This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: bAhVx2ADCkYGVfPUG7UqqRX+DOJoiUOVesVCPGJdAqw= Subject key identifier: 22:69:CC:F4:C4:0D:87:68:32:B9:86:79:8A:A3:3A:FA:6E:38:4C:87 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B35A0C91337855758DBD8F93A07742EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 2F Signing time: Fri 19 Dec 2025 08:01:28 +0000 Manifest this update: Fri 19 Dec 2025 08:01:28 +0000 Manifest next update: Sat 20 Dec 2025 08:01:28 +0000 Files and hashes: 1: 6CB0Tl4YG47apBFINoAlLJh0DfQ.roa (hash: DERAPkRBmXodZoa76/M1fe1/30yrXGK8+ImXsmAlEs8=) 2: BqUKbsvLBxawTFe6lbocyvMayfo.roa (hash: Dyttb82AlsCtBruaEKcmePP+n2KCLIf+fF6BNWnXupI=) 3: Ct_iUneimu29k3lorVHqDQkI5ko.roa (hash: prea/mktEEp9J2hmENedR7tKBd2SBMd0XSaJoNQyWhg=) 4: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: WGP3ye3yhPYoKzMW2ccd0NbzVLBHUmpUH95uZGYhVN0=) 5: EAvRjLcBbuHgk5oka9iSLzBviY4.roa (hash: 0MME9vWVHcqvJK+J/nmZvkTf9NUlXx3rUtlPO7QbpKg=) 6: XMavxFEEdIcWyH28Yfn5CoMdsPI.roa (hash: TGSKaggogk6AsDC0c0SbxhACD2tCmQET3HeGr+lBTQQ=) 7: _EfjddeuFKG8MnRhJd7yEgTu2g0.roa (hash: EMo/ZhZbjpH69s5Ccnb39DuAvdS7gz2sAIWU10FyU8g=) 8: e_-yKkdwonWO6CKEIjxx1ukturw.roa (hash: AOG4pqIcVFAVkjq42DO44CaIOSZ4RvLTqijp0X0Hjuo=) 9: elxZu4K9ji2WmHSU8lxHX8DwDRY.roa (hash: cAuWijmXOZYXT9m6C71i9jgDgOiSPcM7fCXNdQt9oH4=) 10: g6C-yiFY0y2tiDGm6X6C5giXzxg.roa (hash: r1yI2j4TsqcI6pkTa+z9HyIsh2P/SNDg9RsKOOa01VA=) 11: jsRZDwsXNurKIL7Ap1QBapz6Isg.roa (hash: kXprBjnQdFsbwsvgqdQQMN7XDtL6GdbNTSFugYgOzB8=) 12: kmwaQJXKu5oNK1QMYZjPLEaW6vA.roa (hash: ILayvTcq7E5XOovRiUZyWfxx6ASX6WCDrzrSp9Qk9AE=) 13: t8nL2p5eyrN1BSO6Ty_pc1LxztY.roa (hash: IjKxVADlJhzM7Jt+Vb+y8QkwSaw5jKcu2tljUtzAMZs=) 14: weimB0J1QnnjxQ9v9IPqrcuwS48.roa (hash: QQzLUjkGzbudsiXvPMgdlbEJ/e9Y6A2tnVdi6XoQRXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:c9:13:37:85:57:58:db:d8:f9:3a:07:74:2e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 19 08:01:28 2025 GMT Not After : Dec 20 08:01:28 2025 GMT Subject: CN=2269ccf4c40d876832b986798aa33afa6e384c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:d1:8b:a1:95:26:95:af:e9:26:75:a2:80: eb:d1:53:fa:d4:a9:26:53:5a:13:94:2b:27:6a:f9: 56:f3:05:fc:12:d3:95:3d:9f:8b:a2:89:43:59:8c: f4:3c:d6:9d:64:ea:56:4c:16:df:8c:36:69:cc:b6: fd:a9:6a:f6:c7:6d:55:27:53:e7:62:26:22:66:89: 77:7f:d2:2a:20:89:85:cd:48:b6:83:ee:53:b0:d7: d8:95:a4:63:73:f4:13:77:cc:9c:e1:8b:60:3b:51: ec:0e:9e:07:04:32:9b:61:13:3f:0e:a2:03:d8:82: 80:62:32:bf:df:4b:8f:22:ba:ae:78:56:44:e0:f4: b8:59:3b:56:de:85:f6:54:b9:66:22:54:bc:9d:67: 3f:0f:e1:f4:77:a4:80:c1:66:c5:43:33:b0:d5:91: 8b:7f:07:8b:4a:b4:d9:3f:d4:25:31:56:90:df:b9: 8f:f7:12:9c:4c:9c:66:3c:05:a9:cc:99:46:ad:fa: d0:fd:27:0a:f9:ae:a6:25:d1:aa:fd:4c:cb:34:42: a7:2b:71:6b:49:a4:07:26:2a:a8:a7:9f:bb:94:ae: 82:16:0a:06:ee:7a:32:f1:24:17:a8:ec:eb:75:bf: aa:0c:cb:eb:14:94:00:7f:de:1d:49:0f:c7:12:31: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:CC:F4:C4:0D:87:68:32:B9:86:79:8A:A3:3A:FA:6E:38:4C:87 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fb:bc:e6:d7:52:d7:b9:ec:5f:20:a6:e5:c9:e4:84:53:74: 9f:2e:59:3a:fa:27:a2:6e:71:ce:0c:50:43:39:da:0e:b3:bb: 1a:af:7e:87:d3:4d:b1:7e:9a:5b:a4:10:5c:bf:71:4b:cb:cd: 16:37:7b:1c:19:4a:38:59:f8:4d:5e:ac:71:10:b2:d8:76:f4: c9:07:6e:6d:28:cd:a1:e2:02:21:f3:9e:25:5e:81:81:73:e0: 33:12:26:b2:3e:43:38:b9:e3:32:67:40:43:04:a7:15:09:19: e3:57:21:1d:1b:5e:0c:e5:d7:30:12:83:64:3f:f5:fb:5e:15: ef:00:a2:90:82:db:9d:93:8d:4f:7c:51:5e:e7:43:b3:d1:ca: c0:af:09:92:40:a4:27:ce:a4:c9:be:85:c9:43:c0:d7:cf:83: 1b:5a:b0:a5:b0:48:d6:27:b7:08:1c:ca:b5:27:34:4b:ce:71: 24:fa:38:7f:67:04:71:57:96:45:7f:c5:54:70:a7:7a:d7:73: 36:81:9c:24:52:68:a5:68:47:ed:24:fc:85:7f:6e:e3:c9:7b: 6f:c5:cf:69:bb:85:54:4a:9b:d6:3b:71:cc:25:3f:ef:9c:a8: b5:65:76:4e:f0:55:c9:0f:e7:84:16:71:10:2d:d9:25:91:44: 07:90:f9:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oMkTN4VXWNvY+ToHdC6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjE5MDgwMTI4WhcNMjUxMjIwMDgwMTI4WjAzMTEwLwYDVQQD EygyMjY5Y2NmNGM0MGQ4NzY4MzJiOTg2Nzk4YWEzM2FmYTZlMzg0Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bTRi6GVJpWv6SZ1ooDr0VP61Kkm U1oTlCsnavlW8wX8EtOVPZ+LoolDWYz0PNadZOpWTBbfjDZpzLb9qWr2x21VJ1Pn YiYiZol3f9IqIImFzUi2g+5TsNfYlaRjc/QTd8yc4YtgO1HsDp4HBDKbYRM/DqID 2IKAYjK/30uPIrqueFZE4PS4WTtW3oX2VLlmIlS8nWc/D+H0d6SAwWbFQzOw1ZGL fweLSrTZP9QlMVaQ37mP9xKcTJxmPAWpzJlGrfrQ/ScK+a6mJdGq/UzLNEKnK3Fr SaQHJiqop5+7lK6CFgoG7noy8SQXqOzrdb+qDMvrFJQAf94dSQ/HEjFefwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJpzPTEDYdoMrmGeYqjOvpuOEyHMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/u85tdS 17nsXyCm5cnkhFN0ny5ZOvonom5xzgxQQznaDrO7Gq9+h9NNsX6aW6QQXL9xS8vN Fjd7HBlKOFn4TV6scRCy2Hb0yQdubSjNoeICIfOeJV6BgXPgMxImsj5DOLnjMmdA QwSnFQkZ41chHRteDOXXMBKDZD/1+14V7wCikILbnZONT3xRXudDs9HKwK8JkkCk J86kyb6FyUPA18+DG1qwpbBI1ie3CBzKtSc0S85xJPo4f2cEcVeWRX/FVHCnetdz NoGcJFJopWhH7ST8hX9u48l7b8XPabuFVEqb1jtxzCU/75yotWV2TvBVyQ/nhBZx EC3ZJZFEB5D5Bw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:24:18 2025 by rpki-client