This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: Cz9edmPagIACjkiyXg51J6vQ4OhSnXq9JXJ2TIuDxHg= Subject key identifier: 83:56:C0:C1:6D:71:B9:0A:EF:AB:24:DB:04:18:D1:1E:C6:66:1F:9F Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019AE5CD1345B77E0ADB48B80CE602623508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DCB Signing time: Wed 03 Dec 2025 20:00:13 +0000 Manifest this update: Wed 03 Dec 2025 20:00:13 +0000 Manifest next update: Thu 04 Dec 2025 20:00:13 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: 3j0OatuCvfOi2khGOWiBUhs/XsrLz0jqezBVA4/xN/s=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: o6YvhzQz6UhqvJTcu-UF42mz3ig.roa (hash: 6XXEZvyPqyJcYG7at6PCliQ8gKNA9ce9A/pGbF+nx9g=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:cd:13:45:b7:7e:0a:db:48:b8:0c:e6:02:62:35:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 3 20:00:13 2025 GMT Not After : Dec 4 20:00:13 2025 GMT Subject: CN=8356c0c16d71b90aefab24db0418d11ec6661f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:c6:67:61:d4:c3:42:c7:2d:32:3d:0f:9a: e7:ab:e3:86:8d:14:45:b8:a8:ac:c1:c2:9c:78:ac: 67:f3:ec:f7:21:5d:e2:05:a6:a2:be:c6:0f:af:0d: ac:f0:53:8d:2f:9b:42:4f:94:79:74:c8:b3:74:62: 0a:f6:57:06:80:7f:67:1f:88:48:d0:88:b8:e7:87: 4d:4e:2c:0c:81:92:12:0e:0b:b3:7c:2e:10:88:6a: 04:5e:9a:9b:ab:61:86:24:68:80:3e:19:2a:5d:ff: 34:5b:86:75:92:70:84:99:5f:46:32:47:b3:88:d6: ab:cf:ca:10:8e:13:b9:1b:3f:55:99:66:2f:e3:a2: 7a:a0:82:7c:fd:61:11:d3:c0:18:b9:36:06:30:95: eb:38:ef:2f:03:94:ef:88:60:9c:14:c4:df:a4:0c: 57:b6:4a:b5:e4:90:7e:9a:70:e5:69:e1:32:c7:75: 0c:80:df:d5:24:43:16:19:ad:b1:02:fa:af:f9:22: 9a:e8:eb:22:c0:15:9a:4d:87:b4:fd:7c:b6:af:e3: 37:6f:f7:a9:c2:60:f1:89:74:df:cc:d7:70:c0:22: e6:e1:07:41:54:8f:0e:d4:51:06:c6:00:3e:b8:b2: 09:b1:b3:76:3f:d4:52:c8:1d:7e:9a:36:63:51:03: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:56:C0:C1:6D:71:B9:0A:EF:AB:24:DB:04:18:D1:1E:C6:66:1F:9F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:58:16:ba:49:58:43:de:bc:2c:5f:e6:15:39:f8:3e:6d:17: b0:97:59:55:1b:f1:57:fc:f3:08:84:77:00:0a:ae:47:95:80: 43:20:ad:1e:0a:e3:bd:62:25:e7:cf:eb:41:dc:a4:d0:b7:ee: b6:eb:d3:c9:f9:34:04:68:d3:14:bd:d6:2f:86:d8:96:87:ac: d5:7f:fb:3d:ad:3a:b8:58:d6:94:ee:99:5c:71:1d:4a:d3:7f: 23:a2:1c:ec:7e:b7:4c:5b:65:12:6f:d1:c0:69:ee:66:43:1c: 27:a7:b0:6f:98:eb:0e:a8:bc:a8:25:26:89:e7:90:e1:2c:b9: 75:a4:87:62:ae:72:09:69:1d:af:54:0c:ae:2e:f8:28:e2:fb: ec:3e:7f:ca:f9:f3:57:f0:b2:5a:c2:f1:8c:85:ec:ec:44:62: eb:b0:17:95:67:86:2b:fd:6d:d3:60:8a:ef:fa:8a:78:e7:75: ed:b2:37:63:7e:1c:19:30:2f:2f:e5:f3:b6:19:d4:6d:d2:f1: ec:4b:a2:64:94:4f:b7:97:ba:69:89:91:2a:a5:66:ef:38:8a: cc:18:41:f0:c6:a2:11:3a:1a:9f:43:1d:b9:be:0a:6a:0b:f1: 66:4f:23:3a:4b:f5:2a:33:88:70:01:69:00:f9:87:82:b6:a2: f1:76:ba:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrlzRNFt34K20i4DOYCYjUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjAzMjAwMDEzWhcNMjUxMjA0MjAwMDEzWjAzMTEwLwYDVQQD Eyg4MzU2YzBjMTZkNzFiOTBhZWZhYjI0ZGIwNDE4ZDExZWM2NjYxZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+DGZ2HUw0LHLTI9D5rnq+OGjRRF uKiswcKceKxn8+z3IV3iBaaivsYPrw2s8FONL5tCT5R5dMizdGIK9lcGgH9nH4hI 0Ii454dNTiwMgZISDguzfC4QiGoEXpqbq2GGJGiAPhkqXf80W4Z1knCEmV9GMkez iNarz8oQjhO5Gz9VmWYv46J6oIJ8/WER08AYuTYGMJXrOO8vA5TviGCcFMTfpAxX tkq15JB+mnDlaeEyx3UMgN/VJEMWGa2xAvqv+SKa6OsiwBWaTYe0/Xy2r+M3b/ep wmDxiXTfzNdwwCLm4QdBVI8O1FEGxgA+uLIJsbN2P9RSyB1+mjZjUQNOHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINWwMFtcbkK76sk2wQY0R7GZh+fMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1gWuklY Q968LF/mFTn4Pm0XsJdZVRvxV/zzCIR3AAquR5WAQyCtHgrjvWIl58/rQdyk0Lfu tuvTyfk0BGjTFL3WL4bYloes1X/7Pa06uFjWlO6ZXHEdStN/I6Ic7H63TFtlEm/R wGnuZkMcJ6ewb5jrDqi8qCUmieeQ4Sy5daSHYq5yCWkdr1QMri74KOL77D5/yvnz V/CyWsLxjIXs7ERi67AXlWeGK/1t02CK7/qKeOd17bI3Y34cGTAvL+XzthnUbdLx 7EuiZJRPt5e6aYmRKqVm7ziKzBhB8MaiEToan0Mdub4KagvxZk8jOkv1KjOIcAFp APmHgrai8Xa6wA== -----END CERTIFICATE-----Generated at Thu Dec 4 00:22:18 2025 by rpki-client