This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File: DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier: BIytEWgCpLC0kwsC+mEtVFrH851knbISAyIUULbWnfk=
Subject key identifier: 86:37:34:D6:69:49:D7:49:B0:12:4F:8A:59:94:06:B8:17:5F:65:6D
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 019AF051554570B33F53FF81767AC583FED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number: 0FC4
Signing time: Fri 05 Dec 2025 21:00:53 +0000
Manifest this update: Fri 05 Dec 2025 21:00:53 +0000
Manifest next update: Sat 06 Dec 2025 21:00:53 +0000
Files and hashes: 1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: vJeLkWrmceHf1dtfVLOxpv5YK4W87dNawB/m7glgtmQ=)
2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
3: G2wclPtQ-NTyFu49JfeZRSYyyxY.roa (hash: X+HR6/7YVlIIqv7OyveCmM7668weB9c1FsbPbUXjZ6M=)
4: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
5: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 17:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:51:55:45:70:b3:3f:53:ff:81:76:7a:c5:83:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Dec 5 21:00:53 2025 GMT
Not After : Dec 6 21:00:53 2025 GMT
Subject: CN=863734d66949d749b0124f8a599406b8175f656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:b1:13:61:96:08:7a:99:b1:ef:89:7e:1c:
3e:52:a9:3e:05:a1:39:fd:13:52:0c:66:4d:50:e0:
19:8e:8b:1b:88:6f:c7:79:35:df:84:14:18:f8:05:
2a:ae:24:b7:a7:0e:a8:88:e9:a3:08:84:b7:51:b7:
51:ca:09:3d:79:e2:f4:b6:52:94:ef:0a:06:32:c2:
e5:0b:c1:5e:27:de:b3:8e:d6:69:9e:29:05:29:78:
4b:4b:f0:9f:a0:49:1d:fe:b5:e0:f0:03:b8:87:8f:
cd:ef:a5:0b:24:a8:29:54:26:2b:ef:92:c9:2f:06:
9a:dc:91:9d:e4:87:80:c0:68:22:6f:39:13:7b:18:
42:85:7b:b5:39:ce:be:50:7c:4f:37:d2:e3:13:af:
e1:5e:9a:6a:12:2c:b8:f6:d2:0a:80:c5:c0:3a:96:
c0:8e:bc:31:4d:0d:c5:fb:ed:93:56:d9:fb:1f:8e:
b0:f4:ab:12:3d:ec:49:8a:70:e0:a2:63:35:dd:85:
7d:ac:98:81:bc:2f:91:d5:95:72:a0:3b:58:05:4b:
cd:eb:e0:b0:18:dc:35:60:cf:0b:33:0b:c8:a9:d6:
85:87:41:fa:0b:fa:4f:54:1c:96:a0:98:9d:4d:5d:
40:33:4f:2c:70:89:4e:b2:18:d5:93:31:87:d7:e3:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:34:D6:69:49:D7:49:B0:12:4F:8A:59:94:06:B8:17:5F:65:6D
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:aa:e0:20:ec:64:1f:1d:66:cc:d3:7b:2f:d2:ea:ba:d0:ce:
12:4a:8d:61:78:0e:24:7f:08:03:37:c1:c3:44:db:e0:14:8a:
97:da:7b:18:6e:92:7a:f9:78:cd:70:45:5d:44:d1:5b:ae:b6:
f8:68:0d:b2:4e:c0:96:37:aa:51:3f:40:06:1a:c4:70:e9:4c:
f5:d2:b0:2d:e2:58:2f:c7:76:85:c4:f1:01:1e:2c:7d:56:eb:
8e:4d:69:4e:c8:82:55:e9:31:66:14:26:98:8f:e4:84:e4:5c:
46:f0:3d:5b:97:b1:28:9b:16:38:15:14:b0:ea:af:54:6b:f7:
b0:4b:a3:3d:43:e1:71:b2:2b:89:6e:a3:24:77:79:d5:1d:94:
c4:88:a3:9f:e9:04:89:c7:fb:9e:96:00:b5:64:fa:93:8e:13:
81:6a:d0:9b:02:09:5d:27:43:02:30:fb:c6:d8:be:be:88:97:
2a:c6:98:8d:87:a6:c8:02:5b:75:e7:7f:07:c4:92:1a:5e:35:
b1:ef:9a:34:6e:e7:d6:a7:06:cf:7a:4a:76:c6:60:4f:d8:9e:
71:15:b8:f1:6b:b4:17:a6:0b:d3:95:8b:88:92:a2:57:c6:74:
c6:be:d2:b7:e0:f9:96:82:ba:a5:b4:71:77:f8:34:d0:6e:2c:
4e:20:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:04:24 2025 by rpki-client