This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: RZMtMR35cwM8Y+mibNWRaO3aHLj9gGEKVfNS3bosi9w= Subject key identifier: 31:24:DF:37:F6:87:69:88:B8:BA:B7:B9:83:FC:9D:DF:A2:B0:C3:BA Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019AE33ACB8CC568419B324572B5DCF43009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1764 Signing time: Wed 03 Dec 2025 08:01:12 +0000 Manifest this update: Wed 03 Dec 2025 08:01:12 +0000 Manifest next update: Thu 04 Dec 2025 08:01:12 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: El37t/RNR9ZA+w80Nq8GYUeI6wC36JoHIo+H4hn8LAU=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:3a:cb:8c:c5:68:41:9b:32:45:72:b5:dc:f4:30:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Dec 3 08:01:12 2025 GMT Not After : Dec 4 08:01:12 2025 GMT Subject: CN=3124df37f6876988b8bab7b983fc9ddfa2b0c3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:be:da:34:94:a5:4a:94:f4:27:a9:8b:68: f8:61:dd:4a:13:cb:28:3f:3b:dc:1d:eb:4a:c0:7c: 12:89:f0:ed:c6:37:c2:d1:9d:73:5b:55:b1:25:b7: 27:b6:93:37:a5:a6:7a:d6:d4:26:de:7d:44:33:69: 4d:d3:c2:d3:dd:61:13:c6:00:0c:09:4f:f4:01:6b: 6a:44:09:49:f7:9c:2b:3d:0c:40:86:98:02:62:a7: 2d:9e:de:cc:e5:ca:83:4b:71:8b:f4:cd:15:92:35: 03:d1:21:1a:c9:99:8a:79:58:38:a7:45:4a:26:2d: a6:bf:8d:17:c8:e8:4b:44:12:d1:2f:7c:cd:81:2f: ae:6d:45:2a:50:9c:4f:1b:98:58:4c:29:30:d6:a1: 49:7d:c8:86:20:bb:11:4a:4f:65:9a:1f:f1:ee:a1: 89:64:ad:e1:37:3d:30:cc:da:c0:b4:71:0f:4a:46: 2e:6c:b7:38:39:8b:8c:51:7c:8a:fa:10:91:02:d2: 50:6c:15:7f:ac:27:32:7c:c7:c9:29:1a:6b:a2:07: 7d:eb:dd:fa:7d:b1:81:e5:c5:a5:13:f7:ae:d0:51: 91:f1:51:30:42:e7:a8:c6:e8:79:91:93:ec:7c:34: e6:1d:61:d6:a9:5f:e9:03:77:35:2a:70:af:83:10: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:24:DF:37:F6:87:69:88:B8:BA:B7:B9:83:FC:9D:DF:A2:B0:C3:BA X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:77:e3:02:73:0e:d4:01:62:c8:08:3d:e8:a8:a5:19:58:a7: b7:90:0b:af:b6:86:f4:d5:7c:e5:3c:b5:45:cf:b4:27:b8:23: a2:ba:04:3d:ba:ca:ff:f5:9e:fd:c6:29:3b:7f:99:fc:a6:73: 4c:36:34:52:9b:4d:c8:83:60:64:93:b1:f0:67:ad:b7:6c:b2: d3:93:71:7a:a4:32:c9:4f:84:20:f9:05:d8:6b:55:66:01:9c: c3:26:00:56:18:0d:03:9e:3c:bf:71:8e:54:24:6a:86:de:61: 85:9c:36:9a:83:67:60:ca:3f:e4:fb:fc:9c:8a:08:5e:6f:f6: b2:ad:a2:f7:bd:79:ad:cf:c3:3a:6a:af:62:e7:1c:dd:88:dd: 0d:ba:25:9a:97:8a:ea:1f:0c:4f:5d:cd:92:bc:a8:48:5b:d5: 93:d2:f6:ef:3b:3f:a8:26:b7:f2:90:78:91:3b:4b:26:96:ea: 44:c4:b3:3f:d2:7f:31:ff:8f:4d:2d:3d:ce:74:dc:40:a7:bd: d5:4b:29:85:9c:04:c3:7c:4e:75:26:37:59:1d:ec:d4:35:4d: de:b8:89:4c:44:da:07:e4:20:76:42:3e:96:fc:03:37:b7:43: e1:09:cd:72:49:21:90:be:2a:3e:c9:f5:88:f1:36:01:ed:08: 2e:01:8f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjOsuMxWhBmzJFcrXc9DAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMjAzMDgwMTEyWhcNMjUxMjA0MDgwMTEyWjAzMTEwLwYDVQQD EygzMTI0ZGYzN2Y2ODc2OTg4YjhiYWI3Yjk4M2ZjOWRkZmEyYjBjM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7O+2jSUpUqU9Cepi2j4Yd1KE8so PzvcHetKwHwSifDtxjfC0Z1zW1WxJbcntpM3paZ61tQm3n1EM2lN08LT3WETxgAM CU/0AWtqRAlJ95wrPQxAhpgCYqctnt7M5cqDS3GL9M0VkjUD0SEayZmKeVg4p0VK Ji2mv40XyOhLRBLRL3zNgS+ubUUqUJxPG5hYTCkw1qFJfciGILsRSk9lmh/x7qGJ ZK3hNz0wzNrAtHEPSkYubLc4OYuMUXyK+hCRAtJQbBV/rCcyfMfJKRprogd96936 fbGB5cWlE/eu0FGR8VEwQueoxuh5kZPsfDTmHWHWqV/pA3c1KnCvgxCzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEk3zf2h2mIuLq3uYP8nd+isMO6MB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnfjAnMO 1AFiyAg96KilGVint5ALr7aG9NV85Ty1Rc+0J7gjoroEPbrK//We/cYpO3+Z/KZz TDY0UptNyINgZJOx8Gett2yy05NxeqQyyU+EIPkF2GtVZgGcwyYAVhgNA548v3GO VCRqht5hhZw2moNnYMo/5Pv8nIoIXm/2sq2i9715rc/DOmqvYucc3YjdDbolmpeK 6h8MT13NkryoSFvVk9L27zs/qCa38pB4kTtLJpbqRMSzP9J/Mf+PTS09znTcQKe9 1UsphZwEw3xOdSY3WR3s1DVN3riJTETaB+QgdkI+lvwDN7dD4QnNckkhkL4qPsn1 iPE2Ae0ILgGPsw== -----END CERTIFICATE-----Generated at Wed Dec 3 18:37:46 2025 by rpki-client