This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: ifrM5cYyf9dY6GIPP/4+Y1ntHkYcXp9gPReIZGXpCS0= Subject key identifier: 8A:5D:D4:A6:67:86:A4:F0:46:0F:04:8E:BF:CC:3B:C2:AA:FD:06:FA Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B5AF686FE3930CF42685B0E9BCB168F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0E0A Signing time: Fri 26 Dec 2025 14:01:04 +0000 Manifest this update: Fri 26 Dec 2025 14:01:04 +0000 Manifest next update: Sat 27 Dec 2025 14:01:04 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: qI8F6gP1HIoMnB6A8xaK4JU2JSo8cZk6fYXMxxhwpio=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 10: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 11: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 12: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 13: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 14: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 15: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 16: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 17: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 18: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 19: oHkLUmhmvrubjwuP6K7P3C4T_28.roa (hash: 3PcQHi8oCuBtUwDU0ao0Tbto62+5dCG/YxFTuMxLsW4=) 20: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 21: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 22: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:86:fe:39:30:cf:42:68:5b:0e:9b:cb:16:8f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 26 14:01:04 2025 GMT Not After : Dec 27 14:01:04 2025 GMT Subject: CN=8a5dd4a66786a4f0460f048ebfcc3bc2aafd06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e1:d3:f8:b5:29:52:5f:d4:b1:df:d5:b3:61: 94:00:bd:ed:e6:fb:e0:e3:f0:8c:e5:9c:9d:e5:92: 4f:ea:19:d7:ed:6a:c9:af:77:ee:5b:6c:c8:5e:7f: 78:0b:63:c6:79:91:1d:97:48:82:91:8c:94:fa:dd: 89:f3:d6:53:68:ff:b1:42:97:ea:55:83:62:96:58: 25:10:d6:d7:4f:0a:b7:a5:66:be:d5:40:12:24:c5: db:65:d7:0e:b5:e9:d3:05:ea:0d:cd:01:20:05:92: bd:d9:1e:cf:17:3d:5c:d4:55:28:9b:38:b8:14:e2: 66:3d:bd:19:6d:fc:2a:09:f3:a5:e9:2e:fd:a1:70: 7d:c8:c5:71:0b:1c:7d:c5:c8:d0:e5:83:26:f9:41: 00:d4:9c:96:1f:5b:f5:8d:ba:0d:39:73:20:bb:e7: 11:30:3c:d1:a2:ea:61:6c:79:73:ac:4c:1b:29:92: c5:cb:47:f6:10:d2:b9:cd:ed:41:87:45:b0:94:e1: 2e:68:98:2c:8e:44:0a:04:9f:92:29:06:53:07:af: ba:b7:8f:68:e2:b8:a7:57:47:7e:2d:a5:9e:a3:08: fd:e9:94:04:e5:b3:2c:9c:c5:e8:e0:be:2f:f8:ce: 2a:db:57:af:74:73:88:19:40:34:db:ae:e1:21:22: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5D:D4:A6:67:86:A4:F0:46:0F:04:8E:BF:CC:3B:C2:AA:FD:06:FA X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d9:75:0d:d1:78:ba:35:88:1f:a4:81:d0:8b:56:e2:86:63: eb:d0:77:79:53:be:43:b6:cc:01:27:60:65:7a:2c:49:31:83: b4:b7:15:a3:ea:9b:f2:a8:a9:6e:df:a0:b4:af:ad:05:a1:2d: 4f:fc:c1:ed:f8:b5:47:f0:e0:90:7b:c7:5c:03:3b:aa:8d:e7: 74:7d:2a:26:b7:29:04:8a:c8:e7:5a:bc:7c:24:01:b8:10:22: 52:1b:3a:b0:c0:d9:de:44:36:5e:70:32:b4:10:a7:91:c8:98: 5d:0b:dc:25:68:8d:87:71:da:87:60:25:fc:3d:f4:e3:61:e2: 47:c7:92:d4:56:61:2a:8e:b8:58:10:4a:3c:43:67:48:2d:20: d7:df:20:b8:22:64:f0:9b:fd:90:24:46:d3:0d:7c:2f:bd:5c: 3c:3d:f5:a6:3e:1f:a7:26:cb:9a:c1:14:51:76:b2:98:81:57: 24:68:74:d3:99:3c:ce:5b:4e:e8:4e:66:4e:dd:5b:21:9c:7d: e6:6f:49:f4:ed:60:83:8d:fa:f5:4f:8d:12:af:e6:e0:35:0f: 10:ee:8c:f1:5c:fa:d8:99:6d:8b:5a:f0:74:80:f5:ff:84:b3: 29:c9:f8:9a:df:1a:c0:5c:9f:95:3c:b2:1a:e3:26:c2:6d:86: d5:9d:8a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9ob+OTDPQmhbDpvLFo9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjI2MTQwMTA0WhcNMjUxMjI3MTQwMTA0WjAzMTEwLwYDVQQD Eyg4YTVkZDRhNjY3ODZhNGYwNDYwZjA0OGViZmNjM2JjMmFhZmQwNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OHT+LUpUl/Usd/Vs2GUAL3t5vvg 4/CM5Zyd5ZJP6hnX7WrJr3fuW2zIXn94C2PGeZEdl0iCkYyU+t2J89ZTaP+xQpfq VYNillglENbXTwq3pWa+1UASJMXbZdcOtenTBeoNzQEgBZK92R7PFz1c1FUomzi4 FOJmPb0ZbfwqCfOl6S79oXB9yMVxCxx9xcjQ5YMm+UEA1JyWH1v1jboNOXMgu+cR MDzRouphbHlzrEwbKZLFy0f2ENK5ze1Bh0WwlOEuaJgsjkQKBJ+SKQZTB6+6t49o 4rinV0d+LaWeowj96ZQE5bMsnMXo4L4v+M4q21evdHOIGUA0267hISJbywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpd1KZnhqTwRg8Ejr/MO8Kq/Qb6MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9l1DdF4 ujWIH6SB0ItW4oZj69B3eVO+Q7bMASdgZXosSTGDtLcVo+qb8qipbt+gtK+tBaEt T/zB7fi1R/DgkHvHXAM7qo3ndH0qJrcpBIrI51q8fCQBuBAiUhs6sMDZ3kQ2XnAy tBCnkciYXQvcJWiNh3Hah2Al/D3042HiR8eS1FZhKo64WBBKPENnSC0g198guCJk 8Jv9kCRG0w18L71cPD31pj4fpybLmsEUUXaymIFXJGh005k8zltO6E5mTt1bIZx9 5m9J9O1gg4369U+NEq/m4DUPEO6M8Vz62Jlti1rwdID1/4SzKcn4mt8awFyflTyy GuMmwm2G1Z2K4w== -----END CERTIFICATE-----Generated at Fri Dec 26 18:02:30 2025 by rpki-client