This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft File: b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json) Hash identifier: DYI5tb6KuiLM+lJqnKHmVprlbwxn/cqXdfrdipWH8T8= Subject key identifier: BE:EE:30:1F:61:90:BA:66:8B:4B:FA:1E:EA:F8:77:DB:61:04:12:E1 Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10 Certificate issuer: /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110 Certificate serial: 019AF389644170928F6F1C884C03D94DDCB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft Manifest number: 0DE1 Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: hwZevkkEQLUHz0Dos9kI9R7BlHV6twlw/hHE5wPRNv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:64:41:70:92:8f:6f:1c:88:4c:03:d9:4d:dc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110 Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=beee301f6190ba668b4bfa1eeaf877db610412e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:96:a6:0d:d1:01:1d:67:a0:69:6f:5f:3b: 8b:0f:71:cc:4a:3a:15:68:9b:b1:bd:74:43:10:b7: df:d8:06:39:dd:d9:4f:66:14:69:56:24:1b:fc:d3: 33:7e:46:14:d0:ee:de:47:f5:6f:cd:4c:1a:02:18: 52:2c:cb:c7:e7:20:23:02:1e:d3:3d:75:a5:6b:40: 6d:a1:8f:38:9f:40:85:34:04:27:c0:5b:07:00:a9: 07:27:71:6d:06:4c:ac:62:b0:8e:1f:df:98:f2:82: 9b:84:67:13:a0:2b:8c:1f:4e:d5:b6:b7:d5:a3:84: 20:81:18:52:f3:0e:33:e0:d5:b9:b8:43:8a:48:1f: c4:c1:4b:43:cc:ea:54:4a:85:87:68:ad:3a:9e:6a: 00:1c:45:40:3a:00:20:9e:98:af:4f:7d:04:8f:45: 18:8f:dc:42:bc:53:63:9d:0c:02:ec:20:38:3a:1f: 3b:b2:d2:f1:f7:5f:42:23:93:19:1a:37:13:ea:d0: 03:5d:8d:82:ca:f9:56:77:03:38:36:31:c1:32:51: df:78:e3:ed:c5:3d:b9:20:29:11:e1:14:ea:16:05: 51:2d:43:e9:ce:5c:7c:87:10:f0:62:48:51:cb:c7: f9:10:b3:c9:62:cf:62:86:dd:70:e0:b7:80:f0:5a: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EE:30:1F:61:90:BA:66:8B:4B:FA:1E:EA:F8:77:DB:61:04:12:E1 X509v3 Authority Key Identifier: keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6d:01:3b:8a:bd:43:3a:c7:5b:f6:34:03:1a:79:37:ce:52: 83:5e:c9:93:1b:bd:38:d1:d5:99:a4:77:86:19:47:01:53:be: 57:98:ae:9d:66:bc:e9:88:dc:2c:d4:c4:7c:02:7b:6f:da:2d: 4a:d0:6e:d3:d2:19:79:df:4f:2f:e9:bc:a5:e7:29:8c:99:83: 4c:1c:e1:3c:16:c6:3e:f8:5a:26:20:ec:3d:86:f7:42:29:ae: 02:ed:91:00:5d:5c:06:57:9e:25:ce:3e:ab:96:9d:ba:b5:0f: bb:fb:4b:86:fd:61:de:99:55:b1:19:15:51:38:4d:52:50:5d: 1a:13:aa:d8:3a:08:f2:2a:64:19:92:f4:5e:65:03:56:ce:a9: 26:60:d8:3a:b2:a6:c9:cd:8a:51:96:aa:5c:0f:1a:4d:06:0a: 1c:4e:87:cd:cb:e1:d1:e4:51:f5:3f:47:af:57:a0:0c:78:e2: cb:ee:7f:f2:ef:62:33:c7:40:64:96:55:a1:4f:83:d1:a1:88: e9:45:ea:f0:cf:86:71:50:2c:0a:e2:6f:7d:56:5a:7c:ea:9d: 28:a3:d7:5c:8a:dd:a0:d2:d9:7a:49:2a:f1:2f:c5:56:9b:93: 33:03:c8:1e:15:cf:93:59:c4:0e:26:e1:0b:1f:79:93:4a:85: 9b:99:61:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWRBcJKPbxyITAPZTdywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNmVjOTI1OGVmZDAwMjkyMTc4ZmE4MWMyM2NkNzdjMDJh MWExMTAwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EyhiZWVlMzAxZjYxOTBiYTY2OGI0YmZhMWVlYWY4NzdkYjYxMDQxMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosuWpg3RAR1noGlvXzuLD3HMSjoV aJuxvXRDELff2AY53dlPZhRpViQb/NMzfkYU0O7eR/VvzUwaAhhSLMvH5yAjAh7T PXWla0BtoY84n0CFNAQnwFsHAKkHJ3FtBkysYrCOH9+Y8oKbhGcToCuMH07VtrfV o4QggRhS8w4z4NW5uEOKSB/EwUtDzOpUSoWHaK06nmoAHEVAOgAgnpivT30Ej0UY j9xCvFNjnQwC7CA4Oh87stLx919CI5MZGjcT6tADXY2CyvlWdwM4NjHBMlHfeOPt xT25ICkR4RTqFgVRLUPpzlx8hxDwYkhRy8f5ELPJYs9iht1w4LeA8Fp6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7uMB9hkLpmi0v6Hur4d9thBBLhMB8GA1UdIwQY MBaAFG9uySWO/QApIXj6gcI813wCoaEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xNjBkODEtYzcyOC00NjJmLWFhMjYt YTE1OTM1MDY0YWRkLzEvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8xNjBkODEtYzcyOC00NjJmLWFhMjYtYTE1OTM1MDY0YWRk LzEvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArG0BO4q9 QzrHW/Y0Axp5N85Sg17Jkxu9ONHVmaR3hhlHAVO+V5iunWa86YjcLNTEfAJ7b9ot StBu09IZed9PL+m8pecpjJmDTBzhPBbGPvhaJiDsPYb3QimuAu2RAF1cBleeJc4+ q5adurUPu/tLhv1h3plVsRkVUThNUlBdGhOq2DoI8ipkGZL0XmUDVs6pJmDYOrKm yc2KUZaqXA8aTQYKHE6Hzcvh0eRR9T9Hr1egDHjiy+5/8u9iM8dAZJZVoU+D0aGI 6UXq8M+GcVAsCuJvfVZafOqdKKPXXIrdoNLZekkq8S/FVpuTMwPIHhXPk1nEDibh Cx95k0qFm5lhKA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:01:22 2025 by rpki-client