This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: f0GfZR1r/ZRP7xJDF/vh7uiJW1uEh9RwlvdVSb0aTrU= Subject key identifier: E5:B7:7A:A0:37:C4:6B:A9:A5:AD:4A:B4:DD:A1:DA:FF:47:D8:20:7E Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B19F1BCA55EDA5A641F5EC8F7585745B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DE6 Signing time: Sat 13 Dec 2025 23:00:31 +0000 Manifest this update: Sat 13 Dec 2025 23:00:31 +0000 Manifest next update: Sun 14 Dec 2025 23:00:31 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: Z4GxCrP2+HqjjaAZYwEOBYttG5ABov6szReT31NdgDI=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: o6YvhzQz6UhqvJTcu-UF42mz3ig.roa (hash: 6XXEZvyPqyJcYG7at6PCliQ8gKNA9ce9A/pGbF+nx9g=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:bc:a5:5e:da:5a:64:1f:5e:c8:f7:58:57:45:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 13 23:00:31 2025 GMT Not After : Dec 14 23:00:31 2025 GMT Subject: CN=e5b77aa037c46ba9a5ad4ab4dda1daff47d8207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:5f:4b:8f:b1:ca:46:54:0c:62:34:d4:eb: 4e:2d:5c:7c:fc:88:ab:87:92:33:6d:eb:e4:28:54: 81:4c:19:29:e8:1a:bc:51:3b:25:d9:29:a1:f1:29: 02:60:aa:f5:7f:26:3d:92:8b:9c:e5:04:70:56:cf: b3:f0:5f:5e:2d:5c:d2:53:5d:f3:f6:c3:59:c2:ec: b1:90:28:99:09:4d:9d:e5:7a:7f:86:3c:cd:e7:90: 1b:8a:cd:ad:dd:8d:ca:f8:fd:b2:2c:1f:5b:0b:c6: e4:8d:68:5f:33:9d:05:94:19:10:13:47:ab:14:94: 8c:38:da:1f:ad:7c:32:05:4a:2f:ef:6f:51:d5:f1: d6:43:63:04:8b:65:fa:3c:5d:fa:53:0e:d0:cf:b6: f3:b8:54:3c:f0:28:19:4a:65:62:04:80:2f:06:1c: a7:09:6b:52:11:6e:84:39:dc:3c:07:c0:f9:b2:6e: e4:f1:ae:b3:81:8a:28:b7:03:31:86:98:eb:02:a2: 3b:01:38:80:c6:9b:93:d3:59:e2:fe:34:12:c5:61: 40:c1:26:71:1c:b2:d0:48:29:9e:c2:0f:c9:28:b3: dd:87:4c:90:64:d1:91:44:3d:b8:1f:c0:e4:51:70: b3:81:f9:80:36:5c:38:f4:cf:12:0a:7b:dc:26:a7: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B7:7A:A0:37:C4:6B:A9:A5:AD:4A:B4:DD:A1:DA:FF:47:D8:20:7E X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:7f:a2:21:56:a8:c7:98:c4:12:68:87:c7:83:e4:19:81: 00:26:db:6c:0b:56:5e:c0:00:25:0a:aa:7c:a9:12:f5:31:d3: 54:b7:9e:9b:ca:7d:96:69:61:35:d0:2d:cd:5a:fc:8a:fa:46: 4f:fb:df:d4:f3:ae:ac:f4:ae:25:65:1c:87:93:ac:dd:67:e0: dd:a7:2e:95:4e:1d:03:92:69:13:aa:e4:4d:33:66:2c:aa:b4: 14:32:f5:6f:0b:52:1f:bf:fd:37:57:ee:66:52:6d:6c:52:5d: ee:3e:9d:ca:f7:61:55:88:6d:10:82:ec:6e:2e:b0:61:82:b2: a1:b5:c1:34:ac:9f:6d:f0:48:2f:9e:47:6e:f6:63:2a:10:49: fe:e1:e5:49:8e:da:7f:a5:e6:95:46:dd:b1:ab:3a:49:24:52: 72:03:db:36:df:f0:3c:c5:ac:de:fa:6f:65:3e:a5:ae:ff:97: 7c:b5:45:c5:24:df:92:65:ba:1b:f8:26:64:76:6c:f8:40:be: 6a:5b:cf:82:0f:64:7b:11:d7:27:9f:39:bf:eb:6f:21:bf:06: dc:cc:e9:f4:25:63:7e:05:4a:37:46:32:f7:a0:8e:db:85:3c: dc:a4:93:89:45:d0:bf:b4:5c:17:36:36:b5:ac:a8:44:13:aa: 54:b5:22:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8bylXtpaZB9eyPdYV0WyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjEzMjMwMDMxWhcNMjUxMjE0MjMwMDMxWjAzMTEwLwYDVQQD EyhlNWI3N2FhMDM3YzQ2YmE5YTVhZDRhYjRkZGExZGFmZjQ3ZDgyMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8FfS4+xykZUDGI01OtOLVx8/Iir h5IzbevkKFSBTBkp6Bq8UTsl2Smh8SkCYKr1fyY9kouc5QRwVs+z8F9eLVzSU13z 9sNZwuyxkCiZCU2d5Xp/hjzN55Abis2t3Y3K+P2yLB9bC8bkjWhfM50FlBkQE0er FJSMONofrXwyBUov729R1fHWQ2MEi2X6PF36Uw7Qz7bzuFQ88CgZSmViBIAvBhyn CWtSEW6EOdw8B8D5sm7k8a6zgYootwMxhpjrAqI7ATiAxpuT01ni/jQSxWFAwSZx HLLQSCmewg/JKLPdh0yQZNGRRD24H8DkUXCzgfmANlw49M8SCnvcJqdGywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOW3eqA3xGuppa1KtN2h2v9H2CB+MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE9/oiFW qMeYxBJoh8eD5BmBACbbbAtWXsAAJQqqfKkS9THTVLeem8p9lmlhNdAtzVr8ivpG T/vf1POurPSuJWUch5Os3Wfg3aculU4dA5JpE6rkTTNmLKq0FDL1bwtSH7/9N1fu ZlJtbFJd7j6dyvdhVYhtEILsbi6wYYKyobXBNKyfbfBIL55HbvZjKhBJ/uHlSY7a f6XmlUbdsas6SSRScgPbNt/wPMWs3vpvZT6lrv+XfLVFxSTfkmW6G/gmZHZs+EC+ alvPgg9kexHXJ585v+tvIb8G3Mzp9CVjfgVKN0Yy96CO24U83KSTiUXQv7RcFzY2 tayoRBOqVLUiMw== -----END CERTIFICATE-----Generated at Sun Dec 14 05:29:38 2025 by rpki-client