This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json) Hash identifier: RMpZ8WO4uO38Ispm54a41NZCsStScpv9Fd++FKq+ptQ= Subject key identifier: 51:38:42:01:CB:A1:79:EC:28:53:D7:37:6B:FF:6E:DF:33:5F:FE:F4 Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd Certificate serial: 019AF208EF512013C87079C4401E87FDE6DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft Manifest number: 11E6 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: JQ/Fw6GAnv1njzJbzOCn6r4YYmZr7dLdeo/lzvcYx2c=) 2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ef:51:20:13:c8:70:79:c4:40:1e:87:fd:e6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=51384201cba179ec2853d7376bff6edf335ffef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:33:e7:2e:c3:88:08:cf:f7:ba:55:ca:0d: 18:2c:64:4d:88:f3:90:53:b9:19:56:74:a7:13:b7: 3b:7c:a5:2e:57:33:96:de:de:46:ef:48:ff:3c:b8: 3c:3b:2a:06:45:3e:a7:47:d4:99:d9:af:09:0d:46: 76:59:04:9e:bb:6f:50:da:0d:95:16:2a:d3:fb:f5: 82:92:b8:1e:8c:22:23:fb:b8:32:63:03:33:6a:47: 08:2f:e6:64:9a:2a:24:23:3a:74:98:59:5a:26:fb: ce:84:a5:29:07:fe:17:f6:8c:3b:1a:f2:ec:63:6f: 1c:f0:bb:95:b3:20:99:bd:cc:95:36:95:c5:11:7f: 53:30:43:15:41:a9:b5:61:63:c5:e1:c5:b9:04:f6: 8e:5c:36:08:73:78:54:a5:74:68:da:d4:90:cf:2f: 72:97:97:1b:87:e7:6e:4f:c5:e1:56:8f:37:70:7d: ec:4d:a5:40:07:c0:a3:21:d6:59:78:64:4d:a0:be: 8e:cd:ec:4a:7f:2b:13:f6:a7:bf:f1:9a:4a:6f:2a: 5a:5d:1e:c1:a4:85:51:52:ec:90:19:bb:be:27:f1: b6:b4:35:8e:51:34:6d:6a:be:62:7f:e2:f2:8b:99: 86:25:73:e7:86:7a:b1:c4:e9:0e:49:20:fd:a9:06: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:42:01:CB:A1:79:EC:28:53:D7:37:6B:FF:6E:DF:33:5F:FE:F4 X509v3 Authority Key Identifier: keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c9:86:a0:b7:7c:af:98:49:fb:fb:09:9f:68:1c:35:e4:96: a1:d4:d7:c0:a9:76:42:c1:b5:c1:aa:51:0d:ce:8a:94:8e:34: 3c:70:89:35:bf:dc:c5:d3:2c:e2:43:db:53:0c:4d:50:7d:6b: ee:d9:bb:8d:9c:79:7c:a2:2f:84:81:68:b9:d1:9d:3f:a6:26: 02:94:dc:9a:9d:d0:21:49:58:cb:13:00:20:26:83:9d:9a:05: eb:73:09:23:67:64:f2:0f:e3:8e:e0:24:bd:5b:bb:97:77:0d: cb:ab:35:c0:48:4a:d1:9e:c6:f0:97:97:81:da:11:5a:98:c8: b3:8d:2e:aa:87:87:24:d5:43:52:19:1c:a6:51:b6:0f:e4:a1: ab:fe:54:c5:74:35:25:bd:0b:53:a5:cd:53:87:52:76:f5:46: c3:ca:06:c4:ad:65:7c:80:b7:4c:2f:0a:b3:10:2e:a7:1b:05: a8:d0:39:ae:27:4b:2c:ad:a3:2a:cd:b9:0a:c8:e5:cc:1a:09: 84:11:b9:f5:55:1f:40:c9:9e:08:56:ea:c6:6c:8f:3e:94:0d: fc:6b:40:81:11:d2:06:ac:a5:00:3f:15:44:1b:6e:bb:39:6e: 63:8e:38:22:9d:bd:3e:38:c5:26:bb:0a:a4:98:0a:26:6c:c2: 15:ed:6a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO9RIBPIcHnEQB6H/ebfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl YjEwZmQwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD Eyg1MTM4NDIwMWNiYTE3OWVjMjg1M2Q3Mzc2YmZmNmVkZjMzNWZmZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Qz5y7DiAjP97pVyg0YLGRNiPOQ U7kZVnSnE7c7fKUuVzOW3t5G70j/PLg8OyoGRT6nR9SZ2a8JDUZ2WQSeu29Q2g2V FirT+/WCkrgejCIj+7gyYwMzakcIL+ZkmiokIzp0mFlaJvvOhKUpB/4X9ow7GvLs Y28c8LuVsyCZvcyVNpXFEX9TMEMVQam1YWPF4cW5BPaOXDYIc3hUpXRo2tSQzy9y l5cbh+duT8XhVo83cH3sTaVAB8CjIdZZeGRNoL6OzexKfysT9qe/8ZpKbypaXR7B pIVRUuyQGbu+J/G2tDWOUTRtar5if+Lyi5mGJXPnhnqxxOkOSSD9qQZlhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE4QgHLoXnsKFPXN2v/bt8zX/70MB8GA1UdIwQY MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMmGoLd8 r5hJ+/sJn2gcNeSWodTXwKl2QsG1wapRDc6KlI40PHCJNb/cxdMs4kPbUwxNUH1r 7tm7jZx5fKIvhIFoudGdP6YmApTcmp3QIUlYyxMAICaDnZoF63MJI2dk8g/jjuAk vVu7l3cNy6s1wEhK0Z7G8JeXgdoRWpjIs40uqoeHJNVDUhkcplG2D+Shq/5UxXQ1 Jb0LU6XNU4dSdvVGw8oGxK1lfIC3TC8KsxAupxsFqNA5ridLLK2jKs25CsjlzBoJ hBG59VUfQMmeCFbqxmyPPpQN/GtAgRHSBqylAD8VRBtuuzluY444Ip29PjjFJrsK pJgKJmzCFe1qig== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:23 2025 by rpki-client