This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json) Hash identifier: 0zzQ4pZyaAB6gQrwtA/oDT1CL+bDEZVDrAInL7ORldo= Subject key identifier: 59:26:E5:96:D8:00:AE:CA:6A:AF:0D:70:67:0C:AD:CD:F1:80:E4:DA Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54 Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254 Certificate serial: 019B19BBBFD5AC678EE4D45AB9D0B65F16A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft Manifest number: 167A Signing time: Sat 13 Dec 2025 22:01:33 +0000 Manifest this update: Sat 13 Dec 2025 22:01:33 +0000 Manifest next update: Sun 14 Dec 2025 22:01:33 +0000 Files and hashes: 1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=) 2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: nJJx0sW+pscnmYI9rTlF9g4QlcrfP2o0JsiR66LZIck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:bf:d5:ac:67:8e:e4:d4:5a:b9:d0:b6:5f:16:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254 Validity Not Before: Dec 13 22:01:33 2025 GMT Not After : Dec 14 22:01:33 2025 GMT Subject: CN=5926e596d800aeca6aaf0d70670cadcdf180e4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:69:c9:5b:6c:43:7f:7d:4f:43:97:be:fb: d0:64:df:cb:fe:2e:f0:dd:46:d0:ac:b7:53:39:7a: 79:00:2f:45:3e:27:fb:9d:66:03:c8:28:e3:54:93: 91:de:9c:40:27:c6:52:54:e6:9c:80:2c:e4:95:14: e2:85:9d:10:4c:af:fa:77:ea:24:72:69:0b:50:e0: 8d:40:19:13:1a:98:a9:7f:d2:41:1a:8d:1f:d3:b6: 7b:87:df:bf:11:9c:9a:bb:fc:e3:79:a5:22:32:87: 73:97:16:ce:8d:51:61:d5:67:16:9d:c0:4a:29:59: 72:de:70:fc:d8:3e:a7:9e:f9:06:14:c4:fa:44:b0: 74:00:90:d2:6d:10:6a:2e:dd:af:b7:e0:fc:df:01: d8:b2:30:79:ae:8b:64:d3:40:3a:17:36:1f:a7:f6: ec:f2:b1:be:b8:e7:0f:24:84:6f:31:e3:0c:e0:05: a0:33:63:3b:64:a5:ab:0e:9d:09:ff:aa:2b:c0:c8: 6c:8e:de:a1:59:a7:11:1d:03:88:2b:85:85:9f:89: 6d:67:f0:a3:bf:e6:7b:55:c6:94:e1:67:94:0f:58: 83:33:ff:7b:82:62:af:ea:a9:2d:92:2b:2d:73:4e: dc:ed:b3:4c:01:70:b5:5d:e4:01:d6:d0:e4:59:72: 45:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:26:E5:96:D8:00:AE:CA:6A:AF:0D:70:67:0C:AD:CD:F1:80:E4:DA X509v3 Authority Key Identifier: keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:35:1b:82:48:39:da:06:48:4a:21:f9:21:e3:7f:5a:56:63: 4e:b1:ce:79:d5:7f:ae:87:fd:59:60:34:22:b6:25:bb:b6:c3: 9d:0f:b1:8d:a5:65:2b:05:4d:79:3a:5b:99:74:98:0d:9d:3e: 93:b1:de:ac:6e:07:3d:2b:35:4c:ed:ec:a8:f6:27:e4:19:51: db:e4:7e:5e:e7:21:f9:b5:65:77:39:86:61:08:3b:df:22:47: d0:ea:ff:27:5d:9c:7b:56:a0:23:6e:97:57:38:22:7f:16:df: a2:fa:f1:22:4f:db:3b:a3:51:60:a4:e9:b3:d1:d0:7f:7b:9a: 85:48:94:8d:eb:f6:d2:f1:7c:c5:18:ce:77:ca:58:88:7f:13: 4b:64:1a:0a:7c:96:64:77:6a:bb:93:15:f8:21:c3:55:60:33: a4:74:c9:55:80:92:3e:ea:d9:1d:96:02:52:ac:5b:0e:f3:9c: 49:31:da:49:0f:21:b4:69:f5:f3:8c:55:48:2d:03:f8:be:a3: 4c:03:32:07:a8:15:4c:b5:18:6a:b9:ff:3e:6e:5c:23:05:9c: aa:c4:e1:75:73:d9:04:83:c9:4c:d8:eb:d9:33:71:47:df:6d: 5d:d6:52:d3:a4:75:e3:ce:ff:a8:9f:5b:0c:76:31:ec:2e:60: f6:ac:06:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu7/VrGeO5NRaudC2XxakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZDBlYmQ4ZjU2NmUzZmFiN2UyMzU0YjcxNDA2MGM2ZmE0 N2UyNTQwHhcNMjUxMjEzMjIwMTMzWhcNMjUxMjE0MjIwMTMzWjAzMTEwLwYDVQQD Eyg1OTI2ZTU5NmQ4MDBhZWNhNmFhZjBkNzA2NzBjYWRjZGYxODBlNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1pyVtsQ399T0OXvvvQZN/L/i7w 3UbQrLdTOXp5AC9FPif7nWYDyCjjVJOR3pxAJ8ZSVOacgCzklRTihZ0QTK/6d+ok cmkLUOCNQBkTGpipf9JBGo0f07Z7h9+/EZyau/zjeaUiModzlxbOjVFh1WcWncBK KVly3nD82D6nnvkGFMT6RLB0AJDSbRBqLt2vt+D83wHYsjB5rotk00A6FzYfp/bs 8rG+uOcPJIRvMeMM4AWgM2M7ZKWrDp0J/6orwMhsjt6hWacRHQOIK4WFn4ltZ/Cj v+Z7VcaU4WeUD1iDM/97gmKv6qktkistc07c7bNMAXC1XeQB1tDkWXJFEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkm5ZbYAK7Kaq8NcGcMrc3xgOTaMB8GA1UdIwQY MBaAFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAt Mzk3NjVhM2Y5ZGJjLzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAtMzk3NjVhM2Y5ZGJj LzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjUbgkg5 2gZISiH5IeN/WlZjTrHOedV/rof9WWA0IrYlu7bDnQ+xjaVlKwVNeTpbmXSYDZ0+ k7HerG4HPSs1TO3sqPYn5BlR2+R+Xuch+bVldzmGYQg73yJH0Or/J12ce1agI26X VzgifxbfovrxIk/bO6NRYKTps9HQf3uahUiUjev20vF8xRjOd8pYiH8TS2QaCnyW ZHdqu5MV+CHDVWAzpHTJVYCSPurZHZYCUqxbDvOcSTHaSQ8htGn184xVSC0D+L6j TAMyB6gVTLUYarn/Pm5cIwWcqsThdXPZBIPJTNjr2TNxR99tXdZS06R1487/qJ9b DHYx7C5g9qwGMg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:39 2025 by rpki-client