This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json) Hash identifier: HZ9MykxlmLOvwEqGuXGkfZcCaUFow1VTSUwFokquEg8= Subject key identifier: BB:72:3B:F6:0F:1C:DC:03:4E:78:C3:55:AD:26:52:B2:D7:92:48:97 Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68 Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68 Certificate serial: 019B33B258F5DFF9DBA6496D734D0CFDD8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 23:01:24 +0000 Manifest this update: Thu 18 Dec 2025 23:01:24 +0000 Manifest next update: Fri 19 Dec 2025 23:01:24 +0000 Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: h6huVwcpKzc25IdNauaTWCV/ksOb5CUfBUnJHhOM80U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:58:f5:df:f9:db:a6:49:6d:73:4d:0c:fd:d8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68 Validity Not Before: Dec 18 23:01:24 2025 GMT Not After : Dec 19 23:01:24 2025 GMT Subject: CN=bb723bf60f1cdc034e78c355ad2652b2d7924897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:ac:0b:9d:12:21:75:f4:3d:d4:23:42:f7: 33:0e:fd:52:a6:ee:b3:b7:3e:64:db:cf:bf:86:a6: ca:fe:9e:5e:d5:53:ee:8b:1c:3e:28:4d:88:c7:3a: a5:35:00:2e:05:3a:33:1d:62:e1:ff:9e:21:20:3e: c3:73:ae:5f:c2:85:20:63:39:2a:fa:b1:c7:ca:f2: d9:4b:d1:f3:92:ca:66:d2:70:d2:8f:a2:15:b0:23: 88:26:7f:3b:e3:96:df:fb:bb:67:3a:e0:29:c1:69: 86:82:52:a7:d4:e1:f8:92:82:a4:fd:5f:c0:29:f7: 84:7b:1e:90:3b:e8:f2:35:d7:91:ab:da:d9:91:7c: 7c:2a:d4:59:45:5c:ba:df:a8:bc:96:5a:08:1b:7e: 34:b2:5b:78:a0:8e:4b:13:8c:34:6d:49:a6:8d:e8: 86:e1:9e:35:d0:8d:04:cb:fa:de:19:9b:12:e8:c0: 5b:73:53:58:72:31:69:48:66:70:2e:b2:ac:8d:5a: dc:aa:1e:40:11:e0:89:9f:6f:5f:e5:5a:4a:6a:bc: a4:ee:84:d6:b7:81:d6:95:40:65:b8:e9:6f:19:7c: 82:5a:28:ae:62:29:d6:fc:4f:2e:a9:25:e4:e5:4b: 02:71:1d:aa:3a:29:8a:49:e2:73:9f:4d:3c:e8:7d: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:72:3B:F6:0F:1C:DC:03:4E:78:C3:55:AD:26:52:B2:D7:92:48:97 X509v3 Authority Key Identifier: keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a9:5f:28:e8:5e:a0:e5:b3:26:31:c8:68:a0:b6:10:04:ae: 4d:13:d7:ca:9b:0d:74:4f:f0:de:a4:00:d7:0a:aa:ea:a1:63: 60:91:b1:fa:f0:bb:00:5c:6b:77:2f:6b:bd:17:b3:d7:ba:68: ef:ea:1b:0b:9f:62:ad:3b:8b:6c:89:5d:36:06:0a:36:54:61: 37:2b:62:1c:85:04:a7:ab:93:69:58:e0:e0:e8:3f:87:01:77: ef:2e:61:34:c0:a5:9b:5b:45:58:9e:0c:58:e5:93:38:22:da: 97:dc:3e:56:95:59:1d:e4:75:a7:e9:01:87:0d:31:98:f4:12: 39:9d:9f:4b:16:0a:28:7b:dd:60:2c:2e:9b:18:5b:00:41:78: 9d:67:fa:71:8b:b3:07:31:38:39:3e:04:da:ae:11:89:ad:84: 8f:41:17:fb:7f:cc:9d:02:29:d9:4b:52:08:c2:fc:0c:f0:46: a2:14:c3:c9:ee:8d:14:4b:36:d6:a6:ce:c3:f6:54:05:b5:cf: 64:43:a0:78:7f:af:c0:bf:bc:65:56:40:ab:7c:32:dc:0a:e0: 8d:71:a5:ae:03:c7:f3:08:ba:23:76:88:ce:22:e8:bd:97:99: 6d:6a:56:6a:ea:0a:17:bd:a3:25:46:02:33:ad:7d:77:d6:7e: 80:03:bc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszslj13/nbpkltc00M/djXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2 NDFmNjgwHhcNMjUxMjE4MjMwMTI0WhcNMjUxMjE5MjMwMTI0WjAzMTEwLwYDVQQD EyhiYjcyM2JmNjBmMWNkYzAzNGU3OGMzNTVhZDI2NTJiMmQ3OTI0ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9GsC50SIXX0PdQjQvczDv1Spu6z tz5k28+/hqbK/p5e1VPuixw+KE2IxzqlNQAuBTozHWLh/54hID7Dc65fwoUgYzkq +rHHyvLZS9Hzkspm0nDSj6IVsCOIJn8745bf+7tnOuApwWmGglKn1OH4koKk/V/A KfeEex6QO+jyNdeRq9rZkXx8KtRZRVy636i8lloIG340slt4oI5LE4w0bUmmjeiG 4Z410I0Ey/reGZsS6MBbc1NYcjFpSGZwLrKsjVrcqh5AEeCJn29f5VpKaryk7oTW t4HWlUBluOlvGXyCWiiuYinW/E8uqSXk5UsCcR2qOimKSeJzn0086H2iRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtyO/YPHNwDTnjDVa0mUrLXkkiXMB8GA1UdIwQY MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqlfKOhe oOWzJjHIaKC2EASuTRPXypsNdE/w3qQA1wqq6qFjYJGx+vC7AFxrdy9rvRez17po 7+obC59irTuLbIldNgYKNlRhNytiHIUEp6uTaVjg4Og/hwF37y5hNMClm1tFWJ4M WOWTOCLal9w+VpVZHeR1p+kBhw0xmPQSOZ2fSxYKKHvdYCwumxhbAEF4nWf6cYuz BzE4OT4E2q4Ria2Ej0EX+3/MnQIp2UtSCML8DPBGohTDye6NFEs21qbOw/ZUBbXP ZEOgeH+vwL+8ZVZAq3wy3ArgjXGlrgPH8wi6I3aIziLovZeZbWpWauoKF72jJUYC M619d9Z+gAO86w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:42:54 2025 by rpki-client