This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: LmXWWTVDWovBoCdJ2wsB9S9/Z6xw7GWhRb+xNjtGi9E= Subject key identifier: 06:E4:A5:FE:68:9D:6B:BB:FB:AE:A4:57:91:01:5B:A6:6A:A1:CF:4D Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019AB1041EB5F0969436AAC4B5F06F5F25EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 174A Signing time: Sun 23 Nov 2025 14:00:28 +0000 Manifest this update: Sun 23 Nov 2025 14:00:28 +0000 Manifest next update: Mon 24 Nov 2025 14:00:28 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: H/TKD4YmdCRRVOJyz3euZqsRwSR6NglTpMoV9hBPZ8M=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 09:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:04:1e:b5:f0:96:94:36:aa:c4:b5:f0:6f:5f:25:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Nov 23 14:00:28 2025 GMT Not After : Nov 24 14:00:28 2025 GMT Subject: CN=06e4a5fe689d6bbbfbaea45791015ba66aa1cf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:e5:2f:cd:60:c3:ab:f3:b8:06:2d:01:0b: b5:59:8b:ae:90:05:51:4f:80:dd:31:c8:c9:48:38: 12:2b:ec:1b:d0:73:d0:44:20:ca:5c:9d:f7:61:81: ed:c3:ed:6a:b0:4a:62:62:3a:c4:9a:48:b1:f9:6e: 9f:05:58:fc:e3:7f:28:a7:ee:66:5d:92:4b:21:6c: c8:22:39:02:37:21:d6:78:27:6a:41:f5:8d:bd:cd: 63:e3:33:3b:ec:66:56:bb:ac:88:28:6a:86:16:f5: 70:a1:6d:2b:92:02:e1:2c:d0:a1:37:15:3c:38:cd: e9:9a:df:77:04:bc:80:16:74:57:5e:8d:bb:29:df: 25:f9:23:25:ed:fe:87:f9:91:65:c1:a2:a8:0f:64: a5:23:da:d4:a1:c7:e9:d7:20:bf:71:9c:e1:51:a2: 35:64:5f:67:93:e0:e2:43:08:e5:03:79:c9:b2:91: 04:f8:e7:f5:4c:66:39:66:a3:69:3c:3e:fe:a4:6b: 75:18:9c:c0:39:ef:aa:5f:d8:c3:ba:b2:9f:66:fc: 5f:37:e1:4e:52:17:ec:11:e0:a9:11:b0:43:3c:ca: 48:41:f7:32:84:57:32:d8:94:14:73:15:82:d8:75: fc:fa:27:1d:be:4d:c0:19:e8:c1:dc:93:08:82:d4: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E4:A5:FE:68:9D:6B:BB:FB:AE:A4:57:91:01:5B:A6:6A:A1:CF:4D X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e0:44:e2:f5:3a:58:08:a7:3b:ac:9c:32:af:85:c0:cb:b4: bf:70:1a:f5:f1:84:6c:db:8d:c4:62:a6:b3:a8:e7:56:e2:35: 37:5d:79:bc:9b:03:40:11:d6:42:c0:e4:1b:35:c4:0c:69:1e: e9:7b:21:af:7f:1d:6e:16:e9:9e:d5:e2:9b:0f:a3:9a:19:0b: 48:b6:66:a9:e2:17:43:c3:cd:98:74:9e:2d:d7:47:20:c4:d9: 78:8f:b8:d6:a5:64:1b:82:a1:3a:7b:f1:1f:b4:58:6b:19:bb: a2:52:e0:cb:c0:5d:42:2d:5c:5e:ca:dc:d4:53:a7:20:39:8f: d6:a2:23:46:03:2e:8b:66:01:bc:a8:ab:d9:67:b9:ca:2a:94: ba:63:31:8b:7a:ec:23:4a:d9:4c:87:b9:f6:4c:26:dd:c7:2d: 66:3a:d7:42:53:8f:ed:e2:e4:bb:f1:55:83:7e:d9:41:5b:a1: f5:3c:53:33:d1:07:a7:e3:37:23:80:99:a0:5b:ce:a5:70:8e: c8:a2:4e:0b:a9:bd:60:ff:c6:f0:84:11:9e:21:0f:1d:b4:7e: fd:b8:00:65:e8:f0:05:2d:ad:58:ff:9e:47:16:08:d9:d9:66: 28:4b:ab:73:dc:25:87:e1:c3:f3:27:4d:67:6a:9f:e1:33:d4: 1d:64:3a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqxBB618JaUNqrEtfBvXyXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMTIzMTQwMDI4WhcNMjUxMTI0MTQwMDI4WjAzMTEwLwYDVQQD EygwNmU0YTVmZTY4OWQ2YmJiZmJhZWE0NTc5MTAxNWJhNjZhYTFjZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeflL81gw6vzuAYtAQu1WYuukAVR T4DdMcjJSDgSK+wb0HPQRCDKXJ33YYHtw+1qsEpiYjrEmkix+W6fBVj8438op+5m XZJLIWzIIjkCNyHWeCdqQfWNvc1j4zM77GZWu6yIKGqGFvVwoW0rkgLhLNChNxU8 OM3pmt93BLyAFnRXXo27Kd8l+SMl7f6H+ZFlwaKoD2SlI9rUocfp1yC/cZzhUaI1 ZF9nk+DiQwjlA3nJspEE+Of1TGY5ZqNpPD7+pGt1GJzAOe+qX9jDurKfZvxfN+FO UhfsEeCpEbBDPMpIQfcyhFcy2JQUcxWC2HX8+icdvk3AGejB3JMIgtTYRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbkpf5onWu7+66kV5EBW6Zqoc9NMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOBE4vU6 WAinO6ycMq+FwMu0v3Aa9fGEbNuNxGKms6jnVuI1N115vJsDQBHWQsDkGzXEDGke 6Xshr38dbhbpntXimw+jmhkLSLZmqeIXQ8PNmHSeLddHIMTZeI+41qVkG4KhOnvx H7RYaxm7olLgy8BdQi1cXsrc1FOnIDmP1qIjRgMui2YBvKir2We5yiqUumMxi3rs I0rZTIe59kwm3cctZjrXQlOP7eLku/FVg37ZQVuh9TxTM9EHp+M3I4CZoFvOpXCO yKJOC6m9YP/G8IQRniEPHbR+/bgAZejwBS2tWP+eRxYI2dlmKEurc9wlh+HD8ydN Z2qf4TPUHWQ6vA== -----END CERTIFICATE-----Generated at Sun Nov 23 17:04:03 2025 by rpki-client