This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File: dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier: /gfez/z+AdTd5DiLs9vKDU/wFoPPaubNanv6iC4LqpA=
Subject key identifier: 28:CA:DD:22:60:BA:C1:05:71:B3:3A:D6:7B:91:43:65:80:BA:AF:C8
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019B38A22310701C04949657A19AEC3D5DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number: 0FF8
Signing time: Fri 19 Dec 2025 22:01:48 +0000
Manifest this update: Fri 19 Dec 2025 22:01:48 +0000
Manifest next update: Sat 20 Dec 2025 22:01:48 +0000
Files and hashes: 1: 0vKKa1d1-a3nsAZsZCo839Z0MBs.roa (hash: nF1172I6GzWR4fsS//xQZxKSKhBW9Jwp0lhMkf3VEHw=)
2: 1YkuTSmaNeM99AT_szUK5oLsJV0.roa (hash: 6qUnLKrysaF5PnvpHmoDTCMWTFxOhfgj1mqiBjOTe24=)
3: 1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa (hash: T0sycLT3/UxmIjbYQ+bOKStsPPPIcNFmp6OwoDtRLKQ=)
4: 2pl2Sl-diunsZv-X1xDfcacZESQ.roa (hash: SGZLc6KSJvJiXyci/DBhSPsrTj4/6Xpxbx5tcaKgogE=)
5: 31A6_ehvBKsfGVDtFooQhLXH0iM.roa (hash: dsMXP7FTcH0rSBZ7d/sBuVAuPoqLFB5tU5E0bIntVYg=)
6: 3adlXu9UdiqbVK8KXPmNPBFbva4.roa (hash: EJVXWOHEAMEc47CpVV43468HlejdrMkqfGDd8fXYTdo=)
7: 5duPmqwXQoarjhRREa9M12q0LMI.roa (hash: zmiFXyZAg+aBE4YlbQqa7EOu9c6/Mmqa7UXhDEeFpq4=)
8: 5u0bJBwb1IFw32NidAmolWIhFaI.roa (hash: dJEiHHd9I3F9OEiEg7idS0VieEQNIhk5BxiOm8SgeYI=)
9: 60eIn0VN45RIj-vR-y3bpL4yCdM.roa (hash: 72pNS84vVLj1UnJZFUVixKjT4YU2nH077D/faDBa9bU=)
10: 6oygq9jhKxjFYaenIGOILiyJQvM.roa (hash: OFadi9yluQyZ3qbsJLrUlYLZtzgoeYpkg0fpFuWCKT4=)
11: 8EKc5hUahN_d6c6PznxuNrKg9tI.roa (hash: b3TAMpPmh1LeZMUPJrskhZjvWeWGSWUlQR6rEcVzaks=)
12: 9TaqhsU24aQ2AxAQwMy4XQKH6LU.roa (hash: WgoS/nhvjW9XMI8XzrVgZor+FdLw77EJZ11j3yQR76E=)
13: 9e7KJX-H-0Wp2Tq1pULUgkLz8lQ.roa (hash: XGr2pP24KVYsSQZJtWs/Of6z5QspQbDubjy/ILogR+o=)
14: A2kOd83XlurKeug3oOCuPMQWoqM.roa (hash: TkzZouTi2vryIZ7xJqjRBCl1ZZQ9vf4xqv971+/fZVo=)
15: Avsyu6b6NVxYkf6X_q_nnw7ehoc.roa (hash: 4zpQXnbZi1DFLcalMENFIs49gI1fkeakU+6rA+Vt+Zk=)
16: BuqjNgBweqNLnNC3y6l25ZNe9lE.roa (hash: 3IwpkqYoqPWFY8mIBH4Ql9MvV+Y6c7/vsfg9Jwd/Cp8=)
17: DlqdIQI6FVQl-ro8neXTyjOh5dE.roa (hash: lZ3g7pVM/XY8ky+nHkBqbreA/7Px6G51zVJ1/JDPng0=)
18: FcC6p_qeAbtQsZOZCnuCOvaQtfw.roa (hash: Jb9R1aDX4sFzxS0p1WW5Ea6+8DWY+rsM+UP/OKo1sOU=)
19: GYNpjCcZsLVqMoTSMZuwEaEQM7A.roa (hash: 8PbLQRFLQ7epoBYFX4wCtzZLiRBCr3C9yNo1Gjt4uys=)
20: HLTduf-gq3i_SomcD8FRPp7OD-k.roa (hash: R989OAlaQLW3ec/mxouzOwlF3EKe5DF2mSPbEefH2go=)
21: IY4I_I-7Ak9VpZTxxwnR0rCSA1U.roa (hash: xgbFbgYmjLRdThFb0rYpIWFwzf6U66UapdtCfgVp3XM=)
22: Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa (hash: IpIfcWNQZBdZ9PxdPrzjdBDVJEsfhwVsQP6UVO83urM=)
23: Mn_hx8kkDfNbJk4kSVBQw7bE4_w.roa (hash: jPumL5Cf9GiISjqisZxFKQhVYsMI0/eAJgTE1gvF3ak=)
24: OCw1udSAReLAsFz_erSWBmdqyM4.roa (hash: 5eUZkP4P6CTElC5OVGVkkPU8IahekeC5ufPO615Qa9U=)
25: QD8rfcXrFLBv5ho4olBdPC1p818.roa (hash: dkERnkYt+qFsFa7JHkV0epWToLTcYSQMGJn1mguBlCM=)
26: QnP3rjSXAya4q111ORTc4fWOKy4.roa (hash: rjVxk7JBDVCRVwFh1RMiJlF4usn4gdiKDrFhNu7yCVQ=)
27: S8GYV0UKYdMXgcUCVKYMLghPA6I.roa (hash: XsIqQuhv93O1Uq0O1YAxneqXx3P8rncK7QQkBoOgVKw=)
28: Taew90LrITUNXWEUlG92GSZizj4.roa (hash: tCoLpi3SKQ5YEAOD+WHKJDrZxFw4R47l6+pDVHgYeLI=)
29: VV03O10Ak9GphsezqITF8UBndo4.roa (hash: /Uvf5KDYlZcfuz0KI0o0tgIwygpPPgdM7QOdmxpaBwY=)
30: Vi5GQ2RSn0kSOJpBZs-2mAbvPFU.roa (hash: dZ2KCxbBLTbYi83h0kOFmAkzygpeLJcYLflbPZmVCmU=)
31: WGJ99XGaJh7skBGQoXvYDlpBLUg.roa (hash: ByZ7aX7sT5x1n3O18fpW4i1dWSQUUItWNkg4JqwxdJg=)
32: Xe3VgFT7EtpGV7uCq0Il_J4rlYU.roa (hash: S47j+2bOJp7lA10pUc1Yws3zG/K60JFDeZ0Ba+bM62o=)
33: Y56Gciif-2amsx2dXrP9fHRusqQ.roa (hash: fDWZnk5W7B7Ljpur47rgBYvk4mpvoSPiiS1+UZWUXFA=)
34: ZRvLOTL892324mrN4_sir5kAZog.roa (hash: s2ON++DU2aCxjStb8WfJDJKu8FOhML5HnNtc8APO/aA=)
35: aQakZoVpblIF2l8ftAcQYXpdYPs.roa (hash: Qz6LkCub4Rva7m+YCvP3MwxbyfAomWKSd3klSr+E1Ag=)
36: akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa (hash: hIvO4f0efFyMLQwXwU2X9ARgI00goXkJDlPknTYgoNk=)
37: ax4thkGoEPtvtGu_YZxYj9LFa28.roa (hash: eWFKhN+RnKTUUxtCYQyuPYtjJoxT6IBR2XInsRv4m7c=)
38: beZ7lH8hrnPfpblkYum9nSpHi_k.roa (hash: 0beIcur3K2WF3b2cBEFEvhkfim8wSnu7ud2d6583fXU=)
39: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: 4qXXxc7ZARZ8zFAI5HnyblZkHdeuQla3rHMTHojE6LQ=)
40: ex9C5z6uA5zA8S2hqTtDuAiYJso.roa (hash: Ya+WKl/Tb6XekHAnMga0cVZx1aw07XaD7ue33i5ENiI=)
41: fXIuRdpdCqaDZDgiKz2t2b5oySY.roa (hash: Gvye9Ee1GExEttsOLXh4x8Ij0Kt8F9u/iEYkec6XgEI=)
42: g_3XVarkOCYkUbFIen91uAg3jSA.roa (hash: rxp6gE49EvCvNnFFuptSMZ++/rxyRJ5gmIByXuz1FbU=)
43: ghUobayfx6qd_3s7xBJ-VWhtgg0.roa (hash: RCb69pi3SlQ1XiQCycaKTDLsQ2poFQYqUlsqFLWQ34I=)
44: iyXEZLPTvQZGB7JlA08fIx42APM.roa (hash: m2lSKMzTmPpQ92wJ50iZbM3YMPJEh5hhfuRN69m7pJM=)
45: jAU8jrsVCPUntB_an3aJM-fUHBQ.roa (hash: JV+lAIv1VsWnP4azkZXvg3wd/+Gn10QgLi2aOZ1Uiw4=)
46: l_DVOUIWZeQzN_ud687FQm9N3XM.roa (hash: w8Ed2YFV5Z6Tfw1wykkzmpAQiiRwBTRKZzDMXY+18/g=)
47: nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa (hash: 4pYw53tp6LoTRJOiuUYEH+f4SmiKvacrxPCRdUZzbtg=)
48: pCndi1ZXV1mC4ZG8G28b0EXavY4.roa (hash: QIh9bllo3i2ecy+DeV6KBQsP3Ac4e7xnH/vJAvg06/0=)
49: pIiqmAhh4Efmjii00YcovJnqa0s.roa (hash: OMG9mB1P/OPHsZ0mJOPrtZjUwn7+m8UALiq+yKbfM8U=)
50: pwPsYJfs2vnUf15_MeMU_hA-6CU.roa (hash: smjjAOw4zvZQ0c4TXCjwjpB3rI9MVKm+DRNb4qequDk=)
51: sxkA2JZElRHHnwkRP7l5o6EcW_c.roa (hash: WWNvzLP8kOo38HdNOn5p8W3MbChp2TJuSGefZ3MdLAA=)
52: tdxDPXh8x63ns5xe5NNTZYyxIiI.roa (hash: YPfhVqW4qgH08BDzGi2y/U4ouQG2UejZb4EgEfmMnck=)
53: ttPO6pngYqPTncPu2LyKCZ2Sbqg.roa (hash: xBWaSxh+oKftAiFCVq8fy5M0vq5kmp3YUxZh8YO1XGg=)
54: vXaInH9GMVRsh2fS9hIvaiSoFdA.roa (hash: a0cNwrBuY/oV0A/g5UU/CxyDLathCf+t22Rqy9aezE4=)
55: wBXz2nATpMPnPKuxhmOxQYcqOFE.roa (hash: LPrXhSlkWWy6umfNQoh02Jq8Bwfs0KDadhR5ReAchvg=)
56: wr1QjjbaIx8zS-gf7sfmtC6EaUg.roa (hash: Ku8TT9Iv1vaF97HhehSBh3VCqIIIMAGFRU8uS6/XagY=)
57: xUcFEFGEADAhHwPL84qAkKexZtE.roa (hash: bAzMkFin6MdA0BmQmiQLYUPWrIYlIb47kmd8m9HTQxI=)
58: yEEjupq6Zm7fSgHRecqn0gdPXwk.roa (hash: YDhRnH2dZiHejO9wcHlfAQr9J4kqqgi37tr9xeC4HFA=)
59: yg8g1KIBeXcOZoIOeFDLKsb2Ys4.roa (hash: bXqIK7YAgTX1XR2ZVmmqzCL+IfHFOCwdW0H3gNQ2jXk=)
60: z_ymd7tHSlm_rmTAykuJ944SJZU.roa (hash: arBCwgxjD2OcevnfTJJCzPi43dKp3HfsbnMHINjxg+g=)
61: zzCGGo649FLsATY_fuGlZHgnRwM.roa (hash: +1Gsr6KYlV8gi9oJWuaclNFEGhKNSf3rU0ttxt0PzJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 17:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:a2:23:10:70:1c:04:94:96:57:a1:9a:ec:3d:5d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Dec 19 22:01:48 2025 GMT
Not After : Dec 20 22:01:48 2025 GMT
Subject: CN=28cadd2260bac10571b33ad67b91436580baafc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:7f:72:bc:3a:1a:aa:f3:3a:f5:97:ca:77:
09:ea:22:fa:af:80:11:d3:15:d0:5a:b4:22:a0:6e:
4b:22:da:22:e0:b3:48:6e:30:81:7e:a8:80:e9:85:
49:77:80:bc:ba:28:47:2b:af:54:60:d0:61:83:6a:
24:f1:bf:9b:08:5c:2f:a2:42:40:9a:75:c9:26:24:
c2:a6:b5:f2:3c:5b:f0:29:ae:fd:d0:09:4b:b4:bd:
17:dc:1b:31:77:a4:0f:a1:fc:d3:3f:93:c4:ec:c2:
03:0d:f4:00:08:29:54:4a:dd:b8:c8:00:01:0e:7d:
c4:1f:e1:4c:87:69:9a:20:a0:3c:5a:f6:4c:56:82:
1d:c2:09:b9:4e:e9:30:82:be:1c:26:42:ad:3e:20:
66:0c:76:c9:ac:3f:92:3e:fe:d4:7c:18:3c:cd:14:
52:51:d5:14:d0:3e:fe:8b:c3:42:20:27:a9:fa:4d:
71:6c:2d:c4:86:89:c8:9f:c2:b0:50:7c:ab:5d:b9:
1f:a9:a4:74:b3:cc:b2:8c:0b:ed:41:42:12:a7:f9:
f8:40:e8:26:9e:09:8e:79:18:45:b1:70:49:d5:8d:
a8:dc:44:a8:12:05:79:ff:19:7c:8f:45:50:98:c6:
a7:56:d8:7c:e4:b7:39:c9:ce:d1:be:39:18:3b:01:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:DD:22:60:BA:C1:05:71:B3:3A:D6:7B:91:43:65:80:BA:AF:C8
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:5d:d0:40:0d:ff:c4:66:38:21:3d:af:1b:a0:c0:fc:ee:
85:3b:dc:b7:d8:2b:4f:9c:e0:e9:ba:21:7e:c6:9a:cc:b9:b0:
5e:ce:e9:36:81:b4:22:b7:3f:9a:da:73:93:7f:53:dd:cb:61:
df:08:89:e3:17:a0:4b:93:36:14:2f:cc:ac:74:30:5d:aa:67:
7f:7e:c2:25:99:38:da:fb:d4:12:4a:7a:f0:74:35:38:e5:82:
2f:16:68:4a:ed:cd:9c:2d:ef:eb:70:1c:0f:c1:f1:82:3f:84:
a4:b9:2a:d0:e6:98:95:ce:c3:e3:cd:2d:db:10:41:8f:df:e5:
09:0b:aa:71:bb:27:85:f2:f2:71:aa:0a:02:e9:82:c3:8f:0e:
52:e8:f9:af:30:e9:43:57:bc:79:2f:76:1f:64:35:38:a6:7d:
7c:95:ce:60:94:e8:93:48:8c:a4:06:1e:53:86:ed:b1:64:e7:
de:68:13:f1:ce:df:d7:59:dd:97:ab:4d:25:6a:1c:bf:01:82:
d0:8f:f3:de:49:3c:a8:40:3e:c5:01:6e:84:5f:43:66:75:48:
c4:8e:ac:cd:e5:ab:0f:b6:1f:10:bf:85:cc:d7:19:e7:58:01:
bc:fd:41:62:78:4f:27:69:3b:51:b9:d2:06:9a:1a:7b:33:e8:
06:75:13:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4oiMQcBwElJZXoZrsPV3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUxMjE5MjIwMTQ4WhcNMjUxMjIwMjIwMTQ4WjAzMTEwLwYDVQQD
EygyOGNhZGQyMjYwYmFjMTA1NzFiMzNhZDY3YjkxNDM2NTgwYmFhZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sF/crw6GqrzOvWXyncJ6iL6r4AR
0xXQWrQioG5LItoi4LNIbjCBfqiA6YVJd4C8uihHK69UYNBhg2ok8b+bCFwvokJA
mnXJJiTCprXyPFvwKa790AlLtL0X3Bsxd6QPofzTP5PE7MIDDfQACClUSt24yAAB
Dn3EH+FMh2maIKA8WvZMVoIdwgm5Tukwgr4cJkKtPiBmDHbJrD+SPv7UfBg8zRRS
UdUU0D7+i8NCICep+k1xbC3EhonIn8KwUHyrXbkfqaR0s8yyjAvtQUISp/n4QOgm
ngmOeRhFsXBJ1Y2o3ESoEgV5/xl8j0VQmManVth85Lc5yc7RvjkYOwEp2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjK3SJgusEFcbM61nuRQ2WAuq/IMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkld0EAN
/8RmOCE9rxugwPzuhTvct9grT5zg6bohfsaazLmwXs7pNoG0Irc/mtpzk39T3cth
3wiJ4xegS5M2FC/MrHQwXapnf37CJZk42vvUEkp68HQ1OOWCLxZoSu3NnC3v63Ac
D8Hxgj+EpLkq0OaYlc7D480t2xBBj9/lCQuqcbsnhfLycaoKAumCw48OUuj5rzDp
Q1e8eS92H2Q1OKZ9fJXOYJTok0iMpAYeU4btsWTn3mgT8c7f11ndl6tNJWocvwGC
0I/z3kk8qEA+xQFuhF9DZnVIxI6szeWrD7YfEL+FzNcZ51gBvP1BYnhPJ2k7UbnS
BpoaezPoBnUT6A==
-----END CERTIFICATE-----
Generated at Sat Dec 20 02:59:35 2025 by rpki-client