This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: YSz23w6CmvU0fvLO6OAJkZX8afwUl7OO2Jn0BGYeWLY= Subject key identifier: 8D:8E:67:51:97:98:FA:A8:43:C0:ED:66:EC:71:1E:60:10:FE:F1:F3 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019AF163E3729CAE933D28B92BF4B29ECF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DD1 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: eIGYsTMgDQmW70P1N9nMISNfhH7b+5zzqmTvU3aK1Hc=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: o6YvhzQz6UhqvJTcu-UF42mz3ig.roa (hash: 6XXEZvyPqyJcYG7at6PCliQ8gKNA9ce9A/pGbF+nx9g=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e3:72:9c:ae:93:3d:28:b9:2b:f4:b2:9e:cf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=8d8e67519798faa843c0ed66ec711e6010fef1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:a6:06:da:96:70:17:1b:b1:cf:37:1c:fb: 7b:0d:c1:7f:c0:ab:83:29:2d:98:89:77:4f:02:9f: 42:9a:be:45:36:6e:a7:90:76:39:dd:e9:ed:24:3c: ed:76:3d:39:9b:e7:eb:59:71:af:77:08:c8:ea:08: 53:48:eb:52:58:f8:dc:d2:5f:d7:91:2d:ab:5d:63: f5:0f:15:5f:fa:e2:48:14:a7:b4:3d:d7:74:7c:cf: fc:45:3c:f5:ba:11:71:02:c4:42:7d:da:d5:db:da: 0f:9d:ff:df:f0:8e:6d:e0:4e:59:8d:62:ad:8c:ef: 68:6f:42:af:62:4a:63:d9:1b:24:26:e7:f9:18:24: 93:b6:ba:38:5c:95:61:6f:a5:ad:cb:15:a7:89:28: 4d:ec:cb:74:9f:d2:67:40:70:81:fc:4a:36:77:96: 7b:b9:73:30:40:13:b2:47:a1:4c:15:c4:71:61:9a: 28:47:15:f5:80:1e:eb:24:be:9b:d3:a4:35:e9:e1: 95:69:81:fc:a2:0a:5e:e0:ed:4e:1d:e2:c6:a6:5e: ae:40:15:0b:7f:5d:ea:b9:35:7a:d7:66:35:5e:d8: 2f:e9:26:32:b1:b3:39:89:4b:36:ac:5e:01:a9:22: 30:a8:72:b3:90:d2:53:a3:a8:d8:57:05:8e:09:42: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8E:67:51:97:98:FA:A8:43:C0:ED:66:EC:71:1E:60:10:FE:F1:F3 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:6e:77:7c:51:e2:53:e7:a3:58:09:f6:82:4b:2c:f1:7e:f1: b0:08:96:4d:0c:69:37:aa:e1:77:d3:fa:64:e0:df:9e:53:77: 66:01:ab:87:ec:08:a1:1f:94:ed:97:51:bb:2c:b5:b7:d2:65: 52:4d:d8:c3:f7:86:0c:10:90:1a:bb:dc:c0:99:2e:3a:2d:77: 72:99:8b:06:24:37:4e:17:f5:f8:0c:bd:99:c5:64:5d:c8:6f: 02:2c:f1:b8:fc:e1:a8:bc:cd:c8:5a:76:51:82:8d:94:f3:48: 96:b5:1e:b7:3e:f8:c0:ae:6e:80:50:75:e0:20:55:41:64:c9: 7a:8c:c0:32:63:d1:07:13:7a:56:0e:df:3d:f1:b4:4f:ff:d5: 6c:e9:cd:75:a7:38:41:36:7c:60:ee:cf:e9:a7:07:68:14:91: 90:da:9a:88:18:6c:43:b4:f3:3f:55:69:72:09:0b:9b:ee:ad: 3a:9d:b9:bf:4d:b1:9a:fc:c6:82:6e:fd:88:4e:68:eb:ca:5d: 8e:42:10:ca:b5:c4:ba:c7:28:91:b0:6e:c7:c2:63:a3:bd:eb: ba:4f:b8:8e:a5:aa:a0:c2:d6:4e:e0:31:dd:4d:e2:5f:b9:0f: ea:b0:44:d8:87:29:8b:99:2c:ff:21:16:d8:a4:fd:94:24:a9: b6:1f:a3:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+NynK6TPSi5K/Syns8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD Eyg4ZDhlNjc1MTk3OThmYWE4NDNjMGVkNjZlYzcxMWU2MDEwZmVmMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8WmBtqWcBcbsc83HPt7DcF/wKuD KS2YiXdPAp9Cmr5FNm6nkHY53entJDztdj05m+frWXGvdwjI6ghTSOtSWPjc0l/X kS2rXWP1DxVf+uJIFKe0Pdd0fM/8RTz1uhFxAsRCfdrV29oPnf/f8I5t4E5ZjWKt jO9ob0KvYkpj2RskJuf5GCSTtro4XJVhb6WtyxWniShN7Mt0n9JnQHCB/Eo2d5Z7 uXMwQBOyR6FMFcRxYZooRxX1gB7rJL6b06Q16eGVaYH8ogpe4O1OHeLGpl6uQBUL f13quTV612Y1Xtgv6SYysbM5iUs2rF4BqSIwqHKzkNJTo6jYVwWOCUITQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2OZ1GXmPqoQ8DtZuxxHmAQ/vHzMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3W53fFHi U+ejWAn2gkss8X7xsAiWTQxpN6rhd9P6ZODfnlN3ZgGrh+wIoR+U7ZdRuyy1t9Jl Uk3Yw/eGDBCQGrvcwJkuOi13cpmLBiQ3Thf1+Ay9mcVkXchvAizxuPzhqLzNyFp2 UYKNlPNIlrUetz74wK5ugFB14CBVQWTJeozAMmPRBxN6Vg7fPfG0T//VbOnNdac4 QTZ8YO7P6acHaBSRkNqaiBhsQ7TzP1VpcgkLm+6tOp25v02xmvzGgm79iE5o68pd jkIQyrXEuscokbBux8Jjo73ruk+4jqWqoMLWTuAx3U3iX7kP6rBE2Icpi5ks/yEW 2KT9lCSpth+jRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:00 2025 by rpki-client