: 7a:73:cd:a2:93:c7:7b:ac:f8:7d:c3:b0:74:c5:13:8c:c1:74: 8f:83:89:77:69:04:9e:a9:5a:2a:a9:2a:13:ab:0c:7f:8f:bf: 4d:64:a3:c3:7a:90:e8:03:86:5f:98:d0:62:5c:33:75:a7:ae: 82:56:65:9b:6e:4f:cb:81:08:39:bc:fd:60:cb:e0:83:24:5c: 12:11:c9:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzyQgm+B20DgzXJl2v9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzlkMDRhZDgzYWFjMWRlNWE5OGNkZjc2MjQwYTk3MzYy YzRhYzYwHhcNMjUxMjIyMDEwMTIxWhcNMjUxMjIzMDEwMTIxWjAzMTEwLwYDVQQD Eyg0ZTg1YmRlN2JmNTk0MzI4ZmJjYmE3N2M5N2M1NjIyMDQ5Zjc2MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47k46q0SeTRYE5a3VhP4fMvJcWWs 30nxKeU7R4pK01dNpDg+3U6MXSpLvl3rzXX4Bek+X84JobI5z+fyAT33TXhbnkhF rDknK3l+R8tf5OWybBXN6/UB9kWlrUVfjohMqEuBwCFvA3lZr3APZGx8kO4oa72b fFmsLPsuEnbkJnyrIQh9wnORnVb+PYZ0aZJ0mwR626cOlETi/nEN1NavmSgNyRYq 7/wmsrJ/fXJnQANM861KCojPCI4aBjHoGzF/PhCVqBaOqrnfPjUyeDgGJ1UIAO4o Xui01U5ZWbnfAk0r9GMIk9Zn2xd3TcJExd3KOvLWElSUxK+DT07OMlvBWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6Fvee/WUMo+8unfJfFYiBJ92CKMB8GA1UdIwQY MBaAFAw50ErYOqwd5amM33YkCpc2LErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTkt NDI3NDI5ZmNkNzRjLzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTktNDI3NDI5ZmNkNzRj LzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQws4Y5s BsIl349nfTFxOJCysp5PtoXSk/fSGqCkbdukJsHrduwJCtVS5dy2sf74v6sfrUui 8ttqQecAYJV8+UcILochzFfHxKHtDPq+m3Cg1G/Bsf5MPcslso8qOCL9Pzwb1JHv jGMJNilX0Xg1qA7iuW3Tq7aCed4BGj6JtgIQ7jhNMMgLH2wFdpObhmu4O6oogf3o a/fum7ELyTZJeZXQsH/64srKssAHImoBfWg+M2wSenPNopPHe6z4fcOwdMUTjMF0 j4OJd2kEnqlaKqkqE6sMf4+/TWSjw3qQ6AOGX5jQYlwzdaeuglZlm25Py4EIObz9 YMvggyRcEhHJMQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:07:04 2025 by rpki-client