This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft File: e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json) Hash identifier: GqMgukSSH25RR9uNM5aVKGfCUtAtwTjrxrNAUl5DRP4= Subject key identifier: 24:DE:E9:0E:E1:DF:FF:4A:F2:A3:38:38:37:5E:20:76:BA:EB:E2:0E Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9 Certificate issuer: /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9 Certificate serial: 019AF0BF9067FDA51BDF05786795E13DF4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft Manifest number: 129E Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: s0N7vZfE55iJLFNvvV3jcw557fHU6B1p6/wVnMCh4kM=) 2: yOrvlFjeOz6HRgN7M7RpLwrjM4c.roa (hash: zxQgMHs7sORcUwU2cibCj/HDlkWnlXy2pP3grChdFik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:90:67:fd:a5:1b:df:05:78:67:95:e1:3d:f4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=24dee90ee1dfff4af2a33838375e2076baebe20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:8c:3b:82:17:10:51:ce:34:7f:25:ff:47: 65:24:0f:56:af:4f:bb:b0:1e:d8:b5:4d:b2:0c:1b: c9:c8:08:d8:f6:4a:d2:bf:05:fd:be:8a:89:95:7e: a3:4f:b4:f8:10:41:94:0d:83:2f:40:87:b5:cd:96: 41:bb:c9:d1:43:cc:fd:72:fe:7f:35:91:0e:f8:55: ca:08:e9:39:68:21:46:aa:13:fb:78:41:bb:a1:07: a8:c3:62:f8:98:35:0b:ca:7f:4e:2c:1f:6f:96:f2: b5:e9:63:c9:bc:51:1b:aa:c8:49:7e:82:69:b3:c4: f4:f3:4f:91:56:ce:0c:a9:55:de:a6:26:ae:50:89: c2:15:c7:ad:c6:83:e0:8a:33:5c:2a:01:5e:45:b4: 90:f2:d4:71:04:4e:cf:cf:a3:79:d9:f3:2f:96:4b: ae:f9:c5:3d:3e:46:aa:68:93:cc:56:8d:dd:d3:8b: 83:7b:d7:b4:bd:45:43:b0:6c:30:18:ea:46:ce:c4: 41:53:0b:1f:bc:99:86:39:e0:22:47:e2:ff:04:88: ef:e8:38:d3:8b:b0:67:04:8a:63:de:1e:cb:81:f3: 3d:6f:57:3e:b0:b2:bf:fb:e6:fd:4d:44:65:9d:3f: 10:3c:c7:a7:da:48:4d:b2:f1:54:1d:8a:63:52:88: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DE:E9:0E:E1:DF:FF:4A:F2:A3:38:38:37:5E:20:76:BA:EB:E2:0E X509v3 Authority Key Identifier: keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:77:23:f6:2a:52:0d:dc:c9:7a:87:26:85:8d:74:ba:f6:1e: 0d:ce:b9:cc:20:d4:6d:44:94:d5:00:e2:e9:7c:a9:04:40:77: c2:f5:74:6a:6c:d5:4a:1c:dd:4c:ad:d0:17:29:65:9d:46:91: 2c:ce:44:37:dc:33:72:9a:1d:c3:da:01:d2:7b:7d:8f:ac:ff: 9d:90:99:81:84:dc:49:dd:e9:dd:94:a6:a0:c8:11:6f:8a:fb: 64:2c:45:98:65:b4:36:85:cd:32:46:a7:b9:93:81:dc:69:4e: 5a:3c:18:f9:d7:a0:df:39:f0:83:a9:19:2d:e4:11:13:55:40: a0:45:38:88:c1:9e:66:67:fd:96:b3:f4:d6:fd:d1:ec:27:8d: 99:1a:dd:17:90:2c:d8:ce:19:97:25:96:88:fa:21:57:da:ba: 17:47:61:7b:d1:4c:4a:de:01:d6:72:2a:20:25:8f:9a:bf:71: e0:16:68:58:6b:69:cd:ba:b0:2a:5b:ab:43:0a:9b:ef:91:c2: 44:54:95:02:29:92:45:b0:63:e4:cf:41:09:21:fa:77:7c:a1: 0c:12:24:6c:27:68:10:e5:16:36:8d:f1:c2:ef:2e:33:ed:b5: 85:d0:ac:74:2a:36:ea:69:db:0c:ce:ae:7f:0e:4d:e5:2e:42: 45:e6:fa:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5Bn/aUb3wV4Z5XhPfT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNmVkMDI3ZDM3YmQ2MTA5YTAzMTFlMjg2OWQzNDRhZDk1 OTM1ZjkwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD EygyNGRlZTkwZWUxZGZmZjRhZjJhMzM4MzgzNzVlMjA3NmJhZWJlMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0umMO4IXEFHONH8l/0dlJA9Wr0+7 sB7YtU2yDBvJyAjY9krSvwX9voqJlX6jT7T4EEGUDYMvQIe1zZZBu8nRQ8z9cv5/ NZEO+FXKCOk5aCFGqhP7eEG7oQeow2L4mDULyn9OLB9vlvK16WPJvFEbqshJfoJp s8T080+RVs4MqVXepiauUInCFcetxoPgijNcKgFeRbSQ8tRxBE7Pz6N52fMvlkuu +cU9PkaqaJPMVo3d04uDe9e0vUVDsGwwGOpGzsRBUwsfvJmGOeAiR+L/BIjv6DjT i7BnBIpj3h7LgfM9b1c+sLK/++b9TURlnT8QPMen2khNsvFUHYpjUogXIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTe6Q7h3/9K8qM4ODdeIHa66+IOMB8GA1UdIwQY MBaAFHtu0CfTe9YQmgMR4oadNErZWTX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEt Yzk3ZTM3M2Q3MDRjLzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEtYzk3ZTM3M2Q3MDRj LzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3cj9ipS DdzJeocmhY10uvYeDc65zCDUbUSU1QDi6XypBEB3wvV0amzVShzdTK3QFyllnUaR LM5EN9wzcpodw9oB0nt9j6z/nZCZgYTcSd3p3ZSmoMgRb4r7ZCxFmGW0NoXNMkan uZOB3GlOWjwY+deg3znwg6kZLeQRE1VAoEU4iMGeZmf9lrP01v3R7CeNmRrdF5As 2M4ZlyWWiPohV9q6F0dhe9FMSt4B1nIqICWPmr9x4BZoWGtpzbqwKlurQwqb75HC RFSVAimSRbBj5M9BCSH6d3yhDBIkbCdoEOUWNo3xwu8uM+21hdCsdCo26mnbDM6u fw5N5S5CReb65Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:54 2025 by rpki-client