This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft File: V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json) Hash identifier: UmEUr/RkQYgZxsBX9Z33jvdMLGDsulEnBJvg8a1ntbs= Subject key identifier: C0:6E:C7:AC:6A:35:A6:99:EE:FA:55:E9:FC:4E:F1:C9:E0:DF:1E:90 Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Certificate serial: 019AF5E596F9645846610F2E7EE02454091F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft Manifest number: 1158 Signing time: Sat 06 Dec 2025 23:00:55 +0000 Manifest this update: Sat 06 Dec 2025 23:00:55 +0000 Manifest next update: Sun 07 Dec 2025 23:00:55 +0000 Files and hashes: 1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: CrZW0gDpCr6J63nUdbTDuH1a4CrK4MRBoNemtqICVno=) 2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:96:f9:64:58:46:61:0f:2e:7e:e0:24:54:09:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Validity Not Before: Dec 6 23:00:55 2025 GMT Not After : Dec 7 23:00:55 2025 GMT Subject: CN=c06ec7ac6a35a699eefa55e9fc4ef1c9e0df1e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:18:e9:5a:7a:3d:5a:5c:80:e4:bf:bc:06: a9:4e:71:ac:66:27:94:44:2e:38:b1:d9:5b:5f:bd: 1d:cb:1f:e7:99:8b:4d:0c:0c:28:cb:c8:b8:55:b7: 47:38:72:7b:fb:db:bd:b7:f8:05:c7:02:e0:98:39: 30:fa:9b:3e:e5:84:51:96:77:54:ab:03:10:19:7d: 7e:b2:6c:08:5c:6e:97:8a:ed:8a:27:ab:7f:9c:b1: 73:7a:27:da:ab:b4:11:f3:e4:1b:e7:bb:5b:5d:46: 2a:e5:99:23:0d:99:3e:fc:af:38:62:69:ef:38:05: 8d:c8:7d:1c:f6:df:21:90:f9:76:7b:31:fd:4e:d2: f6:1a:e0:f2:69:39:e1:4a:3b:90:b6:9a:a2:36:4d: 88:6f:15:b4:a3:43:db:27:92:17:1d:9f:58:98:87: 9f:02:6c:a1:12:1d:47:53:1a:5f:c5:92:9b:30:09: 9e:b6:e8:cf:bb:cb:98:d3:25:8a:4a:35:1f:85:aa: 73:9b:b8:a9:05:f0:5c:02:1f:69:ee:58:36:7f:7d: 18:d6:cf:c5:44:78:9c:a4:f1:11:39:66:7e:2d:11: c7:c7:a0:08:95:27:be:78:74:04:14:ee:24:33:f1: 94:7f:35:b6:f0:53:cb:5f:0b:dd:a0:90:44:d5:7a: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:C7:AC:6A:35:A6:99:EE:FA:55:E9:FC:4E:F1:C9:E0:DF:1E:90 X509v3 Authority Key Identifier: keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:78:07:6c:c4:13:39:1f:63:42:6a:09:39:2b:1b:d2:25:c7: d7:88:e9:81:4b:8d:ae:d7:3f:79:86:9c:3c:0e:1f:86:ff:27: 2d:25:6b:19:cd:39:80:11:16:8a:1f:7c:56:7c:a7:33:90:06: 6c:3e:e7:6b:bc:60:a1:08:52:b6:3c:c0:16:8b:93:1c:45:7d: 23:e4:d3:ca:7a:57:d0:e4:96:4c:18:f0:21:0d:6f:49:d3:7d: f6:ad:44:e8:cb:e6:41:38:c1:b0:83:ad:00:40:1f:6c:30:96: 70:f1:38:f9:ee:21:3f:5f:5f:6f:1d:72:ed:0b:56:01:49:6e: 23:19:43:72:f2:5f:89:2b:03:70:b1:c0:77:43:fc:c1:d9:7b: 0e:80:b0:a5:4f:cf:a3:a5:a3:d7:df:5e:ca:25:e9:52:47:e1: 08:ed:b9:5f:6d:c6:8d:58:ab:fd:ec:14:9e:11:7d:e3:41:6b: 96:11:ad:1e:be:32:cd:54:09:55:2e:3e:12:87:dd:a8:71:cf: cc:22:7b:2d:da:b1:ef:4a:d1:ab:ce:4b:44:78:b0:be:9f:92: 90:d3:80:4d:01:c9:d4:d8:e1:a7:97:cb:0c:f5:f5:21:26:db: 80:62:75:e9:21:39:74:f2:cf:d2:3d:92:2e:15:bc:c1:2c:f9: 8e:57:4d:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15Zb5ZFhGYQ8ufuAkVAkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmVlMDJhYzYwNWYwYmI5OGJiY2Q2MzdhOWFkZmFlNDgz YTZlODQwHhcNMjUxMjA2MjMwMDU1WhcNMjUxMjA3MjMwMDU1WjAzMTEwLwYDVQQD EyhjMDZlYzdhYzZhMzVhNjk5ZWVmYTU1ZTlmYzRlZjFjOWUwZGYxZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1cY6Vp6PVpcgOS/vAapTnGsZieU RC44sdlbX70dyx/nmYtNDAwoy8i4VbdHOHJ7+9u9t/gFxwLgmDkw+ps+5YRRlndU qwMQGX1+smwIXG6Xiu2KJ6t/nLFzeifaq7QR8+Qb57tbXUYq5ZkjDZk+/K84Ymnv OAWNyH0c9t8hkPl2ezH9TtL2GuDyaTnhSjuQtpqiNk2IbxW0o0PbJ5IXHZ9YmIef AmyhEh1HUxpfxZKbMAmetujPu8uY0yWKSjUfhapzm7ipBfBcAh9p7lg2f30Y1s/F RHicpPEROWZ+LRHHx6AIlSe+eHQEFO4kM/GUfzW28FPLXwvdoJBE1Xo16QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBux6xqNaaZ7vpV6fxO8cng3x6QMB8GA1UdIwQY MBaAFFdu4CrGBfC7mLvNY3qa365IOm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEt YjA4OWQxOGZjMDliLzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEtYjA4OWQxOGZjMDli LzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXgHbMQT OR9jQmoJOSsb0iXH14jpgUuNrtc/eYacPA4fhv8nLSVrGc05gBEWih98VnynM5AG bD7na7xgoQhStjzAFouTHEV9I+TTynpX0OSWTBjwIQ1vSdN99q1E6MvmQTjBsIOt AEAfbDCWcPE4+e4hP19fbx1y7QtWAUluIxlDcvJfiSsDcLHAd0P8wdl7DoCwpU/P o6Wj199eyiXpUkfhCO25X23GjVir/ewUnhF940FrlhGtHr4yzVQJVS4+EofdqHHP zCJ7Ldqx70rRq85LRHiwvp+SkNOATQHJ1Njhp5fLDPX1ISbbgGJ16SE5dPLP0j2S LhW8wSz5jldNCQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:33 2025 by rpki-client