This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json) Hash identifier: T2NsPDitAmXA/wGuZ74tFA4S0QtJMAOW/ThwhTWaIgU= Subject key identifier: 5D:47:1A:66:61:F3:79:E8:B4:42:C5:F3:1F:21:B4:22:E8:3F:E8:53 Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Certificate serial: 019B390F0BFFAAC7B05C2AC76988D0E79C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 00:00:45 +0000 Manifest this update: Sat 20 Dec 2025 00:00:45 +0000 Manifest next update: Sun 21 Dec 2025 00:00:45 +0000 Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=) 2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: FeyTLqqceRRnzZmRVshR0et2BfVNadujfr2LaqVvNVM=) 3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:0b:ff:aa:c7:b0:5c:2a:c7:69:88:d0:e7:9c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Validity Not Before: Dec 20 00:00:45 2025 GMT Not After : Dec 21 00:00:45 2025 GMT Subject: CN=5d471a6661f379e8b442c5f31f21b422e83fe853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:be:a7:f0:df:b2:48:1e:f2:f0:0e:0b:95: 2e:ff:75:c5:90:b3:bd:4e:8e:23:cf:13:36:c5:12: a0:2f:46:23:bf:49:79:0a:a4:5a:bc:03:76:d4:1b: 91:50:1a:c9:b5:fa:fb:da:c3:e8:9d:0c:a5:28:f4: a0:3f:30:49:86:a7:7b:c9:67:e2:c9:8f:49:ac:83: 34:53:c3:5c:88:91:a0:de:ed:7f:86:b3:47:4a:6c: 5c:cf:d8:4c:c8:a2:b0:65:8c:b9:b9:28:e5:a4:f9: 40:34:b0:96:80:a2:8a:91:df:b9:15:54:bf:d8:57: ed:57:af:cc:8c:72:cc:df:a1:32:00:31:3f:a8:d4: 96:73:7d:72:58:7b:90:ca:f1:56:27:6c:c7:6a:3d: 0e:e7:24:3e:4f:a9:de:9d:27:53:be:61:3b:93:bc: f9:35:b3:b0:b6:0d:c5:07:b2:82:38:91:87:ab:b2: 80:85:de:f3:3a:12:d9:4f:50:e1:a0:57:1e:9b:71: d0:0e:df:fc:7e:1e:38:12:15:b2:9e:a0:9d:14:f4: 3e:b1:1f:2e:db:24:8a:32:5c:14:8c:05:71:f7:cb: 21:27:49:f5:7c:ee:ec:bb:08:a7:44:89:65:59:69: ce:21:99:d0:c9:77:cf:2a:4c:1a:da:55:5e:ed:8b: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:47:1A:66:61:F3:79:E8:B4:42:C5:F3:1F:21:B4:22:E8:3F:E8:53 X509v3 Authority Key Identifier: keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fb:20:7f:68:91:41:34:49:bd:b2:46:62:e2:38:12:00:c1: d3:ed:3e:31:53:ce:51:45:9e:87:fd:bf:8d:ed:aa:0a:4d:e7: 44:36:b3:7d:55:20:6a:1e:a1:d2:7b:5f:8d:7e:0a:8b:01:28: 80:a1:7a:cf:d1:ad:fb:e9:ea:74:67:49:a6:2a:ca:13:f7:5c: 81:d8:23:a6:ea:7f:73:32:d2:10:64:34:49:47:b2:3e:9d:a7: 56:f1:90:77:a4:f3:91:a6:ab:46:3a:21:75:79:8f:cc:86:84: fe:98:1d:2c:b1:25:25:07:64:f5:72:25:2d:69:8e:f7:fc:8c: 70:c6:53:b8:87:86:18:e2:2e:11:ab:10:1c:f6:91:1c:91:df: 4a:28:0b:02:7d:be:13:09:d9:3b:26:84:b8:1c:01:de:e4:83: 8e:88:3b:53:d6:62:d4:d8:d8:e5:e2:be:2e:f7:d1:d3:2e:5a: ef:51:b5:23:6b:3c:81:5d:7e:d5:4c:c1:82:48:7a:e9:76:9e: 67:a3:78:f2:d5:f3:68:2f:c7:08:0c:9d:e3:37:60:12:b0:b7: 86:a5:87:27:18:43:c0:16:25:b0:9b:3f:42:d6:0e:4d:4e:50: 3a:8c:93:13:0f:72:d4:1b:29:41:82:68:ce:3b:21:f0:4f:04: 30:ca:52:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dwv/qsewXCrHaYjQ55xNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw YTIxNzYwHhcNMjUxMjIwMDAwMDQ1WhcNMjUxMjIxMDAwMDQ1WjAzMTEwLwYDVQQD Eyg1ZDQ3MWE2NjYxZjM3OWU4YjQ0MmM1ZjMxZjIxYjQyMmU4M2ZlODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyK+p/Dfskge8vAOC5Uu/3XFkLO9 To4jzxM2xRKgL0Yjv0l5CqRavAN21BuRUBrJtfr72sPonQylKPSgPzBJhqd7yWfi yY9JrIM0U8NciJGg3u1/hrNHSmxcz9hMyKKwZYy5uSjlpPlANLCWgKKKkd+5FVS/ 2FftV6/MjHLM36EyADE/qNSWc31yWHuQyvFWJ2zHaj0O5yQ+T6nenSdTvmE7k7z5 NbOwtg3FB7KCOJGHq7KAhd7zOhLZT1DhoFcem3HQDt/8fh44EhWynqCdFPQ+sR8u 2ySKMlwUjAVx98shJ0n1fO7suwinRIllWWnOIZnQyXfPKkwa2lVe7Yv3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1HGmZh83notELF8x8htCLoP+hTMB8GA1UdIwQY MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0 LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfsgf2iR QTRJvbJGYuI4EgDB0+0+MVPOUUWeh/2/je2qCk3nRDazfVUgah6h0ntfjX4KiwEo gKF6z9Gt++nqdGdJpirKE/dcgdgjpup/czLSEGQ0SUeyPp2nVvGQd6TzkaarRjoh dXmPzIaE/pgdLLElJQdk9XIlLWmO9/yMcMZTuIeGGOIuEasQHPaRHJHfSigLAn2+ EwnZOyaEuBwB3uSDjog7U9Zi1NjY5eK+LvfR0y5a71G1I2s8gV1+1UzBgkh66Xae Z6N48tXzaC/HCAyd4zdgErC3hqWHJxhDwBYlsJs/QtYOTU5QOoyTEw9y1BspQYJo zjsh8E8EMMpS1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 04:21:57 2025 by rpki-client