This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: WCrsmrBx143pw28h04XxssjXqRXlsjHAXqUnO9PXJeU=
Subject key identifier: A2:FF:FF:A8:9E:0C:4E:87:9C:70:D9:12:E9:5C:0A:6D:2C:90:A7:1B
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019BDE7FA5DFF69D885342F5E6335C9C639E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 0E50
Signing time: Wed 21 Jan 2026 03:01:06 +0000
Manifest this update: Wed 21 Jan 2026 03:01:06 +0000
Manifest next update: Thu 22 Jan 2026 03:01:06 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 6N1zSrxGxEDRaS6C7FAY0zi6aj8.roa (hash: wABNoFQpTIXR9Gtm4VZ92qxhMckx3/pSEwXZyk3S22E=)
6: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=)
7: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
8: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: yKKLQ7ZIEmhxiNccBpNCi5R2qiDfND+qD67I8DIzU7A=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=)
12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
13: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (hash: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU=)
14: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
15: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (hash: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg=)
16: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
17: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
18: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
19: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
20: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
21: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=)
22: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=)
23: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
25: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (hash: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:de:7f:a5:df:f6:9d:88:53:42:f5:e6:33:5c:9c:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 21 03:01:06 2026 GMT
Not After : Jan 22 03:01:06 2026 GMT
Subject: CN=a2ffffa89e0c4e879c70d912e95c0a6d2c90a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:6f:be:37:b8:20:ce:d6:08:12:8e:b9:6f:
37:54:39:68:4f:a4:25:46:aa:a9:5d:40:29:92:60:
39:af:8c:e2:0e:01:17:7f:e2:d0:28:0d:49:00:cb:
fb:e1:7b:8a:07:36:22:e1:3c:d5:4b:c8:bd:9b:3e:
21:4b:77:1e:55:b2:02:95:03:46:96:49:fe:12:62:
5b:68:ba:8c:22:ae:bc:30:01:56:20:67:fa:e9:ab:
4a:42:ed:83:96:a0:a3:47:a8:b8:b3:cb:b6:fe:2f:
2f:94:cf:7f:18:9e:90:38:c5:c4:d5:89:97:1f:8a:
c5:0a:2c:03:89:39:5c:a8:c6:7c:d3:69:67:0b:61:
31:a2:7f:f6:53:66:97:64:39:1a:17:e3:6d:68:2a:
5d:70:18:69:55:05:14:42:d2:1d:be:60:93:ed:72:
ca:5f:31:21:5a:2b:a4:6f:e4:0c:2d:90:d2:24:cd:
e0:2a:90:33:b6:40:f9:67:bb:4f:f8:00:a7:15:32:
f7:5d:54:59:66:23:8d:4b:9e:88:78:0e:f6:d4:db:
03:1c:50:d5:e5:d0:84:e4:c2:dc:b8:1a:67:2d:9d:
0b:13:99:4d:b7:44:4c:d7:03:5e:b6:18:1b:da:ee:
6c:a0:cf:89:b6:61:1a:08:38:6a:e0:d7:b0:c7:b8:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:FF:A8:9E:0C:4E:87:9C:70:D9:12:E9:5C:0A:6D:2C:90:A7:1B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:d3:dc:b1:af:af:c8:98:03:b7:99:1d:81:4b:c8:33:7e:
b2:2f:8e:2e:dd:75:0c:90:1d:5f:1a:4b:f8:e8:bf:13:6d:d5:
5a:4c:3b:2b:de:5d:3d:17:4c:60:96:39:44:9d:eb:6a:8b:1f:
9a:4e:bc:0e:e1:75:a9:a0:42:1a:cd:9e:0b:0e:0d:40:de:9f:
62:8d:82:55:7d:10:78:35:d2:c3:b6:da:f3:95:38:e3:65:91:
57:33:89:95:ad:82:52:ca:84:d3:f7:16:01:75:0a:b6:c7:4d:
8f:ca:45:e3:17:01:d6:b3:4f:fc:31:9f:92:e6:c1:9f:6f:f7:
67:ab:7e:89:e2:2b:37:c7:05:c9:3b:f9:b7:37:7b:43:ef:28:
f5:56:7f:4c:8a:9f:64:8f:fe:01:75:61:e8:ac:ee:c2:1c:cf:
bb:2c:2d:de:6b:6c:1d:d5:0e:ad:19:1a:a7:70:2f:4e:b6:3c:
16:65:07:2b:e2:8b:15:d0:b4:0d:9f:74:36:6b:7f:0e:78:01:
80:1b:c5:49:62:04:ff:ea:e2:d7:9f:8f:47:64:5f:a2:53:62:
7f:a3:7b:5f:5f:04:17:2d:c3:5f:53:59:fc:3a:31:65:56:a2:
93:f5:ce:1f:09:61:74:63:a6:36:32:e1:1e:fc:62:51:7b:5b:
2f:9e:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:59:44 2026 by rpki-client