This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: KCfEcTnciq6YuMCm+1FBsiZKJpZGxvDC+v8FyBr3Eh4= Subject key identifier: 5E:18:00:21:8C:0E:0E:7D:1B:20:8F:D5:AA:5A:BB:84:F1:DD:B7:7F Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B38D7F16D9BB4C8D3F3D559030DE9A71D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0DF8 Signing time: Fri 19 Dec 2025 23:00:34 +0000 Manifest this update: Fri 19 Dec 2025 23:00:34 +0000 Manifest next update: Sat 20 Dec 2025 23:00:34 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: wFKkcVJtVhBVLTsiFmSDx++UnOQ8jZ3c59OjmmkXFrc=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 10: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 11: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 12: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 13: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 14: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 15: da2k4kkg5lEUqU-HrsfQSd4jDyY.roa (hash: 0QYieGsvyj25fl9hPrJSkWKf4K69KfEWFeHhni5jPsc=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 19: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 20: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 21: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 22: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 23: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:f1:6d:9b:b4:c8:d3:f3:d5:59:03:0d:e9:a7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 19 23:00:34 2025 GMT Not After : Dec 20 23:00:34 2025 GMT Subject: CN=5e1800218c0e0e7d1b208fd5aa5abb84f1ddb77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:7a:06:dc:ba:20:3e:42:14:3a:2e:0e:0d: c2:b4:f3:ba:df:25:17:e8:58:53:67:b8:0d:fc:57: ea:7d:5b:a7:0b:a9:c2:7d:58:2c:7c:4f:fc:62:05: 1b:07:8b:82:1f:c3:b8:74:52:da:7a:33:58:6d:e2: 43:1a:98:c1:43:d2:92:f2:34:61:cc:00:e4:67:a4: 70:90:55:e4:c4:53:26:a4:b3:e4:16:49:0b:3e:7d: a2:dd:c3:f5:4d:3f:50:86:5c:1c:bf:15:b8:b1:bd: d1:b9:1d:74:4a:66:17:21:b2:43:8c:29:c1:3c:e1: 6c:aa:60:d5:b0:9f:7e:bf:75:22:11:1d:de:32:5f: 5a:50:60:ae:7c:a4:75:8c:d6:63:3e:5b:2e:4c:2c: 07:b0:e8:a5:f0:63:b1:fb:5a:55:e6:3e:37:81:39: 4a:7e:a6:94:15:44:80:23:81:1f:c2:3f:e1:24:f8: 36:49:90:b3:0a:a7:c1:e8:50:c9:30:d8:ec:33:68: 32:42:4c:36:e0:0c:c7:79:06:da:27:a9:ba:94:f7: 0f:66:e4:55:5d:17:7a:85:99:8a:3f:62:45:8f:a5: 23:05:b2:66:9a:47:9a:73:7a:31:48:67:b8:e1:22: 5f:5b:46:a8:ee:49:3d:29:44:aa:34:4d:47:00:ca: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:18:00:21:8C:0E:0E:7D:1B:20:8F:D5:AA:5A:BB:84:F1:DD:B7:7F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cd:45:45:49:b3:37:b5:44:2e:21:69:1b:73:ca:d1:3a:df: 0f:f7:ef:fb:31:5d:ad:95:28:b1:da:f2:a7:d6:b0:ca:6c:3d: 41:7c:12:d2:7a:f7:b7:67:a0:a2:8e:9e:3d:df:0c:47:61:1c: d6:af:bc:50:d8:c6:47:60:c5:89:21:d8:62:96:12:d7:ea:91: bf:10:20:18:15:92:65:82:4e:60:7d:f4:fd:29:70:b6:2f:a6: a9:36:a2:e2:82:6a:d6:45:3c:79:62:6a:1c:eb:36:7c:31:5e: 5e:c6:01:8c:16:69:2b:4a:fa:36:b1:5a:02:1d:6d:2c:dd:b9: 1a:2b:bb:ad:1b:7e:7c:50:21:22:ed:6b:c7:1f:7b:ad:da:50: cd:11:d2:c5:4f:70:0b:86:cf:5d:e7:05:81:05:ce:03:aa:44: 55:c2:41:d2:9a:e8:88:e9:dc:44:12:f9:64:24:8e:9d:c3:f2: f6:2b:8a:c0:37:95:34:c1:84:b4:a7:cf:b3:df:4d:b5:f8:b1: 4e:1b:fc:fb:30:db:9c:e1:56:b3:80:45:c2:34:b7:37:d7:b7: c0:90:ba:85:0f:62:0a:71:d2:5a:3b:da:a0:62:5c:fe:1d:b9: 54:88:39:46:ca:3e:0e:99:14:5d:9d:5a:64:a0:71:76:ed:5f: 20:95:9a:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/Ftm7TI0/PVWQMN6acdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjE5MjMwMDM0WhcNMjUxMjIwMjMwMDM0WjAzMTEwLwYDVQQD Eyg1ZTE4MDAyMThjMGUwZTdkMWIyMDhmZDVhYTVhYmI4NGYxZGRiNzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnV6Bty6ID5CFDouDg3CtPO63yUX 6FhTZ7gN/FfqfVunC6nCfVgsfE/8YgUbB4uCH8O4dFLaejNYbeJDGpjBQ9KS8jRh zADkZ6RwkFXkxFMmpLPkFkkLPn2i3cP1TT9QhlwcvxW4sb3RuR10SmYXIbJDjCnB POFsqmDVsJ9+v3UiER3eMl9aUGCufKR1jNZjPlsuTCwHsOil8GOx+1pV5j43gTlK fqaUFUSAI4Efwj/hJPg2SZCzCqfB6FDJMNjsM2gyQkw24AzHeQbaJ6m6lPcPZuRV XRd6hZmKP2JFj6UjBbJmmkeac3oxSGe44SJfW0ao7kk9KUSqNE1HAMo3kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4YACGMDg59GyCP1apau4Tx3bd/MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos1FRUmz N7VELiFpG3PK0TrfD/fv+zFdrZUosdryp9awymw9QXwS0nr3t2egoo6ePd8MR2Ec 1q+8UNjGR2DFiSHYYpYS1+qRvxAgGBWSZYJOYH30/Slwti+mqTai4oJq1kU8eWJq HOs2fDFeXsYBjBZpK0r6NrFaAh1tLN25Giu7rRt+fFAhIu1rxx97rdpQzRHSxU9w C4bPXecFgQXOA6pEVcJB0proiOncRBL5ZCSOncPy9iuKwDeVNMGEtKfPs99Ntfix Thv8+zDbnOFWs4BFwjS3N9e3wJC6hQ9iCnHSWjvaoGJc/h25VIg5Rso+DpkUXZ1a ZKBxdu1fIJWaQg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:15:58 2025 by rpki-client