This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: wjXTdZj2WwWKZLlR3EsIZhoz8NsiifOc85vAbIr0YJA=
Subject key identifier: 32:A6:E7:5B:C9:29:5B:A2:26:60:3B:F7:83:74:EC:B1:10:AE:C0:82
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019B4248DF95ADB274D984426FE329D6538F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 16F8
Signing time: Sun 21 Dec 2025 19:00:30 +0000
Manifest this update: Sun 21 Dec 2025 19:00:30 +0000
Manifest next update: Mon 22 Dec 2025 19:00:30 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: qkoH2AtEsh/Ylck8L1zCKGzw5ZzZg8irQJ8832S3pCc=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:42:48:df:95:ad:b2:74:d9:84:42:6f:e3:29:d6:53:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Dec 21 19:00:30 2025 GMT
Not After : Dec 22 19:00:30 2025 GMT
Subject: CN=32a6e75bc9295ba226603bf78374ecb110aec082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:50:ce:aa:3c:7d:58:8d:b5:fe:6b:02:0d:
87:4a:6e:70:ca:0b:e5:b8:fb:0b:bc:00:ed:76:cf:
c9:50:8f:dc:28:d2:0e:c2:25:90:29:6d:14:f8:a9:
bd:fc:8b:73:15:89:85:1a:ce:f3:72:b4:c8:0d:4f:
84:d2:2f:36:79:66:79:ee:be:1a:e5:d7:0d:26:1c:
dd:87:24:a5:67:73:9a:6f:83:93:68:99:2f:4e:c9:
8e:7a:6e:a7:5a:9e:6b:bb:c2:92:0d:99:42:08:85:
56:e3:2d:23:40:bd:1d:c7:e7:48:83:38:ed:98:33:
2d:45:89:d4:b4:8b:97:66:ea:8d:d6:c5:29:6b:c7:
cb:af:e6:d4:57:5e:48:57:8b:ef:92:e3:41:74:19:
c9:54:6e:ae:5e:b4:61:8c:26:50:96:4a:99:32:89:
25:41:7c:07:04:63:db:c3:32:02:25:be:ce:7f:09:
33:5a:c6:2e:ad:db:e2:38:94:b8:f8:10:5f:a6:cb:
41:6c:9a:43:ca:97:2c:34:1c:dc:af:75:e1:22:d1:
57:ad:92:05:89:95:5e:6a:15:1b:9e:a0:4f:b7:0d:
f5:a4:cd:61:b0:d8:0e:54:a8:87:8d:a4:c8:de:05:
70:b9:2f:bd:d3:20:de:da:14:c5:e6:37:b9:33:c3:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:E7:5B:C9:29:5B:A2:26:60:3B:F7:83:74:EC:B1:10:AE:C0:82
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3c:4e:22:86:bc:34:38:40:25:c4:84:65:40:67:f2:2d:bf:
6a:9f:1d:91:ab:34:c9:90:7a:e5:45:56:4d:eb:c6:3a:50:ad:
e5:a6:25:f0:29:8a:90:54:ce:75:24:12:b9:db:1e:40:50:71:
22:68:4a:a1:e8:c2:27:21:a3:c7:50:d5:7c:ca:61:43:fa:86:
fa:dd:88:2c:90:97:83:50:23:fc:10:7b:1d:c3:3d:6e:fe:94:
2d:9f:af:77:6a:a2:58:e2:a2:79:4f:98:21:f9:30:4d:9a:30:
97:7b:14:68:d6:11:d4:28:f6:1e:53:13:8c:18:94:ab:f0:6c:
ca:4d:d5:fa:bc:f0:b2:23:ea:3d:ce:a0:b3:b1:16:15:3a:43:
00:3d:2e:ac:cf:25:f9:8d:01:8b:fb:15:e4:b8:5e:02:24:b1:
7b:da:48:46:75:8e:82:a7:05:17:de:25:da:b2:06:5c:c7:19:
a1:f6:e5:7c:d8:13:94:df:4f:12:39:6b:42:2c:55:5e:1f:19:
28:9d:99:ee:54:0d:49:0f:69:80:21:b6:cc:bf:94:4b:14:27:
4d:d8:c0:54:02:d1:85:5c:96:c3:2a:1d:f1:75:b6:de:58:0d:
39:c8:a4:94:54:fa:31:5f:3f:15:bb:d3:cb:34:72:a2:a3:90:
ec:79:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:27:20 2025 by rpki-client