This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: bQWgiDCS4mGlygJfopDir+UqOryidjN6RBzQ8eZgIN8=
Subject key identifier: 31:C8:AF:5A:10:3E:C7:F7:34:84:34:63:16:5E:16:7F:AA:B6:10:79
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019BC9415481B2E7668B1FBF94CCE1058FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 0E45
Signing time: Sat 17 Jan 2026 00:01:00 +0000
Manifest this update: Sat 17 Jan 2026 00:01:00 +0000
Manifest next update: Sun 18 Jan 2026 00:01:00 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 6N1zSrxGxEDRaS6C7FAY0zi6aj8.roa (hash: wABNoFQpTIXR9Gtm4VZ92qxhMckx3/pSEwXZyk3S22E=)
6: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=)
7: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
8: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: +viKMErru4GgxadWC+ABEL0OGPy8hdJvC7sNik6ESF4=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=)
12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
13: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (hash: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU=)
14: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
15: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (hash: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg=)
16: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
17: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
18: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
19: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
20: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
21: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=)
22: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=)
23: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
25: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (hash: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c9:41:54:81:b2:e7:66:8b:1f:bf:94:cc:e1:05:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 17 00:01:00 2026 GMT
Not After : Jan 18 00:01:00 2026 GMT
Subject: CN=31c8af5a103ec7f734843463165e167faab61079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:75:d3:d0:f4:bb:13:37:38:f0:84:99:b1:
67:49:39:67:93:be:b6:a6:53:68:bf:38:47:93:c1:
de:28:10:3a:ab:cf:7d:d6:79:15:86:d1:c2:97:bf:
9e:34:59:58:74:33:b1:d9:bf:00:36:ee:e0:75:5c:
48:72:3f:9b:55:81:10:c2:e9:19:7e:55:6a:e4:ca:
84:ee:d7:16:bd:b2:73:35:7e:37:3f:c6:b7:67:96:
fe:6c:22:1a:7d:d8:63:57:43:1c:43:b3:04:e9:11:
98:79:0d:25:6d:b9:0a:1a:37:1c:6c:d7:c7:4e:b9:
29:d1:73:b0:64:72:7c:0c:fa:4a:d7:c0:c0:86:ee:
d4:bb:d9:93:eb:22:63:b7:02:52:c1:eb:1c:16:cd:
7c:10:1f:be:4b:51:78:67:85:27:09:ca:72:bf:32:
14:e3:76:fb:f6:63:0a:9b:58:fd:52:7a:e4:86:a6:
b4:a1:d7:86:fe:b6:ac:14:b9:cc:08:b1:d2:54:95:
24:34:00:22:48:94:41:9a:99:dd:7a:aa:d8:a4:76:
ae:01:ae:71:4a:21:9e:03:86:ee:a0:d8:77:55:f2:
19:8e:a5:49:a9:b3:3a:31:db:6e:60:ea:54:fe:5b:
7f:73:27:ad:d6:29:50:42:5b:76:45:37:35:ff:21:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:AF:5A:10:3E:C7:F7:34:84:34:63:16:5E:16:7F:AA:B6:10:79
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:02:40:38:05:c5:38:04:5d:41:a4:5e:de:82:ce:d5:3f:4c:
12:af:9b:92:47:30:09:de:4a:1f:39:99:3b:ad:58:38:9b:16:
d7:42:de:07:16:68:20:4c:98:b1:e0:76:ed:96:cd:7e:c4:8c:
57:7e:88:7a:52:9a:f5:31:6c:44:84:f1:f5:e5:74:72:7b:fb:
0f:ad:4e:49:e4:32:01:26:d7:71:ab:f4:b6:87:f5:86:53:0c:
ea:4e:0f:67:65:4a:6c:a2:1e:b0:17:05:d1:b4:52:4f:06:94:
b9:41:27:46:17:af:55:96:84:f1:19:f6:c4:a9:e3:02:d4:26:
8e:f5:dd:7d:38:df:1e:d8:d4:3c:bc:8d:39:70:c3:e2:ff:94:
f9:46:c7:a9:84:db:e6:51:bd:97:41:42:32:2f:80:c1:70:fe:
99:6c:e1:2c:4d:ad:50:93:26:5c:78:f8:3f:57:bf:d1:04:92:
9f:24:48:20:40:8d:fa:ee:31:2f:58:01:a0:e9:09:05:90:30:
de:bb:eb:a1:b0:50:52:cf:bf:7b:b5:54:03:5c:53:58:58:c6:
f4:e2:2f:02:eb:0c:8f:96:45:eb:a4:68:7f:d5:1e:cc:9e:c0:
0b:77:b3:5b:3f:f7:41:0d:45:48:f6:72:71:7a:e9:dc:27:cd:
b6:2d:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:20:31 2026 by rpki-client