This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: InFQsU9GHY7fg/al/O6pQoLqAbnqdyr1aHVyPkcG2xM=
Subject key identifier: F1:28:FA:4E:98:AB:3E:7A:02:E6:53:D7:F0:18:62:A9:BB:27:06:F1
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019B330CC8F956C6A4C9F9A936DB64F74C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 0DF5
Signing time: Thu 18 Dec 2025 20:00:34 +0000
Manifest this update: Thu 18 Dec 2025 20:00:34 +0000
Manifest next update: Fri 19 Dec 2025 20:00:34 +0000
Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=)
2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=)
3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=)
4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=)
5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: aXAMAmejqQwZmM1crHaYqjeomXA1BrCbeM3aAJAkYgY=)
6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=)
7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=)
8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=)
9: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=)
10: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=)
11: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=)
12: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=)
13: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=)
14: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=)
15: da2k4kkg5lEUqU-HrsfQSd4jDyY.roa (hash: 0QYieGsvyj25fl9hPrJSkWKf4K69KfEWFeHhni5jPsc=)
16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=)
17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=)
18: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=)
19: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=)
20: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=)
21: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=)
22: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=)
23: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:33:0c:c8:f9:56:c6:a4:c9:f9:a9:36:db:64:f7:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 18 20:00:34 2025 GMT
Not After : Dec 19 20:00:34 2025 GMT
Subject: CN=f128fa4e98ab3e7a02e653d7f01862a9bb2706f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:1f:fc:41:31:15:93:36:49:34:ce:84:4c:
d1:18:a4:67:d6:66:b0:d8:0f:2b:e9:52:2e:96:1b:
33:73:7c:6a:93:c5:92:79:b5:0c:01:89:0e:5c:a8:
d2:bd:61:51:f2:80:28:a1:8a:d2:30:8c:49:29:70:
82:28:a1:44:90:b5:d8:c9:d2:8f:bb:c5:2e:47:5b:
22:bc:80:f8:55:28:f0:6e:fe:01:b9:b9:7e:b1:72:
45:a7:ab:43:6d:00:46:27:e4:02:ec:57:e4:5f:80:
00:5d:9d:0a:d9:cb:d9:1b:ac:16:c2:d2:ca:e0:46:
a0:89:d9:1c:1b:d6:0d:ad:22:d0:44:aa:43:69:f4:
dc:1c:86:dd:4d:93:d5:27:ab:30:50:c0:54:20:9b:
5b:48:76:6f:c1:82:f8:2b:ee:19:89:63:5c:d7:ac:
ab:be:be:a2:39:b9:60:16:ff:92:4e:b4:fd:61:19:
75:e9:bb:35:2f:79:65:c7:c3:bf:ca:fd:e2:f0:0f:
42:cb:12:1f:59:58:41:01:1f:a0:7c:e2:34:2b:88:
02:21:37:12:8b:a1:c7:7d:a3:89:1f:eb:ba:f8:77:
7a:a3:f7:ed:4e:d4:2d:81:8c:af:ba:22:09:44:26:
13:0b:0a:30:09:59:95:06:a5:43:ff:20:e9:f1:ca:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:FA:4E:98:AB:3E:7A:02:E6:53:D7:F0:18:62:A9:BB:27:06:F1
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:db:3a:66:41:f2:97:c2:85:2c:d9:b2:21:8f:89:00:f7:4e:
5c:45:04:7c:c4:59:1b:39:e6:74:75:be:29:f6:ab:05:12:b3:
70:71:f7:44:a2:7b:56:5d:49:2a:69:cd:15:68:8a:93:2f:7c:
5f:16:7c:36:77:a5:cc:eb:34:71:2d:8b:66:89:26:5f:4a:33:
a9:f4:9b:5c:7b:9b:38:08:ce:7d:3b:3c:b0:09:8a:19:aa:06:
94:fa:21:07:f4:d3:76:36:1d:b8:d6:b6:79:c9:0d:09:b8:8e:
9c:06:86:77:71:4b:89:8f:38:d2:c6:a2:69:76:dd:7d:c6:24:
1e:da:dd:d7:c1:f5:65:db:8a:fb:f3:99:d4:9d:db:72:64:bf:
4e:ef:00:30:56:ee:f0:86:22:00:01:1d:a8:6b:ca:21:98:e0:
10:c2:f2:9b:24:2a:34:4d:d3:d4:2e:94:57:a4:97:e8:63:27:
9b:4b:ff:38:7f:3a:cf:38:d4:0f:75:27:03:d9:b1:a4:9a:de:
1e:1b:d4:14:b6:a8:ec:91:ff:90:7d:82:1c:cc:02:92:56:35:
08:12:3e:08:ec:79:6e:19:4a:9b:18:45:07:98:2f:30:86:0e:
b0:3a:b7:c2:3b:58:95:81:38:a8:ff:08:6d:26:6b:15:9f:aa:
6e:76:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:26:07 2025 by rpki-client