This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: +VDNooUgj8XPTDGcRvbDtcDfrIWRLwiXtTheTvNTBUI= Subject key identifier: BC:28:94:86:5D:20:C3:6C:15:AD:8A:2B:4F:45:BD:A4:36:6A:99:AE Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B24E3779E19B2BE127D372A733DB6D6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1786 Signing time: Tue 16 Dec 2025 02:00:45 +0000 Manifest this update: Tue 16 Dec 2025 02:00:45 +0000 Manifest next update: Wed 17 Dec 2025 02:00:45 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: PvtVuDundsv9T10GXTL7CX9/OGjsncgNAmwcGv0yWCc=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:77:9e:19:b2:be:12:7d:37:2a:73:3d:b6:d6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Dec 16 02:00:45 2025 GMT Not After : Dec 17 02:00:45 2025 GMT Subject: CN=bc2894865d20c36c15ad8a2b4f45bda4366a99ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:39:94:08:bc:16:f4:d3:19:4e:fd:bf:f5: ec:ca:85:c9:b8:bf:03:f2:3f:c3:6f:b5:db:b3:1a: 54:79:26:6c:83:6e:5e:e7:fc:ba:7a:63:89:67:b6: 65:f6:c5:62:43:b0:6c:63:a5:70:bb:f9:3d:12:14: b4:f9:02:b5:cd:1b:4e:dd:ea:b8:df:9a:db:f4:0f: d8:4a:53:91:7c:dd:47:0d:31:03:cf:19:36:cd:76: 36:2e:24:60:d7:ef:93:6d:4a:a0:b8:87:c2:b4:e0: ac:6d:03:19:a1:07:d5:35:57:52:b5:6f:57:11:a0: 8e:74:50:a4:02:c0:fd:79:50:1d:a1:c7:2d:9d:5f: 88:91:aa:85:8f:c6:40:a9:d5:65:0c:ef:50:4c:93: 5c:fa:8e:cb:33:e0:68:fe:02:8e:2f:ee:81:87:21: bd:00:69:69:52:f7:83:27:e3:29:5d:d9:ed:3b:3e: 58:75:52:35:da:54:6b:a7:74:73:80:12:6c:77:49: a0:af:81:74:ea:10:c9:a0:e7:6e:56:3c:ce:87:10: e5:5a:19:4c:46:67:53:27:83:50:c2:44:7d:e3:df: 21:be:76:2a:b4:d3:cb:d6:b7:93:0f:17:1f:09:4e: 0b:f6:b9:b2:16:9d:69:7b:7e:88:3c:03:41:6e:ce: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:28:94:86:5D:20:C3:6C:15:AD:8A:2B:4F:45:BD:A4:36:6A:99:AE X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ae:c1:09:9f:f0:f7:2a:30:3d:cd:fe:17:e8:ab:2c:9f:2c: 99:75:a4:72:71:2e:11:73:4f:48:5b:9e:41:94:9d:3d:cd:c7: 5a:65:7a:b4:e4:75:7a:47:6b:a4:f1:45:1e:18:ab:bd:c7:88: 5d:a4:e3:cf:b4:3a:85:b7:fe:1f:f3:62:52:e3:77:19:4c:1f: aa:f9:94:89:b6:36:cc:48:33:4a:cb:89:42:5e:fe:c0:94:6f: 33:eb:57:42:eb:4e:95:0d:78:ae:4a:5e:d5:69:70:bc:d7:de: 29:44:b8:79:5b:a3:ee:fd:08:5c:57:97:0e:9e:15:88:5b:78: 6a:f7:33:f3:1c:d4:2c:25:0f:7b:eb:e0:20:70:bd:cc:da:d2: 28:65:84:31:51:54:28:81:63:58:47:d1:ef:81:b5:fc:d3:a9: a1:94:e8:7d:fb:7a:5b:e3:af:67:39:e7:76:00:3f:50:16:1a: dd:59:20:07:84:f7:67:e1:2e:c5:44:92:c5:6e:47:9a:0d:52: 54:ec:30:83:23:9f:d6:87:40:27:ef:69:bf:5d:75:5a:ee:91: f3:20:f4:fa:48:1e:da:50:64:b8:c5:fc:40:7d:c9:bb:b8:7b: 25:97:12:6c:3f:f7:80:4a:dd:13:70:70:9b:30:ee:7f:8d:bc: b6:0f:cf:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk43eeGbK+En03KnM9ttb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMjE2MDIwMDQ1WhcNMjUxMjE3MDIwMDQ1WjAzMTEwLwYDVQQD EyhiYzI4OTQ4NjVkMjBjMzZjMTVhZDhhMmI0ZjQ1YmRhNDM2NmE5OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurc5lAi8FvTTGU79v/XsyoXJuL8D 8j/Db7XbsxpUeSZsg25e5/y6emOJZ7Zl9sViQ7BsY6Vwu/k9EhS0+QK1zRtO3eq4 35rb9A/YSlORfN1HDTEDzxk2zXY2LiRg1++TbUqguIfCtOCsbQMZoQfVNVdStW9X EaCOdFCkAsD9eVAdocctnV+IkaqFj8ZAqdVlDO9QTJNc+o7LM+Bo/gKOL+6BhyG9 AGlpUveDJ+MpXdntOz5YdVI12lRrp3RzgBJsd0mgr4F06hDJoOduVjzOhxDlWhlM RmdTJ4NQwkR9498hvnYqtNPL1reTDxcfCU4L9rmyFp1pe36IPANBbs4evwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwolIZdIMNsFa2KK09FvaQ2apmuMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK7BCZ/w 9yowPc3+F+irLJ8smXWkcnEuEXNPSFueQZSdPc3HWmV6tOR1ekdrpPFFHhirvceI XaTjz7Q6hbf+H/NiUuN3GUwfqvmUibY2zEgzSsuJQl7+wJRvM+tXQutOlQ14rkpe 1WlwvNfeKUS4eVuj7v0IXFeXDp4ViFt4avcz8xzULCUPe+vgIHC9zNrSKGWEMVFU KIFjWEfR74G1/NOpoZTofft6W+OvZznndgA/UBYa3VkgB4T3Z+EuxUSSxW5Hmg1S VOwwgyOf1odAJ+9pv111Wu6R8yD0+kge2lBkuMX8QH3Ju7h7JZcSbD/3gErdE3Bw mzDuf428tg/PbA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:58:51 2025 by rpki-client