This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json) Hash identifier: NneDhCXNj8gYfv3ecONYZJ7mTfAzqL+QFunOYDhl23M= Subject key identifier: 4D:96:E9:C8:26:DF:B8:8D:E2:03:57:AD:E9:7D:AD:74:3C:63:3B:F3 Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Certificate serial: 019B1D984D4AA4517A42E22783941EFEDF6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 16:01:19 +0000 Manifest this update: Sun 14 Dec 2025 16:01:19 +0000 Manifest next update: Mon 15 Dec 2025 16:01:19 +0000 Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: m5f3gPC/aPaos33aqulF6ZXLPHA7ndgcbmTbNn6aQDk=) 2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:4d:4a:a4:51:7a:42:e2:27:83:94:1e:fe:df:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Validity Not Before: Dec 14 16:01:19 2025 GMT Not After : Dec 15 16:01:19 2025 GMT Subject: CN=4d96e9c826dfb88de20357ade97dad743c633bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:0f:90:7f:a5:93:fe:00:df:cc:72:31:6d: 81:c6:3d:48:d1:50:18:6b:49:ac:6f:cd:31:4b:22: f6:d8:61:7c:80:bb:b1:83:d4:b6:7c:d3:6c:74:7b: 82:72:c8:6c:83:27:b4:19:91:b8:8e:df:7f:64:25: 4e:6e:2e:9c:b1:12:dd:b9:2e:b9:b1:22:06:33:ff: 0d:32:58:c0:2d:85:c2:bd:1d:1a:d8:e0:a0:87:4a: b2:60:17:36:86:ea:76:38:ab:30:90:45:2e:06:c2: 04:02:aa:61:5b:17:7b:85:dc:39:e3:69:6f:c6:16: 13:4c:0f:7f:35:02:a9:71:26:37:1c:47:6d:b8:69: b4:c4:6f:bf:86:ca:8c:0e:ca:ca:44:5a:45:d1:6f: be:65:2f:0f:2d:fe:94:29:25:67:f7:39:4c:c0:51: 21:69:14:86:f1:d2:d5:ae:7a:6c:bd:41:e8:a5:04: 23:96:55:89:86:02:c7:2e:7c:03:85:b4:1d:59:4a: aa:10:04:af:24:2a:5f:07:e6:fc:10:76:1b:05:dc: c3:08:8f:20:23:80:99:a7:4a:5c:6a:e2:23:e4:ac: a1:4a:37:82:26:43:ef:43:e9:c5:5b:72:22:1c:2f: eb:93:03:14:90:42:ad:d7:36:04:42:72:9a:3e:2e: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:96:E9:C8:26:DF:B8:8D:E2:03:57:AD:E9:7D:AD:74:3C:63:3B:F3 X509v3 Authority Key Identifier: keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c0:c7:49:f5:f0:82:eb:6d:6c:0c:a1:df:9a:fc:41:a9:5f: 6c:86:24:a0:ee:86:8e:2b:17:0b:fb:3a:d8:8a:f0:32:28:36: ff:80:5b:79:14:70:0d:b0:78:f5:5c:ac:a8:ab:99:b6:d9:10: 37:77:41:cc:b5:65:01:b2:2e:80:0f:0a:9e:25:3a:42:7e:95: f9:ad:76:ba:86:3d:b1:c9:cf:80:ff:9e:5f:c0:26:ca:2d:b7: a7:48:cb:91:08:fd:dd:7b:79:53:60:06:54:53:4f:28:38:c3: 2f:45:ca:b3:2a:a4:40:1c:1c:f3:30:74:ef:6e:f9:2d:77:17: f4:98:0d:63:ef:e3:57:88:e1:84:ff:ed:7e:d4:08:eb:28:1d: 43:92:28:f2:56:6d:6b:71:2e:52:6c:61:ec:78:63:a4:ba:c7: af:e9:34:ad:41:aa:15:87:ce:56:77:0a:71:44:fe:ae:f9:33: f5:ba:1a:1e:c0:dd:29:64:d5:52:b3:d1:d1:33:47:2b:00:66: 72:cb:89:90:e4:e5:5e:e1:8f:ba:54:9d:22:4f:7d:8c:9d:bd: 74:10:51:81:95:b4:8b:b9:ca:a7:17:41:24:41:5f:26:5b:a8: 5d:93:6e:35:26:12:50:48:bd:a7:39:9c:41:c3:2a:29:58:4b: a3:db:95:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmE1KpFF6QuIng5Qe/t9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2 OTBmZjIwHhcNMjUxMjE0MTYwMTE5WhcNMjUxMjE1MTYwMTE5WjAzMTEwLwYDVQQD Eyg0ZDk2ZTljODI2ZGZiODhkZTIwMzU3YWRlOTdkYWQ3NDNjNjMzYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxncPkH+lk/4A38xyMW2Bxj1I0VAY a0msb80xSyL22GF8gLuxg9S2fNNsdHuCcshsgye0GZG4jt9/ZCVObi6csRLduS65 sSIGM/8NMljALYXCvR0a2OCgh0qyYBc2hup2OKswkEUuBsIEAqphWxd7hdw542lv xhYTTA9/NQKpcSY3HEdtuGm0xG+/hsqMDsrKRFpF0W++ZS8PLf6UKSVn9zlMwFEh aRSG8dLVrnpsvUHopQQjllWJhgLHLnwDhbQdWUqqEASvJCpfB+b8EHYbBdzDCI8g I4CZp0pcauIj5KyhSjeCJkPvQ+nFW3IiHC/rkwMUkEKt1zYEQnKaPi5dfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2W6cgm37iN4gNXrel9rXQ8YzvzMB8GA1UdIwQY MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcDHSfXw guttbAyh35r8QalfbIYkoO6GjisXC/s62IrwMig2/4BbeRRwDbB49VysqKuZttkQ N3dBzLVlAbIugA8KniU6Qn6V+a12uoY9scnPgP+eX8Amyi23p0jLkQj93Xt5U2AG VFNPKDjDL0XKsyqkQBwc8zB07275LXcX9JgNY+/jV4jhhP/tftQI6ygdQ5Io8lZt a3EuUmxh7HhjpLrHr+k0rUGqFYfOVncKcUT+rvkz9boaHsDdKWTVUrPR0TNHKwBm csuJkOTlXuGPulSdIk99jJ29dBBRgZW0i7nKpxdBJEFfJluoXZNuNSYSUEi9pzmc QcMqKVhLo9uVxQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:27:30 2025 by rpki-client