This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft File: DcGyhbbH8r8EyZjeiStDbxDTTcA.mft (raw, json) Hash identifier: y5VccPNdZ0ESSp0WDhYsRA0rQrvBk4YFCzSdlyrsHRU= Subject key identifier: 5D:3B:18:A4:69:78:47:A3:3B:24:E6:7E:76:CC:EA:AE:76:4F:C1:29 Authority key identifier: 0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0 Certificate issuer: /CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0 Certificate serial: 019B5A1A5570A963A37E1CDA9012182E6A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft Manifest number: D0 Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: DcGyhbbH8r8EyZjeiStDbxDTTcA.crl (hash: FEDJ+bECXltlFix69sBH7a8IFJ/gdfaA2tKWCZPWmvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:55:70:a9:63:a3:7e:1c:da:90:12:18:2e:6a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0 Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=5d3b18a4697847a33b24e67e76cceaae764fc129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:02:e1:75:7c:71:dd:5e:fb:91:7e:a9:68: f4:2a:99:f3:bd:fb:9e:bc:68:37:93:ad:62:74:e3: 3f:b0:02:50:0c:44:ec:2d:b2:3a:45:dc:ef:0b:8c: 01:93:96:87:cc:fb:05:1a:55:41:87:45:ef:be:d4: 35:53:8b:ae:f1:df:ae:09:70:5f:7e:dc:a1:1b:b8: 30:5a:84:e9:d7:08:d3:9b:12:a7:3c:df:4f:1f:1a: 53:42:e5:a1:79:84:97:5f:f8:2c:03:d3:bf:aa:06: 91:f5:89:77:64:b2:9c:15:d3:f5:cf:e7:e2:4f:13: 6c:18:d0:47:34:7d:7a:57:9d:32:2f:bb:da:9d:ad: 61:3a:40:04:71:3b:5f:cd:d1:60:64:9a:63:9c:f8: 38:91:cb:c0:b9:ea:5e:6a:ee:fa:cd:74:b5:e4:84: 09:55:d1:2f:c6:17:87:7a:37:d8:97:f1:78:4e:2c: b6:5b:7b:09:66:04:74:26:ec:5c:88:57:fb:08:c4: d8:7a:11:96:b4:c7:bc:84:d8:e0:a5:9f:30:32:d4: ae:ef:f9:b5:2c:71:c8:4e:4a:57:2a:5d:aa:45:73: e2:1c:a3:67:7b:99:13:85:3c:b2:f4:28:2f:18:71: 78:24:b5:2b:88:0a:22:78:f7:b8:01:42:7f:ff:3f: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:18:A4:69:78:47:A3:3B:24:E6:7E:76:CC:EA:AE:76:4F:C1:29 X509v3 Authority Key Identifier: keyid:0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:b0:08:71:bc:63:ef:96:68:d6:28:e5:e6:68:02:64:3d:be: 2e:c0:d3:ec:2b:1a:04:20:31:17:e8:0e:22:f1:fb:94:8c:f7: 3e:b5:7d:2e:c6:45:b5:f1:a2:c5:bc:56:a1:50:0c:4a:a9:6d: 60:5e:aa:1e:7e:40:42:a2:1c:a2:ce:bf:90:9c:06:e5:8a:25: 50:00:a1:af:4f:1a:e5:a1:f7:0c:09:59:38:d3:a3:4b:97:8b: 14:31:98:7f:0d:6c:7e:f9:41:29:ac:f4:07:25:c2:a0:5c:9d: ba:99:53:9e:84:db:f0:be:c0:66:73:80:51:52:c8:8f:62:32: f6:92:ed:15:e4:7f:60:c8:08:5f:96:11:28:ad:4c:f7:bf:cc: 92:f9:5b:3e:a6:34:fa:9e:2f:bc:40:5e:8a:f9:94:fd:4c:77: ad:28:78:ce:68:10:fb:ff:b5:90:d4:64:60:bf:2d:55:fe:86: 1f:fd:4f:6b:09:10:6e:19:54:15:5d:f3:a0:22:00:56:54:01: 9f:0c:31:e1:c0:a0:bf:ee:04:9e:6b:d8:40:89:c3:bf:5b:1d: e2:ab:be:15:2d:e8:5a:46:13:75:90:4d:c0:54:2d:7a:74:30: 9e:cb:f2:c5:b4:de:85:11:6f:37:5f:75:c6:83:fc:04:8d:50: 95:81:8d:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlVwqWOjfhzakBIYLmolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzFiMjg1YjZjN2YyYmYwNGM5OThkZTg5MmI0MzZmMTBk MzRkYzAwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD Eyg1ZDNiMThhNDY5Nzg0N2EzM2IyNGU2N2U3NmNjZWFhZTc2NGZjMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IkC4XV8cd1e+5F+qWj0Kpnzvfue vGg3k61idOM/sAJQDETsLbI6RdzvC4wBk5aHzPsFGlVBh0XvvtQ1U4uu8d+uCXBf ftyhG7gwWoTp1wjTmxKnPN9PHxpTQuWheYSXX/gsA9O/qgaR9Yl3ZLKcFdP1z+fi TxNsGNBHNH16V50yL7vana1hOkAEcTtfzdFgZJpjnPg4kcvAuepeau76zXS15IQJ VdEvxheHejfYl/F4Tiy2W3sJZgR0JuxciFf7CMTYehGWtMe8hNjgpZ8wMtSu7/m1 LHHITkpXKl2qRXPiHKNne5kThTyy9CgvGHF4JLUriAoiePe4AUJ//z/08QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF07GKRpeEejOyTmfnbM6q52T8EpMB8GA1UdIwQY MBaAFA3BsoW2x/K/BMmY3okrQ28Q003AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZWFkYTktZDQ0MS00NzZhLWJhYTQt ZWNhYTVkZGQxZDBmLzEvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zZWFkYTktZDQ0MS00NzZhLWJhYTQtZWNhYTVkZGQxZDBm LzEvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3LAIcbxj 75Zo1ijl5mgCZD2+LsDT7CsaBCAxF+gOIvH7lIz3PrV9LsZFtfGixbxWoVAMSqlt YF6qHn5AQqIcos6/kJwG5YolUAChr08a5aH3DAlZONOjS5eLFDGYfw1sfvlBKaz0 ByXCoFyduplTnoTb8L7AZnOAUVLIj2Iy9pLtFeR/YMgIX5YRKK1M97/MkvlbPqY0 +p4vvEBeivmU/Ux3rSh4zmgQ+/+1kNRkYL8tVf6GH/1PawkQbhlUFV3zoCIAVlQB nwwx4cCgv+4EnmvYQInDv1sd4qu+FS3oWkYTdZBNwFQtenQwnsvyxbTehRFvN191 xoP8BI1QlYGNlw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:49 2025 by rpki-client