This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: lMeZ64y1Vvagcu1YvEG1rFOSDWLXvDNDBys/bownfaM= Subject key identifier: 6C:8A:CB:44:A9:67:F1:2D:31:87:4C:A9:38:D6:E2:EF:DE:78:1A:34 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019BA49054EBF44F8218155B50B54AB723BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0E32 Signing time: Fri 09 Jan 2026 21:01:20 +0000 Manifest this update: Fri 09 Jan 2026 21:01:20 +0000 Manifest next update: Sat 10 Jan 2026 21:01:20 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6N1zSrxGxEDRaS6C7FAY0zi6aj8.roa (hash: wABNoFQpTIXR9Gtm4VZ92qxhMckx3/pSEwXZyk3S22E=) 6: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 7: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 8: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: fjUr3y41b79DhiXFB6ui0Rcig66KPg/R+grDfqmq0no=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=) 12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 13: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (hash: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU=) 14: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 15: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (hash: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg=) 16: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 17: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 18: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 19: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 20: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 21: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=) 22: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=) 23: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) 25: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (hash: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:90:54:eb:f4:4f:82:18:15:5b:50:b5:4a:b7:23:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 9 21:01:20 2026 GMT Not After : Jan 10 21:01:20 2026 GMT Subject: CN=6c8acb44a967f12d31874ca938d6e2efde781a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:bf:ac:6c:f0:ae:64:94:31:bb:8c:4a:8d: 32:cb:6e:77:fd:8a:f8:6b:13:20:2b:66:d2:25:86: 73:3c:45:31:d9:d5:a0:b3:98:7f:f8:29:47:f7:55: e6:87:d4:29:20:ab:d3:a7:67:8b:42:1c:4a:53:3b: 03:9c:eb:ad:aa:6c:c4:5a:5d:c7:a0:19:c5:9a:f8: 69:3b:b1:f3:5e:a6:b1:5c:42:50:f4:ed:f0:94:24: 0f:bf:5d:ae:b8:0b:ac:90:4c:d1:83:bc:c0:d0:41: 1b:c2:59:c6:82:e3:30:ab:f8:55:1c:2e:2a:7e:43: ea:ad:11:0f:e1:ea:ee:4e:be:dd:0e:2d:a4:a6:c6: 45:f7:9f:02:f3:39:b1:ef:12:63:91:bc:c5:d5:ea: eb:95:3d:80:05:4f:37:99:06:7d:1f:43:a2:55:d5: 51:92:c5:77:38:c5:22:01:02:68:b7:24:84:77:96: 0f:92:8b:6f:60:54:0c:54:67:38:08:8d:43:b2:e8: e6:2d:4f:e2:bb:67:af:bf:4d:17:06:00:2a:f7:76: 48:14:58:fa:d2:b6:d7:98:30:68:e2:19:21:8d:51: 91:90:bc:22:cb:85:af:c4:ba:cf:ac:27:90:b8:2e: 17:50:d4:0c:33:bc:5a:10:8c:4b:8a:e6:8c:a2:f6: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:CB:44:A9:67:F1:2D:31:87:4C:A9:38:D6:E2:EF:DE:78:1A:34 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9c:36:04:bd:54:ad:4e:13:97:2a:2e:d7:26:5e:b4:6c:6e: ba:56:95:84:b5:e3:36:cf:d8:38:d8:4b:8b:94:39:78:49:b5: 5d:7b:25:13:f8:de:cc:3e:09:26:c2:1e:bc:fa:59:b8:5e:c9: 1b:7e:75:7e:74:32:34:4e:90:52:e0:bd:db:c4:16:c7:cc:e9: e2:1e:32:0e:d1:36:ef:16:bb:ae:6c:fa:4b:9f:12:62:6a:25: 3b:d6:92:72:c1:36:44:76:9b:ee:0d:2a:92:64:2e:fd:27:2d: a7:2b:61:f5:7d:c7:d1:4d:5b:8e:5a:91:60:3b:7c:4a:93:cf: 1d:38:52:8d:1c:b4:1e:e5:4b:9b:23:90:58:e7:9a:aa:ce:97: 5d:45:4b:e7:4e:f4:a7:e4:da:00:4d:4a:b8:c3:41:39:f6:5e: 44:89:e2:8d:7b:42:2c:7d:f6:db:80:a1:da:d4:30:10:3e:17: 51:f2:f6:8c:6e:dc:6b:3b:b1:f7:5a:00:3b:41:d8:72:58:46: 20:de:53:41:f3:32:4d:a8:a2:ee:9c:de:5e:6d:cc:46:11:19: 21:0e:eb:d9:64:5e:63:b2:71:48:68:fd:aa:2f:73:02:29:95: 2d:99:52:75:83:e5:6c:92:bc:d1:5d:a1:23:6d:b0:c6:a9:b1: 59:9b:b5:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZukkFTr9E+CGBVbULVKtyO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTA5MjEwMTIwWhcNMjYwMTEwMjEwMTIwWjAzMTEwLwYDVQQD Eyg2YzhhY2I0NGE5NjdmMTJkMzE4NzRjYTkzOGQ2ZTJlZmRlNzgxYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHO/rGzwrmSUMbuMSo0yy253/Yr4 axMgK2bSJYZzPEUx2dWgs5h/+ClH91Xmh9QpIKvTp2eLQhxKUzsDnOutqmzEWl3H oBnFmvhpO7HzXqaxXEJQ9O3wlCQPv12uuAuskEzRg7zA0EEbwlnGguMwq/hVHC4q fkPqrREP4eruTr7dDi2kpsZF958C8zmx7xJjkbzF1errlT2ABU83mQZ9H0OiVdVR ksV3OMUiAQJotySEd5YPkotvYFQMVGc4CI1DsujmLU/iu2evv00XBgAq93ZIFFj6 0rbXmDBo4hkhjVGRkLwiy4WvxLrPrCeQuC4XUNQMM7xaEIxLiuaMovZVdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyKy0SpZ/EtMYdMqTjW4u/eeBo0MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZw2BL1U rU4Tlyou1yZetGxuulaVhLXjNs/YONhLi5Q5eEm1XXslE/jezD4JJsIevPpZuF7J G351fnQyNE6QUuC928QWx8zp4h4yDtE27xa7rmz6S58SYmolO9aScsE2RHab7g0q kmQu/Sctpyth9X3H0U1bjlqRYDt8SpPPHThSjRy0HuVLmyOQWOeaqs6XXUVL5070 p+TaAE1KuMNBOfZeRInijXtCLH3224Ch2tQwED4XUfL2jG7cazux91oAO0HYclhG IN5TQfMyTaii7pzeXm3MRhEZIQ7r2WReY7JxSGj9qi9zAimVLZlSdYPlbJK80V2h I22wxqmxWZu1nQ== -----END CERTIFICATE-----Generated at Sat Jan 10 05:02:51 2026 by rpki-client