This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: CdOpAr+88tnKuGkYu1+45EnSCdQpGc/+1hu4QPDL8RM= Subject key identifier: 43:F9:17:9D:68:72:D2:54:11:05:3B:5B:33:31:F5:96:5B:46:99:FD Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B36E9F35AF7C6C4DE3E22010591A60D3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1282 Signing time: Fri 19 Dec 2025 14:01:00 +0000 Manifest this update: Fri 19 Dec 2025 14:01:00 +0000 Manifest next update: Sat 20 Dec 2025 14:01:00 +0000 Files and hashes: 1: 0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa (hash: Kf+VRZglvL6Y3KqIp6jRgRnsTLA4/6Z1kOM3rWbawXY=) 2: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=) 3: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 4: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 5: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 6: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: jyMxMUjZruxyfjHxgWD3i8fS7gNrBBQBOLGbo3F0CcI=) 7: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 8: GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa (hash: YmXLiGi1pP0XJ9TfEfzlqfyfGLBGlCS0068r1YP0kds=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (hash: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=) 11: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 12: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=) 13: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 14: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 15: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 17: x2feWTktTwyBHKrOUzd6buDUjuU.roa (hash: ligBMajluKMyvklZAk4GV5Vw2Taqgg4c/vN04Ce3XMY=) 18: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:f3:5a:f7:c6:c4:de:3e:22:01:05:91:a6:0d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Dec 19 14:01:00 2025 GMT Not After : Dec 20 14:01:00 2025 GMT Subject: CN=43f9179d6872d25411053b5b3331f5965b4699fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:63:0f:c1:4f:d4:28:f9:aa:6e:0a:4f:38: c6:8e:c5:18:2d:22:a1:d0:ac:21:43:46:b2:d3:6e: db:06:ee:08:34:00:9d:c3:c4:85:47:ad:31:85:32: f2:f7:4b:90:4a:e6:76:8c:68:72:bf:04:14:af:ab: 0f:67:82:a4:42:5e:40:f8:b8:99:a0:fb:0e:15:fb: cc:4b:8e:ee:c5:0c:37:0c:fc:51:7f:d9:40:a5:03: a4:ed:ef:f6:9f:ba:78:62:bf:bb:2e:94:cb:f8:a1: 08:1f:f0:83:87:12:8c:1e:c0:5b:2f:d5:65:56:8d: b2:67:6b:07:dc:64:24:0c:8d:aa:c1:a8:7d:19:f4: 49:63:e6:a3:89:9b:f6:67:5f:eb:6b:f7:6b:8d:aa: 55:29:91:64:f5:83:9c:c8:e5:90:e2:e5:86:8a:1c: e4:7d:e2:55:5f:b2:71:29:69:b6:bf:33:df:cb:bb: f0:98:67:e1:32:53:3b:bc:19:65:4e:cb:a7:e3:72: 90:b9:9f:4e:1b:3a:fd:9d:bb:c6:22:8d:04:76:d1: 63:03:48:bf:d6:d2:9d:a2:a1:b7:2f:c6:e6:c2:65: c9:f4:25:b7:cd:c4:fd:f5:9f:c8:1e:63:68:f9:a8: 7c:e4:eb:31:fd:9e:9b:ea:62:f9:57:59:ee:97:a4: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F9:17:9D:68:72:D2:54:11:05:3B:5B:33:31:F5:96:5B:46:99:FD X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:04:4c:43:79:52:ff:33:d2:72:7a:62:a6:4f:ea:83:0e:57: 6b:d6:9c:49:37:cd:7c:0f:07:b3:af:11:ff:42:8f:55:55:c0: d3:78:8e:1c:d1:39:2e:e8:3c:a9:10:55:67:4f:40:74:04:d7: e4:fa:78:93:a8:39:a4:b9:b2:2d:e0:9e:42:74:80:d0:47:a0: 31:63:81:dc:08:c3:1d:38:ae:88:fc:1d:42:0f:9a:91:70:d5: 0e:08:ac:31:7b:8b:36:e0:71:b4:9e:a7:b0:55:79:9d:e9:77: 6a:c3:18:53:db:a8:fa:28:eb:45:8e:f0:d1:e0:77:83:60:f7: 79:36:27:ab:38:88:da:05:39:da:f0:cf:f2:ab:d1:17:16:08: 2c:4c:3b:ce:b5:16:68:6e:4f:84:55:2c:f6:e2:2a:54:e9:fe: b4:f8:b4:b5:8f:d7:22:08:fe:61:66:f4:fb:78:81:99:d0:6d: e2:81:6d:76:29:2d:f2:73:6b:67:55:ee:eb:c6:b5:2c:3c:3e: db:ab:47:73:02:ea:62:dc:e6:2b:e0:50:59:d7:07:4b:d5:ae: 33:61:d2:4c:64:c3:9e:d9:db:02:b7:07:ae:71:00:c3:58:c9: 38:7b:f3:e9:9d:26:30:c0:fc:29:ac:31:9d:c4:53:a2:ed:6e: 40:af:61:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26fNa98bE3j4iAQWRpg08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUxMjE5MTQwMTAwWhcNMjUxMjIwMTQwMTAwWjAzMTEwLwYDVQQD Eyg0M2Y5MTc5ZDY4NzJkMjU0MTEwNTNiNWIzMzMxZjU5NjViNDY5OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifRjD8FP1Cj5qm4KTzjGjsUYLSKh 0KwhQ0ay027bBu4INACdw8SFR60xhTLy90uQSuZ2jGhyvwQUr6sPZ4KkQl5A+LiZ oPsOFfvMS47uxQw3DPxRf9lApQOk7e/2n7p4Yr+7LpTL+KEIH/CDhxKMHsBbL9Vl Vo2yZ2sH3GQkDI2qwah9GfRJY+ajiZv2Z1/ra/drjapVKZFk9YOcyOWQ4uWGihzk feJVX7JxKWm2vzPfy7vwmGfhMlM7vBllTsun43KQuZ9OGzr9nbvGIo0EdtFjA0i/ 1tKdoqG3L8bmwmXJ9CW3zcT99Z/IHmNo+ah85Osx/Z6b6mL5V1nul6RnHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP5F51octJUEQU7WzMx9ZZbRpn9MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswRMQ3lS /zPScnpipk/qgw5Xa9acSTfNfA8Hs68R/0KPVVXA03iOHNE5Lug8qRBVZ09AdATX 5Pp4k6g5pLmyLeCeQnSA0EegMWOB3AjDHTiuiPwdQg+akXDVDgisMXuLNuBxtJ6n sFV5nel3asMYU9uo+ijrRY7w0eB3g2D3eTYnqziI2gU52vDP8qvRFxYILEw7zrUW aG5PhFUs9uIqVOn+tPi0tY/XIgj+YWb0+3iBmdBt4oFtdikt8nNrZ1Xu68a1LDw+ 26tHcwLqYtzmK+BQWdcHS9WuM2HSTGTDntnbArcHrnEAw1jJOHvz6Z0mMMD8Kawx ncRTou1uQK9hDg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:12 2025 by rpki-client