This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: yZjJaVtDq/ZEcAC/jGSRHZHyuV28cgvLLIzEz+gK2YU= Subject key identifier: C0:66:8C:27:CF:2C:41:E5:7F:A6:30:FD:89:25:2A:A0:AE:6D:92:1C Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019AF0BF7F83E9DB3A5CE54DA76D0B515838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 176B Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 5kpOwSMlx2o+9BUCRSgpEONbyepd4QUmhZbJkjXRSD0=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7f:83:e9:db:3a:5c:e5:4d:a7:6d:0b:51:58:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=c0668c27cf2c41e57fa630fd89252aa0ae6d921c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:33:ff:69:65:21:f1:4b:95:94:00:f4:8f: 5b:0c:1a:b5:60:ae:db:a3:65:8d:bb:4e:c2:44:04: 87:84:2e:e1:c7:c4:e9:04:d5:32:57:5c:43:b5:a1: fc:c2:f4:4e:f6:d9:a3:08:02:b3:86:03:5e:49:cd: c2:43:6f:a0:fe:7d:23:c8:18:12:83:d5:02:aa:b3: e9:ad:5e:12:f4:d4:53:3b:d8:69:69:a0:9c:71:2f: 86:60:54:2e:5c:cc:ff:a4:08:9e:2a:b0:78:b2:d2: 9b:b2:24:5d:6a:c7:48:b1:63:96:55:80:4c:c0:3a: fe:eb:12:3f:8b:09:f2:94:88:62:37:90:01:85:a6: e3:c9:3e:6c:8c:79:8b:f8:f8:5f:85:3a:32:4c:15: 3b:ee:2e:d7:69:ca:c2:fc:41:27:1a:ce:39:98:78: 2e:54:07:ef:f5:4d:84:b2:48:fa:f6:c5:a9:5a:6d: d0:fc:72:43:c3:a0:e8:43:97:45:a4:f8:f6:17:1c: ea:f3:57:75:9b:f1:6b:f1:a2:d8:9e:09:47:43:bf: 81:ba:bc:1c:20:8c:f2:65:c0:5a:8f:e2:a3:fa:a4: 47:b8:06:9f:33:57:57:83:62:2d:8f:6d:1f:30:98: fc:a2:10:62:a9:dd:47:6a:a7:b1:58:95:48:cb:fe: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:66:8C:27:CF:2C:41:E5:7F:A6:30:FD:89:25:2A:A0:AE:6D:92:1C X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9e:d0:a4:17:fa:dd:7a:f0:42:6c:b5:49:7d:c8:7a:34:e1: 09:13:dc:7e:59:be:c5:26:c7:ea:f7:92:48:56:dc:6f:3c:3d: 7e:d1:00:e5:bd:5b:08:28:68:de:97:41:62:b4:93:cf:75:59: 89:e7:69:bc:2f:15:20:1b:b9:36:fb:5f:6b:f2:01:78:b1:b9: 4e:1b:68:da:b1:1b:28:d3:96:c5:5c:e5:c6:5d:71:c4:a4:03: ef:ad:d6:2f:e5:9f:5b:7d:4c:36:6b:ae:e9:18:dd:60:d1:52: 32:d1:70:c0:8c:4e:25:e4:1e:a2:ad:5e:bc:83:2b:1b:50:04: 0c:59:22:24:1c:db:69:0c:f7:e7:6c:62:88:15:98:65:cd:7f: 91:70:05:ef:48:f0:38:8e:86:d2:ee:dd:0d:0e:94:66:a2:3f: 84:6b:10:24:3e:a8:b3:d3:2c:2c:6f:1c:0b:66:ad:0b:1a:af: bc:5a:82:84:6b:9b:43:50:34:4e:df:2c:3f:fd:65:9c:6d:a9: 92:89:3c:5d:9b:70:36:64:02:a6:58:e7:8f:ff:be:4a:74:fd: 07:a5:06:57:51:00:2f:54:a7:d4:65:24:51:ae:5f:00:9f:9a: 9a:4c:a3:69:ca:c5:cf:f4:ae:0a:ad:b7:34:2e:e2:07:f2:57: 30:f6:45:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3+D6ds6XOVNp20LUVg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EyhjMDY2OGMyN2NmMmM0MWU1N2ZhNjMwZmQ4OTI1MmFhMGFlNmQ5MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sgz/2llIfFLlZQA9I9bDBq1YK7b o2WNu07CRASHhC7hx8TpBNUyV1xDtaH8wvRO9tmjCAKzhgNeSc3CQ2+g/n0jyBgS g9UCqrPprV4S9NRTO9hpaaCccS+GYFQuXMz/pAieKrB4stKbsiRdasdIsWOWVYBM wDr+6xI/iwnylIhiN5ABhabjyT5sjHmL+PhfhToyTBU77i7XacrC/EEnGs45mHgu VAfv9U2Eskj69sWpWm3Q/HJDw6DoQ5dFpPj2Fxzq81d1m/Fr8aLYnglHQ7+Burwc IIzyZcBaj+Kj+qRHuAafM1dXg2Itj20fMJj8ohBiqd1HaqexWJVIy/6ASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBmjCfPLEHlf6Yw/YklKqCubZIcMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZ7QpBf6 3XrwQmy1SX3IejThCRPcflm+xSbH6veSSFbcbzw9ftEA5b1bCCho3pdBYrSTz3VZ iedpvC8VIBu5Nvtfa/IBeLG5Thto2rEbKNOWxVzlxl1xxKQD763WL+WfW31MNmuu 6RjdYNFSMtFwwIxOJeQeoq1evIMrG1AEDFkiJBzbaQz352xiiBWYZc1/kXAF70jw OI6G0u7dDQ6UZqI/hGsQJD6os9MsLG8cC2atCxqvvFqChGubQ1A0Tt8sP/1lnG2p kok8XZtwNmQCpljnj/++SnT9B6UGV1EAL1Sn1GUkUa5fAJ+amkyjacrFz/SuCq23 NC7iB/JXMPZFYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:51 2025 by rpki-client