This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: YXy8yxtAvEP/13qnJjyY+VRctg0Tzvs/l1FJuXy+dyM= Subject key identifier: 31:91:90:4D:8E:53:E7:64:80:9F:5D:3A:09:42:9B:0A:E2:71:6C:7F Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B2F30013A8CCF9EDBAB42FF96DB6913F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DF3 Signing time: Thu 18 Dec 2025 02:00:33 +0000 Manifest this update: Thu 18 Dec 2025 02:00:33 +0000 Manifest next update: Fri 19 Dec 2025 02:00:33 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: EWdH8UkeLcZB+6NnUALQD5HZ+H1NUbvEckkq0QgjQYk=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 10: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 11: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 12: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 13: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 14: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 15: da2k4kkg5lEUqU-HrsfQSd4jDyY.roa (hash: 0QYieGsvyj25fl9hPrJSkWKf4K69KfEWFeHhni5jPsc=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 19: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 20: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 21: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 22: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 23: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:01:3a:8c:cf:9e:db:ab:42:ff:96:db:69:13:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 18 02:00:33 2025 GMT Not After : Dec 19 02:00:33 2025 GMT Subject: CN=3191904d8e53e764809f5d3a09429b0ae2716c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:0a:31:7d:38:c0:b5:93:09:b2:ea:b6:af: 7e:46:41:76:32:c3:b6:f3:11:14:b9:c1:1c:9e:9f: bf:70:20:59:88:38:9b:50:36:1a:df:1e:7c:e9:92: 1a:fa:2e:bf:0f:5c:ca:c8:73:93:f9:ed:da:74:ef: 6d:28:54:28:6f:3d:d9:a8:23:1f:5a:30:94:db:5c: da:02:94:f8:19:23:03:d8:f6:2f:0e:e2:85:c3:03: 8f:3e:9d:3b:b3:6c:68:11:d4:af:54:5d:f5:e0:26: 5c:2c:93:4d:c7:78:b0:ed:1b:72:a5:9e:6e:f2:95: aa:1b:fd:45:78:df:d8:2d:b4:7b:6a:90:45:04:a3: 71:1b:f5:7d:20:aa:d1:c4:7c:5d:b5:98:80:f0:93: 72:2d:88:f5:2f:62:64:70:60:ba:85:19:d9:4e:37: af:94:4b:63:e3:09:5e:7a:c3:46:f5:fa:e0:63:84: 72:ab:18:87:a1:5e:7a:24:7b:53:e3:70:67:3d:11: da:cf:23:f9:ff:fe:29:76:c5:a8:6e:7b:12:a4:e6: a3:37:d4:48:c6:af:83:a6:46:bc:16:5e:30:64:fa: 6e:c2:bf:0d:a2:51:30:92:c9:11:2b:70:49:71:0a: 8d:09:0b:ac:b6:03:ea:62:cf:30:56:8d:ca:d8:ef: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:91:90:4D:8E:53:E7:64:80:9F:5D:3A:09:42:9B:0A:E2:71:6C:7F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:09:f4:7e:56:17:af:96:de:f6:4b:01:03:f6:fb:53:83:d8: 82:e1:f1:da:f4:a4:13:54:c5:9f:d9:c8:ad:7e:38:ba:5e:2f: 0f:dc:b8:da:9a:3c:8b:77:a8:bc:46:94:0c:1e:8b:72:0f:71: 7f:80:b0:cd:e4:76:1d:bc:2c:dd:99:33:46:ff:3d:2a:9e:2f: 86:4a:06:56:e5:c5:63:e7:c9:5e:e6:e8:9a:8b:a5:2b:03:39: f5:bc:19:3a:6d:75:11:bd:51:b4:ae:e6:f2:ed:5e:c7:b5:58: 6c:5c:59:9c:14:a9:ac:77:50:ec:1f:bd:9b:49:f5:2c:84:b3: 68:54:06:5f:19:0b:71:a8:04:b0:0d:23:27:26:be:5b:f0:94: 70:1d:26:f6:d0:9b:10:90:91:d0:ae:9e:d7:2e:ba:dd:e6:ba: 2a:d4:86:7a:9c:ff:33:41:e6:e7:4a:63:b7:04:93:34:4c:09: b7:92:1c:f4:b3:93:27:9a:6d:40:bc:d5:25:61:1c:54:9a:3c: 04:bb:63:34:27:4d:e6:4b:49:a0:e3:7f:55:7e:a6:6b:d9:18: 6d:fc:e7:51:66:fd:24:33:e1:0a:e7:66:fc:d6:b0:c2:22:8b: fc:5d:e4:80:4d:fe:ac:7c:8b:17:27:f7:c8:27:b6:95:ef:0b: d6:cb:de:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMAE6jM+e26tC/5bbaRP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjE4MDIwMDMzWhcNMjUxMjE5MDIwMDMzWjAzMTEwLwYDVQQD EygzMTkxOTA0ZDhlNTNlNzY0ODA5ZjVkM2EwOTQyOWIwYWUyNzE2YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeEKMX04wLWTCbLqtq9+RkF2MsO2 8xEUucEcnp+/cCBZiDibUDYa3x586ZIa+i6/D1zKyHOT+e3adO9tKFQobz3ZqCMf WjCU21zaApT4GSMD2PYvDuKFwwOPPp07s2xoEdSvVF314CZcLJNNx3iw7RtypZ5u 8pWqG/1FeN/YLbR7apBFBKNxG/V9IKrRxHxdtZiA8JNyLYj1L2JkcGC6hRnZTjev lEtj4wleesNG9frgY4RyqxiHoV56JHtT43BnPRHazyP5//4pdsWobnsSpOajN9RI xq+Dpka8Fl4wZPpuwr8NolEwkskRK3BJcQqNCQustgPqYs8wVo3K2O/IBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGRkE2OU+dkgJ9dOglCmwricWx/MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1An0flYX r5be9ksBA/b7U4PYguHx2vSkE1TFn9nIrX44ul4vD9y42po8i3eovEaUDB6Lcg9x f4CwzeR2Hbws3ZkzRv89Kp4vhkoGVuXFY+fJXubomoulKwM59bwZOm11Eb1RtK7m 8u1ex7VYbFxZnBSprHdQ7B+9m0n1LISzaFQGXxkLcagEsA0jJya+W/CUcB0m9tCb EJCR0K6e1y663ea6KtSGepz/M0Hm50pjtwSTNEwJt5Ic9LOTJ5ptQLzVJWEcVJo8 BLtjNCdN5ktJoON/VX6ma9kYbfznUWb9JDPhCudm/NawwiKL/F3kgE3+rHyLFyf3 yCe2le8L1svexw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:06 2025 by rpki-client