This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: 4/4dpl9nSR+94DG2OU2JvM3Qb2EqBzpKDofe+sOYeC0= Subject key identifier: 2A:12:F1:A6:A7:7B:AA:4E:DA:BA:8C:9D:2D:8C:9C:C9:02:E7:01:37 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE296B3B025BDE9137350A63C33B3135F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 04 Signing time: Wed 03 Dec 2025 05:01:58 +0000 Manifest this update: Wed 03 Dec 2025 05:01:58 +0000 Manifest next update: Thu 04 Dec 2025 05:01:58 +0000 Files and hashes: 1: 6CB0Tl4YG47apBFINoAlLJh0DfQ.roa (hash: DERAPkRBmXodZoa76/M1fe1/30yrXGK8+ImXsmAlEs8=) 2: BqUKbsvLBxawTFe6lbocyvMayfo.roa (hash: Dyttb82AlsCtBruaEKcmePP+n2KCLIf+fF6BNWnXupI=) 3: Ct_iUneimu29k3lorVHqDQkI5ko.roa (hash: prea/mktEEp9J2hmENedR7tKBd2SBMd0XSaJoNQyWhg=) 4: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: b8h7bRGvC8+0OYn/YISP6+fxYg5KDg/3UgWwTJKKXbU=) 5: EAvRjLcBbuHgk5oka9iSLzBviY4.roa (hash: 0MME9vWVHcqvJK+J/nmZvkTf9NUlXx3rUtlPO7QbpKg=) 6: XMavxFEEdIcWyH28Yfn5CoMdsPI.roa (hash: TGSKaggogk6AsDC0c0SbxhACD2tCmQET3HeGr+lBTQQ=) 7: _EfjddeuFKG8MnRhJd7yEgTu2g0.roa (hash: EMo/ZhZbjpH69s5Ccnb39DuAvdS7gz2sAIWU10FyU8g=) 8: e_-yKkdwonWO6CKEIjxx1ukturw.roa (hash: AOG4pqIcVFAVkjq42DO44CaIOSZ4RvLTqijp0X0Hjuo=) 9: elxZu4K9ji2WmHSU8lxHX8DwDRY.roa (hash: cAuWijmXOZYXT9m6C71i9jgDgOiSPcM7fCXNdQt9oH4=) 10: g6C-yiFY0y2tiDGm6X6C5giXzxg.roa (hash: r1yI2j4TsqcI6pkTa+z9HyIsh2P/SNDg9RsKOOa01VA=) 11: jsRZDwsXNurKIL7Ap1QBapz6Isg.roa (hash: kXprBjnQdFsbwsvgqdQQMN7XDtL6GdbNTSFugYgOzB8=) 12: kmwaQJXKu5oNK1QMYZjPLEaW6vA.roa (hash: ILayvTcq7E5XOovRiUZyWfxx6ASX6WCDrzrSp9Qk9AE=) 13: t8nL2p5eyrN1BSO6Ty_pc1LxztY.roa (hash: IjKxVADlJhzM7Jt+Vb+y8QkwSaw5jKcu2tljUtzAMZs=) 14: weimB0J1QnnjxQ9v9IPqrcuwS48.roa (hash: QQzLUjkGzbudsiXvPMgdlbEJ/e9Y6A2tnVdi6XoQRXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:96:b3:b0:25:bd:e9:13:73:50:a6:3c:33:b3:13:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 3 05:01:58 2025 GMT Not After : Dec 4 05:01:58 2025 GMT Subject: CN=2a12f1a6a77baa4edaba8c9d2d8c9cc902e70137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:21:e1:e2:39:19:11:f6:94:54:57:a1:b9: ff:5a:70:d8:ce:ff:a4:0f:07:8c:0d:25:97:7b:d2: 74:d9:07:41:b7:62:06:f7:12:95:3f:7c:4b:4b:e7: 96:ad:d9:d6:a0:70:c6:dc:b5:ec:35:64:2e:06:2f: 3e:ae:2a:e7:c7:4f:8c:88:66:f9:fb:d8:25:1a:f9: b7:f4:f5:28:88:2f:28:1a:12:f9:dc:b8:9e:66:58: de:24:06:65:68:f9:4e:64:c1:db:bd:bd:97:9f:6c: 08:c0:e7:ef:90:f1:da:33:14:0f:f8:04:a5:df:bb: 74:61:5c:bc:ad:7c:a9:52:e0:a1:9f:70:0d:42:bf: c3:ef:a2:c0:6b:bd:c1:db:1a:50:c2:23:83:12:69: aa:d6:9a:60:9c:8d:04:77:a7:79:68:94:18:4f:da: 96:3f:24:12:c3:a5:64:ba:e4:13:81:9e:d6:0f:2c: 33:ae:3f:eb:38:1e:60:2b:14:3d:89:b3:f4:9a:62: ed:30:cd:49:c4:e8:52:18:6e:08:cc:7f:04:b5:2f: 3a:8c:9e:50:b8:42:69:38:12:16:67:01:20:0e:2a: 00:c3:01:41:d3:23:a2:05:31:38:d9:72:ef:da:3c: 5d:5a:e7:94:06:41:00:39:57:54:12:53:1e:6d:4b: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:12:F1:A6:A7:7B:AA:4E:DA:BA:8C:9D:2D:8C:9C:C9:02:E7:01:37 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:30:29:5d:b6:84:f0:5d:89:cf:0f:a2:5e:8c:fe:91:51: ad:2d:e9:7c:5e:fe:9c:cf:66:28:84:e4:c7:eb:84:b8:bc:4d: 9e:25:2a:d2:ff:5c:0d:ac:80:95:3f:e7:63:c1:d2:1d:7b:89: b2:0a:57:77:47:14:9a:ce:ed:b2:08:9a:4c:5a:53:69:a0:92: 12:0f:c9:7b:e2:fc:ce:83:6b:4b:16:15:01:30:81:0a:53:5e: 32:67:40:58:0c:b5:0e:a6:fc:6f:73:34:21:17:87:28:b1:2a: 4c:68:bb:3b:3a:9d:bd:7b:e0:57:fe:9d:35:dd:4e:c1:a6:75: 80:7f:05:dc:af:3b:85:3f:70:d0:b6:96:57:ed:68:32:b4:7e: 24:c1:35:1d:ba:e3:69:24:6e:fe:5f:f4:45:d3:bf:5b:95:e5: 90:1f:7d:61:22:69:60:1d:4b:c5:17:9c:58:95:50:6a:df:66: 7c:53:f8:2b:9f:ce:ec:64:bc:77:bf:56:cd:3c:94:d5:27:72: 6d:91:74:bc:bd:e3:45:a2:1a:bc:a3:e3:1b:84:8f:d8:ac:d7: c7:06:c7:d2:5b:b7:a4:eb:e4:0f:d7:a2:6e:63:73:40:dd:bd: da:90:2a:90:9c:20:90:bb:1f:de:bc:f8:ac:90:76:36:5a:3f: ac:ed:11:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrilrOwJb3pE3NQpjwzsxNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAzMDUwMTU4WhcNMjUxMjA0MDUwMTU4WjAzMTEwLwYDVQQD EygyYTEyZjFhNmE3N2JhYTRlZGFiYThjOWQyZDhjOWNjOTAyZTcwMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cch4eI5GRH2lFRXobn/WnDYzv+k DweMDSWXe9J02QdBt2IG9xKVP3xLS+eWrdnWoHDG3LXsNWQuBi8+rirnx0+MiGb5 +9glGvm39PUoiC8oGhL53LieZljeJAZlaPlOZMHbvb2Xn2wIwOfvkPHaMxQP+ASl 37t0YVy8rXypUuChn3ANQr/D76LAa73B2xpQwiODEmmq1ppgnI0Ed6d5aJQYT9qW PyQSw6VkuuQTgZ7WDywzrj/rOB5gKxQ9ibP0mmLtMM1JxOhSGG4IzH8EtS86jJ5Q uEJpOBIWZwEgDioAwwFB0yOiBTE42XLv2jxdWueUBkEAOVdUElMebUthzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoS8aane6pO2rqMnS2MnMkC5wE3MB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOicwKV22 hPBdic8Pol6M/pFRrS3pfF7+nM9mKITkx+uEuLxNniUq0v9cDayAlT/nY8HSHXuJ sgpXd0cUms7tsgiaTFpTaaCSEg/Je+L8zoNrSxYVATCBClNeMmdAWAy1Dqb8b3M0 IReHKLEqTGi7OzqdvXvgV/6dNd1OwaZ1gH8F3K87hT9w0LaWV+1oMrR+JME1Hbrj aSRu/l/0RdO/W5XlkB99YSJpYB1LxRecWJVQat9mfFP4K5/O7GS8d79WzTyU1Sdy bZF0vL3jRaIavKPjG4SP2KzXxwbH0lu3pOvkD9eibmNzQN292pAqkJwgkLsf3rz4 rJB2Nlo/rO0RkA== -----END CERTIFICATE-----Generated at Wed Dec 3 12:24:21 2025 by rpki-client