This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft File: DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json) Hash identifier: ujxrcZui0lD4p1eVOO3S7PQV0K14+CKIbcZZQnk+Bn8= Subject key identifier: 3C:F9:4B:76:B3:28:15:AD:05:67:2C:0B:28:2B:77:44:93:BD:B6:C5 Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Certificate serial: 019B38A289BC89DF0C8A9BB7E2ED4801A2F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft Manifest number: 0FEA Signing time: Fri 19 Dec 2025 22:02:14 +0000 Manifest this update: Fri 19 Dec 2025 22:02:14 +0000 Manifest next update: Sat 20 Dec 2025 22:02:14 +0000 Files and hashes: 1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: aCTi0mj8m4qpOvodzQHvWkYsoKNWZNbx1TV39oSDjBc=) 2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=) 3: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=) 4: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=) 5: mw0FVkh57HvrvYijabbc70mXZ4U.roa (hash: N/qzJemIzoVOCRnJfy7+YV4DilrTD55dUCMYHxmt84c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:89:bc:89:df:0c:8a:9b:b7:e2:ed:48:01:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Validity Not Before: Dec 19 22:02:14 2025 GMT Not After : Dec 20 22:02:14 2025 GMT Subject: CN=3cf94b76b32815ad05672c0b282b774493bdb6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:64:6f:18:60:da:7b:be:e5:5c:97:45:d9: 0f:50:8b:74:8b:8a:15:3f:47:de:65:35:8a:be:d8: 9d:5b:3b:9f:a2:23:fa:5c:fa:7b:64:b0:37:b4:4b: c4:d7:0d:60:47:9d:3f:84:10:e0:15:a2:39:72:0e: fc:40:f9:85:07:bb:03:f5:1f:53:23:ce:2c:b8:bd: a1:12:28:d8:60:c6:6a:d9:ed:f7:66:6e:bb:66:91: b6:56:87:20:59:0c:59:48:43:9d:c1:61:5e:60:fb: 93:db:4f:9a:b1:67:0d:ae:54:09:53:7e:66:93:23: f3:59:55:b7:46:8e:72:9b:d0:62:5b:5d:70:4f:21: 76:7a:6c:d5:83:e8:ae:f4:b3:64:7f:1e:66:3d:4c: de:27:41:50:ac:c9:7e:36:82:99:ea:f0:eb:d4:cc: d7:39:e7:f1:8a:b5:53:29:78:18:c3:a7:b8:07:9d: 06:6a:29:a0:7a:d8:14:37:32:ad:4b:62:33:f1:c1: b5:a1:70:bc:71:12:99:67:ba:27:42:91:c1:4e:d8: 96:0b:ff:59:e0:99:74:61:be:ae:52:d8:74:49:cc: 7e:aa:84:b1:dc:fd:fd:0d:eb:e7:75:23:01:a3:ca: 85:97:96:88:87:d4:4b:61:35:2c:33:d2:66:92:07: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F9:4B:76:B3:28:15:AD:05:67:2C:0B:28:2B:77:44:93:BD:B6:C5 X509v3 Authority Key Identifier: keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:75:5c:4f:e8:44:d1:16:64:37:43:53:b5:b6:51:e3:51:71: b8:95:eb:52:9f:af:3e:77:6a:20:07:63:7c:dd:4b:24:8c:67: f6:03:d5:cb:ef:c2:8d:60:23:28:e0:14:05:ae:94:ac:18:06: 7f:1e:f0:80:fb:27:0e:73:0b:2a:d6:a2:15:45:f7:9f:57:50: 42:cb:d6:18:d8:96:37:29:f9:91:c0:d9:10:51:2b:d3:7b:c1: c1:65:f8:05:a1:f2:ab:bd:31:01:88:79:1d:5e:72:2b:ab:2a: 5f:57:c2:86:7f:5f:04:60:9a:17:38:e1:22:00:dc:8d:2e:5b: 58:31:35:7e:04:84:a8:f0:a4:2c:ec:fe:21:7b:4e:21:73:4e: 71:05:04:e6:da:ba:69:88:70:c8:2c:6e:6e:c6:4b:06:a0:f1: 0b:ea:82:be:25:ea:51:20:61:24:d7:7a:f9:fd:3d:01:ea:15: 54:02:d2:18:40:f2:5e:0c:5c:85:60:8b:fa:18:be:b0:d9:a1: 37:94:7f:39:51:7b:e7:46:e0:36:df:93:42:23:61:9e:22:b4: b5:4c:e9:dc:c6:24:6c:a2:83:cc:6d:70:0f:6f:2a:7e:3f:15: 61:5f:24:43:35:57:b9:f6:5f:1e:83:85:03:0e:e3:47:1d:fd: 06:52:e7:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oom8id8Mipu34u1IAaLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5 MzlhYWIwHhcNMjUxMjE5MjIwMjE0WhcNMjUxMjIwMjIwMjE0WjAzMTEwLwYDVQQD EygzY2Y5NGI3NmIzMjgxNWFkMDU2NzJjMGIyODJiNzc0NDkzYmRiNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybRkbxhg2nu+5VyXRdkPUIt0i4oV P0feZTWKvtidWzufoiP6XPp7ZLA3tEvE1w1gR50/hBDgFaI5cg78QPmFB7sD9R9T I84suL2hEijYYMZq2e33Zm67ZpG2VocgWQxZSEOdwWFeYPuT20+asWcNrlQJU35m kyPzWVW3Ro5ym9BiW11wTyF2emzVg+iu9LNkfx5mPUzeJ0FQrMl+NoKZ6vDr1MzX OefxirVTKXgYw6e4B50GaimgetgUNzKtS2Iz8cG1oXC8cRKZZ7onQpHBTtiWC/9Z 4Jl0Yb6uUth0Scx+qoSx3P39DevndSMBo8qFl5aIh9RLYTUsM9JmkgfMPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz5S3azKBWtBWcsCygrd0STvbbFMB8GA1UdIwQY MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt Y2Y4MThjN2M0NTFhLzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnVcT+hE 0RZkN0NTtbZR41FxuJXrUp+vPndqIAdjfN1LJIxn9gPVy+/CjWAjKOAUBa6UrBgG fx7wgPsnDnMLKtaiFUX3n1dQQsvWGNiWNyn5kcDZEFEr03vBwWX4BaHyq70xAYh5 HV5yK6sqX1fChn9fBGCaFzjhIgDcjS5bWDE1fgSEqPCkLOz+IXtOIXNOcQUE5tq6 aYhwyCxubsZLBqDxC+qCviXqUSBhJNd6+f09AeoVVALSGEDyXgxchWCL+hi+sNmh N5R/OVF750bgNt+TQiNhniK0tUzp3MYkbKKDzG1wD28qfj8VYV8kQzVXufZfHoOF Aw7jRx39BlLnDg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:39:57 2025 by rpki-client