This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json) Hash identifier: wjXTdZj2WwWKZLlR3EsIZhoz8NsiifOc85vAbIr0YJA= Subject key identifier: 32:A6:E7:5B:C9:29:5B:A2:26:60:3B:F7:83:74:EC:B1:10:AE:C0:82 Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47 Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547 Certificate serial: 019B4248DF95ADB274D984426FE329D6538F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft Manifest number: 16F8 Signing time: Sun 21 Dec 2025 19:00:30 +0000 Manifest this update: Sun 21 Dec 2025 19:00:30 +0000 Manifest next update: Mon 22 Dec 2025 19:00:30 +0000 Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: qkoH2AtEsh/Ylck8L1zCKGzw5ZzZg8irQJ8832S3pCc=) 2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:df:95:ad:b2:74:d9:84:42:6f:e3:29:d6:53:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547 Validity Not Before: Dec 21 19:00:30 2025 GMT Not After : Dec 22 19:00:30 2025 GMT Subject: CN=32a6e75bc9295ba226603bf78374ecb110aec082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:50:ce:aa:3c:7d:58:8d:b5:fe:6b:02:0d: 87:4a:6e:70:ca:0b:e5:b8:fb:0b:bc:00:ed:76:cf: c9:50:8f:dc:28:d2:0e:c2:25:90:29:6d:14:f8:a9: bd:fc:8b:73:15:89:85:1a:ce:f3:72:b4:c8:0d:4f: 84:d2:2f:36:79:66:79:ee:be:1a:e5:d7:0d:26:1c: dd:87:24:a5:67:73:9a:6f:83:93:68:99:2f:4e:c9: 8e:7a:6e:a7:5a:9e:6b:bb:c2:92:0d:99:42:08:85: 56:e3:2d:23:40:bd:1d:c7:e7:48:83:38:ed:98:33: 2d:45:89:d4:b4:8b:97:66:ea:8d:d6:c5:29:6b:c7: cb:af:e6:d4:57:5e:48:57:8b:ef:92:e3:41:74:19: c9:54:6e:ae:5e:b4:61:8c:26:50:96:4a:99:32:89: 25:41:7c:07:04:63:db:c3:32:02:25:be:ce:7f:09: 33:5a:c6:2e:ad:db:e2:38:94:b8:f8:10:5f:a6:cb: 41:6c:9a:43:ca:97:2c:34:1c:dc:af:75:e1:22:d1: 57:ad:92:05:89:95:5e:6a:15:1b:9e:a0:4f:b7:0d: f5:a4:cd:61:b0:d8:0e:54:a8:87:8d:a4:c8:de:05: 70:b9:2f:bd:d3:20:de:da:14:c5:e6:37:b9:33:c3: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A6:E7:5B:C9:29:5B:A2:26:60:3B:F7:83:74:EC:B1:10:AE:C0:82 X509v3 Authority Key Identifier: keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3c:4e:22:86:bc:34:38:40:25:c4:84:65:40:67:f2:2d:bf: 6a:9f:1d:91:ab:34:c9:90:7a:e5:45:56:4d:eb:c6:3a:50:ad: e5:a6:25:f0:29:8a:90:54:ce:75:24:12:b9:db:1e:40:50:71: 22:68:4a:a1:e8:c2:27:21:a3:c7:50:d5:7c:ca:61:43:fa:86: fa:dd:88:2c:90:97:83:50:23:fc:10:7b:1d:c3:3d:6e:fe:94: 2d:9f:af:77:6a:a2:58:e2:a2:79:4f:98:21:f9:30:4d:9a:30: 97:7b:14:68:d6:11:d4:28:f6:1e:53:13:8c:18:94:ab:f0:6c: ca:4d:d5:fa:bc:f0:b2:23:ea:3d:ce:a0:b3:b1:16:15:3a:43: 00:3d:2e:ac:cf:25:f9:8d:01:8b:fb:15:e4:b8:5e:02:24:b1: 7b:da:48:46:75:8e:82:a7:05:17:de:25:da:b2:06:5c:c7:19: a1:f6:e5:7c:d8:13:94:df:4f:12:39:6b:42:2c:55:5e:1f:19: 28:9d:99:ee:54:0d:49:0f:69:80:21:b6:cc:bf:94:4b:14:27: 4d:d8:c0:54:02:d1:85:5c:96:c3:2a:1d:f1:75:b6:de:58:0d: 39:c8:a4:94:54:fa:31:5f:3f:15:bb:d3:cb:34:72:a2:a3:90: ec:79:f6:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSN+VrbJ02YRCb+Mp1lOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDMzY2E4M2FmZmJiODAxMTcyZDUwOTRiMDBlMDY4NTZl NmY1NDcwHhcNMjUxMjIxMTkwMDMwWhcNMjUxMjIyMTkwMDMwWjAzMTEwLwYDVQQD EygzMmE2ZTc1YmM5Mjk1YmEyMjY2MDNiZjc4Mzc0ZWNiMTEwYWVjMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni5Qzqo8fViNtf5rAg2HSm5wygvl uPsLvADtds/JUI/cKNIOwiWQKW0U+Km9/ItzFYmFGs7zcrTIDU+E0i82eWZ57r4a 5dcNJhzdhySlZ3Oab4OTaJkvTsmOem6nWp5ru8KSDZlCCIVW4y0jQL0dx+dIgzjt mDMtRYnUtIuXZuqN1sUpa8fLr+bUV15IV4vvkuNBdBnJVG6uXrRhjCZQlkqZMokl QXwHBGPbwzICJb7OfwkzWsYurdviOJS4+BBfpstBbJpDypcsNBzcr3XhItFXrZIF iZVeahUbnqBPtw31pM1hsNgOVKiHjaTI3gVwuS+90yDe2hTF5je5M8M/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKm51vJKVuiJmA794N07LEQrsCCMB8GA1UdIwQY MBaAFA3TPKg6/7uAEXLVCUsA4GhW5vVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEt ODkwZWIyMjY2NjU3LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEtODkwZWIyMjY2NjU3 LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDxOIoa8 NDhAJcSEZUBn8i2/ap8dkas0yZB65UVWTevGOlCt5aYl8CmKkFTOdSQSudseQFBx ImhKoejCJyGjx1DVfMphQ/qG+t2ILJCXg1Aj/BB7HcM9bv6ULZ+vd2qiWOKieU+Y IfkwTZowl3sUaNYR1Cj2HlMTjBiUq/Bsyk3V+rzwsiPqPc6gs7EWFTpDAD0urM8l +Y0Bi/sV5LheAiSxe9pIRnWOgqcFF94l2rIGXMcZofblfNgTlN9PEjlrQixVXh8Z KJ2Z7lQNSQ9pgCG2zL+USxQnTdjAVALRhVyWwyod8XW23lgNOciklFT6MV8/FbvT yzRyoqOQ7Hn2yg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:27:20 2025 by rpki-client