This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft File: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json) Hash identifier: X9OHOle6R9Jgw8A7yQ47IfxWY62aI8MEzhYswkaYoFU= Subject key identifier: 32:09:1A:5C:21:EE:30:21:F5:0D:88:B1:52:66:36:4D:EC:22:64:EF Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5 Certificate issuer: /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5 Certificate serial: 019B2F9E6372435CDC2D89EF8935A00E2912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 04:01:07 +0000 Manifest this update: Thu 18 Dec 2025 04:01:07 +0000 Manifest next update: Fri 19 Dec 2025 04:01:07 +0000 Files and hashes: 1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: iJbP0j160k0UHbXjUxaBN3l6dv8/9Qhay78l/Sfiuwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:63:72:43:5c:dc:2d:89:ef:89:35:a0:0e:29:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5 Validity Not Before: Dec 18 04:01:07 2025 GMT Not After : Dec 19 04:01:07 2025 GMT Subject: CN=32091a5c21ee3021f50d88b15266364dec2264ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:7f:d3:4a:1a:11:46:7a:bd:33:ae:3e:7f: cb:9b:45:cc:1c:f4:a6:88:68:83:16:f0:59:69:b8: 5a:83:c9:8f:ea:d8:d6:08:ae:fb:24:89:a4:cc:ee: 93:42:b0:bf:2b:63:1d:37:5c:6f:b7:31:08:c2:c5: e3:70:58:df:c9:7c:24:2c:c7:28:e2:27:3c:a4:f5: 3b:23:da:2f:3f:61:06:a6:c4:e2:16:e2:8f:2e:54: e3:b0:94:e7:7b:e0:cb:db:9f:39:e7:4e:62:f0:d6: 33:61:48:f7:e3:46:0a:88:ca:f1:12:90:ff:60:14: 07:bc:55:40:7d:bf:0c:c4:ac:e5:7d:ee:5e:12:be: 95:6b:03:07:78:27:a5:74:be:8f:60:54:ba:c7:28: cf:de:1b:80:89:39:ff:9b:30:2c:04:07:25:cd:6e: 19:fe:b6:8d:5d:07:94:46:76:97:62:b0:b2:c4:b8: 96:20:65:db:01:11:25:6d:42:2a:cf:7e:7a:e7:e1: e3:ac:a9:29:d2:23:6c:ad:6e:c7:e6:31:5d:f1:4e: cb:4e:d0:a1:e1:78:d8:a9:1e:d4:55:b4:da:5a:25: 30:7e:35:f8:6e:ef:1a:55:ba:a8:72:8a:c8:ef:f5: 61:b2:33:bf:ca:5d:bd:26:4b:c2:a1:48:1f:c6:cc: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:1A:5C:21:EE:30:21:F5:0D:88:B1:52:66:36:4D:EC:22:64:EF X509v3 Authority Key Identifier: keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:24:a3:03:d3:a2:3a:08:4a:30:76:86:5d:b4:49:c4:89:4d: 9d:38:fa:22:3c:17:e7:e6:6f:ce:59:ba:ea:2d:89:dc:1c:c6: 6a:88:47:8a:52:8e:c6:61:63:8d:e3:f0:6a:9c:15:bd:8b:0a: 10:1f:42:f9:df:f1:ff:7d:e0:22:f8:c3:23:5e:71:53:e5:cc: 80:90:21:89:dd:fd:db:cf:d5:92:b5:09:a4:53:72:36:45:2b: 8d:26:32:79:53:c5:51:63:02:1f:9c:7f:31:3b:60:fa:ab:b3: c6:60:bd:aa:2f:21:87:1e:5b:fe:14:92:1f:64:ae:7a:92:8c: bf:5d:68:96:94:ef:05:e1:5c:6a:7b:41:3b:95:9c:c7:e7:63: f5:00:8a:00:67:63:c6:00:00:fd:7a:8a:11:70:f0:85:c1:3d: 0e:90:a8:dd:2f:d5:62:4a:4b:d4:08:ca:13:75:3a:09:6e:8a: 9d:e4:77:39:25:76:d8:2d:0c:15:04:0b:de:59:2c:f2:5e:31: 5b:38:67:6a:d5:5d:13:45:76:67:87:e9:56:13:3a:7a:ed:91: 4e:5d:3a:c6:b7:c7:5f:f9:af:2c:3f:65:ae:c3:47:1e:f0:5d: ad:1f:86:45:e7:fa:b1:0b:3e:84:fe:f4:dd:c4:02:80:94:12: 6d:2a:64:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnmNyQ1zcLYnviTWgDikSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjA4YjE5ZDhjYjU4NjU3NjY2YmJjOWU3OTJiNjM0Yzdj ZjMxYTUwHhcNMjUxMjE4MDQwMTA3WhcNMjUxMjE5MDQwMTA3WjAzMTEwLwYDVQQD EygzMjA5MWE1YzIxZWUzMDIxZjUwZDg4YjE1MjY2MzY0ZGVjMjI2NGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEx/00oaEUZ6vTOuPn/Lm0XMHPSm iGiDFvBZabhag8mP6tjWCK77JImkzO6TQrC/K2MdN1xvtzEIwsXjcFjfyXwkLMco 4ic8pPU7I9ovP2EGpsTiFuKPLlTjsJTne+DL2585505i8NYzYUj340YKiMrxEpD/ YBQHvFVAfb8MxKzlfe5eEr6VawMHeCeldL6PYFS6xyjP3huAiTn/mzAsBAclzW4Z /raNXQeURnaXYrCyxLiWIGXbARElbUIqz3565+HjrKkp0iNsrW7H5jFd8U7LTtCh 4XjYqR7UVbTaWiUwfjX4bu8aVbqocorI7/VhsjO/yl29JkvCoUgfxsyP6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIJGlwh7jAh9Q2IsVJmNk3sImTvMB8GA1UdIwQY MBaAFAwgixnYy1hldma7yeeStjTHzzGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9kOTUzMDgtNTI0NS00YWM2LWE5Mzct NGEzNjk5ZTQzYmY3LzEvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9kOTUzMDgtNTI0NS00YWM2LWE5MzctNGEzNjk5ZTQzYmY3 LzEvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCSjA9Oi OghKMHaGXbRJxIlNnTj6IjwX5+Zvzlm66i2J3BzGaohHilKOxmFjjePwapwVvYsK EB9C+d/x/33gIvjDI15xU+XMgJAhid3928/VkrUJpFNyNkUrjSYyeVPFUWMCH5x/ MTtg+quzxmC9qi8hhx5b/hSSH2SuepKMv11olpTvBeFcantBO5Wcx+dj9QCKAGdj xgAA/XqKEXDwhcE9DpCo3S/VYkpL1AjKE3U6CW6KneR3OSV22C0MFQQL3lks8l4x WzhnatVdE0V2Z4fpVhM6eu2RTl06xrfHX/mvLD9lrsNHHvBdrR+GRef6sQs+hP70 3cQCgJQSbSpkTQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:00 2025 by rpki-client