This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: Hi+FtfUmpDnyibxGuzNl/lfoZU2UQo+BIbIqTIePIco= Subject key identifier: 9E:D8:C1:FC:90:64:1B:27:59:80:E1:98:D3:26:74:07:ED:89:6F:9B Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019AC11C044A77DC5887F9386E43489F342F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DB8 Signing time: Wed 26 Nov 2025 17:00:30 +0000 Manifest this update: Wed 26 Nov 2025 17:00:30 +0000 Manifest next update: Thu 27 Nov 2025 17:00:30 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: X7lYphQQMUN9IYMgj5DClhy827VnV5v2qMBrzkNoCyE=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: o6YvhzQz6UhqvJTcu-UF42mz3ig.roa (hash: 6XXEZvyPqyJcYG7at6PCliQ8gKNA9ce9A/pGbF+nx9g=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:1c:04:4a:77:dc:58:87:f9:38:6e:43:48:9f:34:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 26 17:00:30 2025 GMT Not After : Nov 27 17:00:30 2025 GMT Subject: CN=9ed8c1fc90641b275980e198d3267407ed896f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:5b:15:e6:d4:a4:11:e5:15:6e:e9:ed:da: 7d:38:69:1f:7e:c2:2c:33:9f:32:9e:cc:82:d5:f9: 78:54:fb:5a:08:c9:a2:27:12:70:8f:b1:54:e6:39: 93:53:35:69:12:db:4f:ca:f2:37:a4:a5:ac:b5:13: ef:1a:be:4a:b2:08:a1:78:69:a0:4b:6d:d7:cd:5f: 69:a0:52:8a:ff:5f:ce:ce:f7:df:d9:45:a0:20:f3: d9:a5:54:94:5b:c0:ce:77:93:0e:3e:14:55:8b:71: a3:2c:0c:fa:1b:4f:3f:e7:ca:31:d3:05:9b:28:ed: 5b:b9:5d:43:52:58:62:65:b7:6e:0d:b5:5f:cd:91: b0:fe:f1:39:04:fa:de:9c:ff:d6:3d:17:de:26:05: 64:a8:9a:c0:69:8e:44:de:c5:e8:c0:9e:d5:c8:6e: f9:5d:ab:8d:c3:33:1d:07:d2:e0:c2:ba:09:4d:6f: 28:43:e3:79:cd:fc:89:28:77:70:e6:0c:b9:1c:6e: 12:de:51:4e:5e:4c:96:51:d0:66:34:6f:db:df:a3: be:69:8a:15:44:56:7e:ed:6e:b5:c2:6c:bf:2e:b6: 09:fc:5a:91:eb:8b:20:65:ff:de:89:8d:70:e2:df: 1d:8f:a0:38:86:b4:ab:6e:e9:71:62:55:b5:13:ce: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D8:C1:FC:90:64:1B:27:59:80:E1:98:D3:26:74:07:ED:89:6F:9B X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:31:84:70:70:30:94:f4:c5:5e:19:9d:4a:d2:e4:7e:e4:43: 25:d5:1c:02:67:94:4d:50:b7:63:88:a5:26:62:17:7d:46:a2: e6:7c:0e:d8:fd:53:4a:84:8e:b0:27:ea:29:86:25:de:6c:dc: 06:2f:68:ee:28:e2:64:a2:19:bf:60:6a:a9:3f:da:73:28:b3: a9:4c:77:e2:2a:94:d7:a4:1d:85:9f:99:1e:78:af:3c:85:28: 21:c2:c7:2b:57:dc:42:67:48:28:c1:bf:2b:33:5f:e7:e2:04: fa:86:fa:0a:fb:84:67:2d:bf:03:98:e0:d5:51:85:19:98:a3: f9:90:39:01:c7:f5:bb:ea:74:7f:42:60:1e:34:b5:67:0a:f8: 25:32:17:79:78:af:b5:51:ef:71:d7:ad:3e:a4:d1:ff:5e:bd: de:21:0e:9a:39:2d:ff:fd:4a:4a:81:ee:cd:5d:31:81:37:2c: 96:e8:36:ca:84:99:fb:f9:e0:54:4f:b2:5f:ab:ad:8e:6f:fc: 3d:04:15:ff:60:5c:7b:64:72:b1:2e:b0:84:44:0d:ac:9c:d7: 06:87:70:63:94:ac:21:b8:08:bf:7d:9a:86:32:7f:a7:58:95: fb:38:f8:2a:fb:f7:1d:0b:a0:75:bd:cc:9f:a3:a3:42:cf:73: cd:3c:6c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrBHARKd9xYh/k4bkNInzQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMTI2MTcwMDMwWhcNMjUxMTI3MTcwMDMwWjAzMTEwLwYDVQQD Eyg5ZWQ4YzFmYzkwNjQxYjI3NTk4MGUxOThkMzI2NzQwN2VkODk2ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m5bFebUpBHlFW7p7dp9OGkffsIs M58ynsyC1fl4VPtaCMmiJxJwj7FU5jmTUzVpEttPyvI3pKWstRPvGr5KsgiheGmg S23XzV9poFKK/1/Ozvff2UWgIPPZpVSUW8DOd5MOPhRVi3GjLAz6G08/58ox0wWb KO1buV1DUlhiZbduDbVfzZGw/vE5BPrenP/WPRfeJgVkqJrAaY5E3sXowJ7VyG75 XauNwzMdB9LgwroJTW8oQ+N5zfyJKHdw5gy5HG4S3lFOXkyWUdBmNG/b36O+aYoV RFZ+7W61wmy/LrYJ/FqR64sgZf/eiY1w4t8dj6A4hrSrbulxYlW1E86sgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7YwfyQZBsnWYDhmNMmdAftiW+bMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzGEcHAw lPTFXhmdStLkfuRDJdUcAmeUTVC3Y4ilJmIXfUai5nwO2P1TSoSOsCfqKYYl3mzc Bi9o7ijiZKIZv2BqqT/acyizqUx34iqU16QdhZ+ZHnivPIUoIcLHK1fcQmdIKMG/ KzNf5+IE+ob6CvuEZy2/A5jg1VGFGZij+ZA5Acf1u+p0f0JgHjS1Zwr4JTIXeXiv tVHvcdetPqTR/1693iEOmjkt//1KSoHuzV0xgTcslug2yoSZ+/ngVE+yX6utjm/8 PQQV/2Bce2RysS6whEQNrJzXBodwY5SsIbgIv32ahjJ/p1iV+zj4Kvv3HQugdb3M n6OjQs9zzTxsVA== -----END CERTIFICATE-----Generated at Wed Nov 26 23:45:16 2025 by rpki-client