This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 1PDA77aCqWguZAlvyjbcV0S4HRScyrxGuXkQ073c7NI= Subject key identifier: 2D:A5:9F:AF:98:54:AF:7C:B7:28:61:CE:72:5F:41:A4:18:FF:10:E0 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019AF5406B7FA96B736C50433C73B486AB97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DD3 Signing time: Sat 06 Dec 2025 20:00:30 +0000 Manifest this update: Sat 06 Dec 2025 20:00:30 +0000 Manifest next update: Sun 07 Dec 2025 20:00:30 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: ctkFW5B5CMk4RV9L1mFJpaxGvUAp8HzgcHuWKKbS3wk=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: o6YvhzQz6UhqvJTcu-UF42mz3ig.roa (hash: 6XXEZvyPqyJcYG7at6PCliQ8gKNA9ce9A/pGbF+nx9g=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:6b:7f:a9:6b:73:6c:50:43:3c:73:b4:86:ab:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 6 20:00:30 2025 GMT Not After : Dec 7 20:00:30 2025 GMT Subject: CN=2da59faf9854af7cb72861ce725f41a418ff10e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:4c:50:e5:df:c4:02:d3:44:1b:da:6f:da: 57:74:77:77:73:28:4c:65:4a:75:09:6d:8e:a9:76: cc:e7:f3:63:59:fc:75:74:4a:5f:53:ea:0d:91:ea: 04:b3:c8:5f:fa:27:a4:9a:26:cf:28:1b:c1:9b:f8: a2:d9:13:46:a3:f3:a7:d3:1b:d0:ae:c0:d7:c8:e1: dc:3f:31:73:38:fe:aa:8a:95:ce:10:98:25:b8:f3: 05:87:a5:fa:b1:b9:0f:e3:37:5e:63:8f:5b:44:23: 16:72:f0:03:9c:a9:a3:f7:d2:be:76:da:53:3e:e7: 30:96:50:7a:0f:8d:67:02:21:9c:8e:af:e7:57:bc: 75:40:41:30:a0:dd:54:bb:fd:a7:c1:28:b5:7f:ec: b7:84:1e:3c:0c:d8:77:85:af:41:19:49:12:18:d4: 02:30:f9:52:dc:7f:5d:25:d8:46:1e:5f:25:cd:20: 08:97:db:4f:5c:f1:94:5d:29:89:6b:28:aa:18:76: 68:4f:46:ff:61:81:e2:71:51:35:9a:8a:76:02:7e: 1e:ac:d1:aa:32:d6:66:3c:44:4c:2d:8a:7e:0d:a9: c4:fe:67:4b:9d:f1:b3:48:7f:7d:01:d9:61:47:c2: 80:38:a2:54:c1:3a:6a:b9:09:af:63:25:09:c8:17: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A5:9F:AF:98:54:AF:7C:B7:28:61:CE:72:5F:41:A4:18:FF:10:E0 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b9:f7:6f:cb:a6:63:16:a7:45:4d:ab:fc:84:a5:4a:03:42: 24:9b:8e:9a:13:84:64:57:8d:79:e1:43:e3:c3:fa:36:22:12: 3b:f9:89:8c:54:2d:f8:8e:d5:b5:23:c4:c6:2a:e2:d4:7a:b3: 47:a5:62:38:d2:9f:a0:08:76:a0:6c:00:71:d0:e0:66:c5:33: 2b:71:85:8c:e7:cf:4f:13:02:5c:03:9e:47:c2:e4:4a:f9:13: a7:27:51:bb:36:75:36:8b:e5:c7:b8:4f:b2:c3:59:54:19:61: d6:4b:46:51:9c:e5:d2:e4:fc:b6:b1:4e:19:2d:92:ac:54:3c: d9:98:bf:49:15:fe:e0:bc:11:38:19:5e:36:3e:31:62:55:9d: 21:e2:a7:a1:c6:9d:e2:65:fc:15:da:ce:a9:44:ce:ec:7f:d5: bb:fe:ed:ca:50:16:f1:2b:2d:07:bc:d2:2c:b5:ef:d9:f8:db: cf:68:69:ea:50:85:df:49:d4:cf:12:cd:07:3e:fe:d4:1b:8b: 16:c2:88:07:a0:e1:9c:83:b0:dc:4f:7d:3c:cf:88:8a:0c:fe: 65:e0:7c:3c:b2:d4:5d:24:d2:a1:91:75:14:67:4d:47:e8:bb: 1e:2f:2a:74:08:97:7a:39:c5:bc:cd:3d:57:11:23:3f:e5:e4: c1:a7:e0:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QGt/qWtzbFBDPHO0hquXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjA2MjAwMDMwWhcNMjUxMjA3MjAwMDMwWjAzMTEwLwYDVQQD EygyZGE1OWZhZjk4NTRhZjdjYjcyODYxY2U3MjVmNDFhNDE4ZmYxMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFpMUOXfxALTRBvab9pXdHd3cyhM ZUp1CW2OqXbM5/NjWfx1dEpfU+oNkeoEs8hf+iekmibPKBvBm/ii2RNGo/On0xvQ rsDXyOHcPzFzOP6qipXOEJgluPMFh6X6sbkP4zdeY49bRCMWcvADnKmj99K+dtpT PucwllB6D41nAiGcjq/nV7x1QEEwoN1Uu/2nwSi1f+y3hB48DNh3ha9BGUkSGNQC MPlS3H9dJdhGHl8lzSAIl9tPXPGUXSmJayiqGHZoT0b/YYHicVE1mop2An4erNGq MtZmPERMLYp+DanE/mdLnfGzSH99AdlhR8KAOKJUwTpquQmvYyUJyBealQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2ln6+YVK98tyhhznJfQaQY/xDgMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7n3b8um YxanRU2r/ISlSgNCJJuOmhOEZFeNeeFD48P6NiISO/mJjFQt+I7VtSPExiri1Hqz R6ViONKfoAh2oGwAcdDgZsUzK3GFjOfPTxMCXAOeR8LkSvkTpydRuzZ1Novlx7hP ssNZVBlh1ktGUZzl0uT8trFOGS2SrFQ82Zi/SRX+4LwROBleNj4xYlWdIeKnocad 4mX8FdrOqUTO7H/Vu/7tylAW8SstB7zSLLXv2fjbz2hp6lCF30nUzxLNBz7+1BuL FsKIB6DhnIOw3E99PM+Iigz+ZeB8PLLUXSTSoZF1FGdNR+i7Hi8qdAiXejnFvM09 VxEjP+Xkwafgkg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:14:39 2025 by rpki-client