This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json) Hash identifier: 51k/8knCEhvWesplPWTzlxzt2byYOq7kq2OFMq6c+s8= Subject key identifier: 1B:AC:A1:4A:49:F1:FF:C4:D6:07:93:F1:AA:22:6A:CF:12:22:69:9F Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e Certificate serial: 019B13F08F83553B0B8FD8989566EF863B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 19:01:31 +0000 Manifest this update: Fri 12 Dec 2025 19:01:31 +0000 Manifest next update: Sat 13 Dec 2025 19:01:31 +0000 Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=) 2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: er1N2coI1duI+cs+i/+rF65wOn1fikpWc+5tjgQkOvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:f0:8f:83:55:3b:0b:8f:d8:98:95:66:ef:86:3b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e Validity Not Before: Dec 12 19:01:31 2025 GMT Not After : Dec 13 19:01:31 2025 GMT Subject: CN=1baca14a49f1ffc4d60793f1aa226acf1222699f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:bc:f7:8d:b9:30:1b:13:d2:fd:7b:d7:47: 0f:8a:99:39:da:ae:3d:35:53:59:36:c7:90:51:ef: ce:4b:cf:a0:af:f7:6c:c6:b9:df:5b:a4:d0:e9:24: 94:2e:14:df:f9:c0:f1:a2:9d:84:12:e5:10:7e:99: 4d:46:9e:58:84:8d:82:9f:87:62:73:8e:68:d2:0a: 82:43:7b:de:3e:96:3e:27:db:cd:34:aa:21:48:fd: 3a:96:98:3b:20:fd:95:2b:30:ae:90:87:89:f7:ec: 38:cd:36:0d:ad:b9:3e:a0:7c:5c:4e:f7:ac:ae:f3: 61:44:e1:ee:30:0e:0c:2b:e7:59:a1:6b:f6:a8:63: 30:02:6d:34:7b:e3:04:72:b0:cb:04:3a:41:a7:f3: 5e:01:b6:d1:c8:bf:43:99:2e:5b:04:07:4a:8b:a9: a3:d6:0c:7e:d9:ac:c7:32:2c:0d:63:4f:a0:fb:e2: 4b:de:05:29:b4:dc:25:b3:5b:06:26:f6:0a:f1:11: c2:f2:2b:83:68:83:a1:04:4e:75:d1:89:b0:ab:7f: 75:95:f7:e4:22:17:f0:bf:90:42:85:de:7a:ff:3b: 72:9f:86:14:15:12:e6:ff:6e:d3:40:6a:90:34:c4: 66:91:5c:e4:68:b4:ba:f5:ca:ed:a4:dc:3c:f8:7f: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AC:A1:4A:49:F1:FF:C4:D6:07:93:F1:AA:22:6A:CF:12:22:69:9F X509v3 Authority Key Identifier: keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8e:91:b7:07:1a:53:18:d8:b8:3c:37:d9:de:3c:a0:34:1a: a1:09:c3:a0:11:83:07:58:14:77:7a:4a:a0:78:7b:a5:93:23: c8:18:a2:f6:3d:21:ba:8f:f5:9f:b9:ce:8a:b1:ce:88:2b:53: 1a:75:64:e7:32:6c:08:ca:2e:21:ed:34:51:c0:85:be:2e:cc: 1e:3c:7f:da:d2:08:37:2e:50:ce:fc:55:0f:ca:e8:b4:c0:df: 6e:73:60:03:58:96:3b:1e:27:b9:62:79:63:22:e1:18:67:01: 60:e8:63:64:72:6d:25:78:53:4f:13:4d:02:0b:dc:de:89:96: 9f:ab:15:0b:4a:a3:a2:1e:4f:89:b0:f8:1b:12:a4:d0:21:0b: a4:20:c3:ff:e6:18:a7:31:e1:58:31:8b:f2:ef:e2:40:38:06: 17:a3:61:cc:86:eb:fd:63:27:15:bd:eb:7b:17:1b:a5:3f:25: d8:3b:7b:e3:93:c8:ce:84:b6:08:31:9a:2f:bd:de:09:f8:ac: a0:72:d8:57:07:ee:1d:fa:f6:33:b6:a4:7e:a7:42:85:48:21: 87:3b:50:b4:2a:1c:28:a1:ab:a6:f0:57:27:0d:93:e2:10:4b: a3:84:f0:2b:59:34:c2:b3:32:4e:a5:51:94:55:eb:83:70:05: c5:62:53:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT8I+DVTsLj9iYlWbvhjsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj ODZkNGUwHhcNMjUxMjEyMTkwMTMxWhcNMjUxMjEzMTkwMTMxWjAzMTEwLwYDVQQD EygxYmFjYTE0YTQ5ZjFmZmM0ZDYwNzkzZjFhYTIyNmFjZjEyMjI2OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE289425MBsT0v1710cPipk52q49 NVNZNseQUe/OS8+gr/dsxrnfW6TQ6SSULhTf+cDxop2EEuUQfplNRp5YhI2Cn4di c45o0gqCQ3vePpY+J9vNNKohSP06lpg7IP2VKzCukIeJ9+w4zTYNrbk+oHxcTves rvNhROHuMA4MK+dZoWv2qGMwAm00e+MEcrDLBDpBp/NeAbbRyL9DmS5bBAdKi6mj 1gx+2azHMiwNY0+g++JL3gUptNwls1sGJvYK8RHC8iuDaIOhBE510Ymwq391lffk Ihfwv5BChd56/ztyn4YUFRLm/27TQGqQNMRmkVzkaLS69crtpNw8+H+i1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBusoUpJ8f/E1geT8aoias8SImmfMB8GA1UdIwQY MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0 LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo6Rtwca UxjYuDw32d48oDQaoQnDoBGDB1gUd3pKoHh7pZMjyBii9j0huo/1n7nOirHOiCtT GnVk5zJsCMouIe00UcCFvi7MHjx/2tIINy5QzvxVD8rotMDfbnNgA1iWOx4nuWJ5 YyLhGGcBYOhjZHJtJXhTTxNNAgvc3omWn6sVC0qjoh5PibD4GxKk0CELpCDD/+YY pzHhWDGL8u/iQDgGF6NhzIbr/WMnFb3rexcbpT8l2Dt745PIzoS2CDGaL73eCfis oHLYVwfuHfr2M7akfqdChUghhztQtCocKKGrpvBXJw2T4hBLo4TwK1k0wrMyTqVR lFXrg3AFxWJT6w== -----END CERTIFICATE-----Generated at Sat Dec 13 02:00:35 2025 by rpki-client