This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json) Hash identifier: gTHHWq7y0G43VuU+4HB3dhJ5ik8TPK6Vc6umtjU8VtM= Subject key identifier: CA:90:BB:E6:59:0A:3B:4F:52:47:A0:ED:BF:1F:10:D7:9A:12:06:99 Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47 Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547 Certificate serial: 019B443742AA61A47C5F903C217A29DA511C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft Manifest number: 16F9 Signing time: Mon 22 Dec 2025 04:00:30 +0000 Manifest this update: Mon 22 Dec 2025 04:00:30 +0000 Manifest next update: Tue 23 Dec 2025 04:00:30 +0000 Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: d2BmE+z2oi36KUVW83gJxjqZD7cu8pG3VKLwxGGJzzo=) 2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:42:aa:61:a4:7c:5f:90:3c:21:7a:29:da:51:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547 Validity Not Before: Dec 22 04:00:30 2025 GMT Not After : Dec 23 04:00:30 2025 GMT Subject: CN=ca90bbe6590a3b4f5247a0edbf1f10d79a120699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:26:62:3b:4c:b5:a2:37:d7:28:32:3d:cd: 43:9e:60:83:a3:34:35:7c:94:d2:13:5f:b0:bb:82: 64:a7:f8:5a:a3:e6:33:e0:df:c3:b3:2c:9d:c0:37: 5c:2a:1f:3b:51:f7:0e:c4:c2:5a:6d:f2:83:ab:46: 9a:a9:7f:23:9e:eb:62:8a:49:a1:26:c8:46:a6:bc: 51:36:83:82:e9:03:22:19:bc:b5:e3:71:e7:49:0b: 9e:cc:68:bf:90:83:39:c3:fe:f0:2c:d8:e3:aa:b5: 87:2a:9b:68:77:c3:63:f1:82:33:06:28:bf:7d:27: 4d:a7:f0:1a:a2:f5:1f:b4:6b:9b:f2:1b:d6:a9:dd: 04:d8:2c:34:90:5c:e9:ce:7e:11:d5:4d:37:81:9b: 6d:14:71:47:61:55:cf:a0:75:2a:0b:5e:3c:3d:7b: 02:78:fc:16:49:ec:14:69:4e:cf:48:41:91:57:53: 45:42:fc:58:b1:8b:33:f7:db:81:72:2b:19:d4:5b: f9:70:21:7f:cb:a0:4f:b2:6d:57:e9:95:1c:13:f5: 18:13:ce:59:64:29:86:61:a6:38:ed:5c:2e:67:df: 3e:c3:f1:ad:27:33:ac:04:e3:51:b0:df:87:e1:9b: fa:94:4b:ac:67:6e:0a:d5:1d:e9:a8:ca:17:27:1a: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:BB:E6:59:0A:3B:4F:52:47:A0:ED:BF:1F:10:D7:9A:12:06:99 X509v3 Authority Key Identifier: keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0d:4a:ce:5d:8a:4a:a2:c1:e4:0e:04:ce:ec:8a:19:b6:44: ea:be:35:04:24:03:bf:d0:c8:0f:a4:57:f2:12:96:77:25:cc: 3d:7f:c3:f5:10:ef:9f:df:8c:2a:02:e1:dd:8b:1b:fc:20:49: 7f:74:ec:be:11:e9:9c:1f:2c:66:ce:4f:eb:4b:b0:69:06:27: d2:45:07:2a:57:54:03:79:c1:c6:e9:59:92:06:c4:f7:52:15: c0:7d:b3:89:39:0b:ac:2b:25:fe:d8:bd:6c:2a:1b:97:5f:8b: 3c:2c:6e:0b:f4:43:49:13:8e:b3:ab:1a:32:47:f9:f8:b5:b2: 98:41:ea:16:80:d9:08:b8:7d:e0:81:0b:28:f2:cb:22:d6:26: 02:2c:55:21:3e:4c:3d:db:fc:f7:30:01:d2:a2:db:0b:6f:1b: d3:e1:df:fd:7e:24:5a:02:85:63:a4:90:ff:cc:57:16:b0:03: e0:de:52:24:24:88:5e:ff:76:17:71:30:12:c7:13:48:d3:2d: 2e:81:26:d5:d6:91:88:b3:96:e5:82:68:7e:3a:aa:37:fb:8b: d4:d0:f0:b6:63:4a:09:d9:10:10:40:4c:84:71:ba:58:79:c7: 53:21:71:6d:c7:52:4b:78:86:b1:96:79:17:aa:32:99:8b:a1: 67:28:d9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN0KqYaR8X5A8IXop2lEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDMzY2E4M2FmZmJiODAxMTcyZDUwOTRiMDBlMDY4NTZl NmY1NDcwHhcNMjUxMjIyMDQwMDMwWhcNMjUxMjIzMDQwMDMwWjAzMTEwLwYDVQQD EyhjYTkwYmJlNjU5MGEzYjRmNTI0N2EwZWRiZjFmMTBkNzlhMTIwNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx48mYjtMtaI31ygyPc1DnmCDozQ1 fJTSE1+wu4Jkp/hao+Yz4N/DsyydwDdcKh87UfcOxMJabfKDq0aaqX8jnutiikmh JshGprxRNoOC6QMiGby143HnSQuezGi/kIM5w/7wLNjjqrWHKptod8Nj8YIzBii/ fSdNp/AaovUftGub8hvWqd0E2Cw0kFzpzn4R1U03gZttFHFHYVXPoHUqC148PXsC ePwWSewUaU7PSEGRV1NFQvxYsYsz99uBcisZ1Fv5cCF/y6BPsm1X6ZUcE/UYE85Z ZCmGYaY47VwuZ98+w/GtJzOsBONRsN+H4Zv6lEusZ24K1R3pqMoXJxoG9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqQu+ZZCjtPUkeg7b8fENeaEgaZMB8GA1UdIwQY MBaAFA3TPKg6/7uAEXLVCUsA4GhW5vVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEt ODkwZWIyMjY2NjU3LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEtODkwZWIyMjY2NjU3 LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQ1Kzl2K SqLB5A4EzuyKGbZE6r41BCQDv9DID6RX8hKWdyXMPX/D9RDvn9+MKgLh3Ysb/CBJ f3TsvhHpnB8sZs5P60uwaQYn0kUHKldUA3nBxulZkgbE91IVwH2ziTkLrCsl/ti9 bCobl1+LPCxuC/RDSROOs6saMkf5+LWymEHqFoDZCLh94IELKPLLItYmAixVIT5M Pdv89zAB0qLbC28b0+Hf/X4kWgKFY6SQ/8xXFrAD4N5SJCSIXv92F3EwEscTSNMt LoEm1daRiLOW5YJofjqqN/uL1NDwtmNKCdkQEEBMhHG6WHnHUyFxbcdSS3iGsZZ5 F6oymYuhZyjZrA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:15:35 2025 by rpki-client