This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json) Hash identifier: r9JbXdnx2k3gc76iieZLQMRnhrFSbyEtFT3GRBaBClU= Subject key identifier: 7D:65:66:3C:65:F7:05:1A:29:6F:F3:B8:22:3E:8C:9F:DF:B3:46:CC Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f Certificate serial: 65ED519D69DD0F601479F98F70925C95F1826A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft Manifest number: AB Signing time: Thu 04 Dec 2025 04:21:05 +0000 Manifest this update: Thu 04 Dec 2025 04:16:05 +0000 Manifest next update: Fri 05 Dec 2025 07:42:05 +0000 Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=) 2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: z0McbVDa5mS14K5nZ/iT+2MrW/YK7bydOg6WjHstu9I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 07:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ed:51:9d:69:dd:0f:60:14:79:f9:8f:70:92:5c:95:f1:82:6a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f Validity Not Before: Dec 4 04:16:05 2025 GMT Not After : Dec 5 07:42:05 2025 GMT Subject: CN=7D65663C65F7051A296FF3B8223E8C9FDFB346CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:d4:84:80:88:fd:33:c8:7f:fc:8d:a1:44: aa:6e:af:45:8e:29:80:45:b0:52:e5:36:63:2a:43: ca:06:75:c4:1a:47:70:a8:b8:38:87:a6:d1:74:84: 10:37:35:a0:51:34:7a:ca:1a:21:af:81:97:f6:b2: 15:e7:40:bc:1e:ad:fc:63:80:b6:fe:50:24:29:f9: 58:8b:53:ae:a2:52:6d:8f:32:ab:97:7b:31:a3:e2: f8:bf:4d:64:04:59:74:dc:44:16:65:00:bc:c2:73: bf:6a:3b:11:a3:c4:d5:25:9b:3d:ee:20:e4:1f:e8: 85:a1:bd:f4:e8:e0:20:12:1a:d2:f2:a7:5d:57:f6: aa:5e:86:d6:db:84:6b:8c:4a:c8:b3:07:63:63:4c: d1:bc:28:b7:1e:ed:63:dd:db:9b:3d:61:5d:4f:a9: 30:6c:55:ec:3c:c4:cd:45:a0:9b:ef:e3:c5:2d:c9: 1c:2e:fc:9e:00:c7:25:27:ff:6b:66:2d:cf:71:db: 96:1d:28:49:86:1f:64:6a:c3:75:68:ab:a5:42:47: 40:b0:1c:58:7d:47:54:d0:91:5b:c8:11:56:0a:5f: c9:8d:4a:b7:95:7f:4c:4c:6a:09:24:47:1f:36:98: 04:87:ec:41:29:9d:9e:a4:f5:de:a9:ea:36:83:25: 8e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:65:66:3C:65:F7:05:1A:29:6F:F3:B8:22:3E:8C:9F:DF:B3:46:CC X509v3 Authority Key Identifier: keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:40:e5:6b:c6:70:ca:ef:40:9d:2a:d8:16:b5:f9:c2:b9:83: 71:5b:ba:aa:11:1d:4e:52:82:52:2f:81:cf:2c:e0:97:dc:2b: 92:42:19:be:cd:f6:39:a4:05:d1:ae:38:23:ba:15:ab:92:99: dc:55:f6:c2:2a:25:1b:16:57:08:07:dc:bc:14:96:8c:43:56: 8b:84:bb:5a:5b:73:84:8f:2b:f4:0a:75:53:3c:21:0a:e6:c6: 06:62:21:1b:32:12:58:4b:d0:90:6c:0b:95:88:06:8b:54:47: 6f:a9:c8:3f:2e:25:84:d8:19:ac:41:66:2d:02:4e:48:73:09: ac:18:83:bc:83:bf:f3:89:22:28:6b:f3:1f:6f:20:93:fb:b3: ba:eb:fe:77:4f:f0:d4:59:8d:7c:0c:51:7d:03:4f:99:29:d6: 73:f0:72:4c:e7:6f:a3:83:b5:ee:fc:26:db:4c:2f:6e:c9:90: 33:5f:fd:ca:6d:b1:0d:72:ea:a1:9d:8a:10:12:6a:0b:17:23: fd:6a:64:51:14:35:47:5f:4d:bf:85:6c:72:8e:0b:8f:5b:6b: df:f0:79:da:e4:4f:42:08:12:eb:a6:8f:5b:6b:23:09:7f:4a: f3:f9:0a:81:d3:f8:9f:a4:06:49:e3:b1:7e:b6:c5:3b:78:52: 83:19:86:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZe1RnWndD2AUefmPcJJclfGCao0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx YTgxOTYwZjAeFw0yNTEyMDQwNDE2MDVaFw0yNTEyMDUwNzQyMDVaMDMxMTAvBgNV BAMTKDdENjU2NjNDNjVGNzA1MUEyOTZGRjNCODIyM0U4QzlGREZCMzQ2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P9SEgIj9M8h//I2hRKpur0WO KYBFsFLlNmMqQ8oGdcQaR3CouDiHptF0hBA3NaBRNHrKGiGvgZf2shXnQLwerfxj gLb+UCQp+ViLU66iUm2PMquXezGj4vi/TWQEWXTcRBZlALzCc79qOxGjxNUlmz3u IOQf6IWhvfTo4CASGtLyp11X9qpehtbbhGuMSsizB2NjTNG8KLce7WPd25s9YV1P qTBsVew8xM1FoJvv48UtyRwu/J4AxyUn/2tmLc9x25YdKEmGH2Rqw3Voq6VCR0Cw HFh9R1TQkVvIEVYKX8mNSreVf0xMagkkRx82mASH7EEpnZ6k9d6p6jaDJY4HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfWVmPGX3BRopb/O4Ij6Mn9+zRswwHwYDVR0j BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2 NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEDla8Zwyu9AnSrYFrX5 wrmDcVu6qhEdTlKCUi+Bzyzgl9wrkkIZvs32OaQF0a44I7oVq5KZ3FX2wiolGxZX CAfcvBSWjENWi4S7WltzhI8r9Ap1UzwhCubGBmIhGzISWEvQkGwLlYgGi1RHb6nI Py4lhNgZrEFmLQJOSHMJrBiDvIO/84kiKGvzH28gk/uzuuv+d0/w1FmNfAxRfQNP mSnWc/ByTOdvo4O17vwm20wvbsmQM1/9ym2xDXLqoZ2KEBJqCxcj/WpkURQ1R19N v4Vsco4Lj1tr3/B52uRPQggS66aPW2sjCX9K8/kKgdP4n6QGSeOxfrbFO3hSgxmG qA== -----END CERTIFICATE-----Generated at Thu Dec 4 22:11:59 2025 by rpki-client