This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft File: w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json) Hash identifier: sVGfdlJElzfFm6jdLognygxMo8TLtJEHLC8l+xXZE7I= Subject key identifier: 17:7D:7D:E3:E8:A5:E7:A1:95:46:71:35:1B:9F:C9:E7:C8:A4:DF:7F Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13 Certificate issuer: /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113 Certificate serial: 019AF50AE6E128DE9389D045328183FC75BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 19:02:03 +0000 Manifest this update: Sat 06 Dec 2025 19:02:03 +0000 Manifest next update: Sun 07 Dec 2025 19:02:03 +0000 Files and hashes: 1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: bKIsXNvW072IyjMCxl4JzlV5jCD1ptbQdacbAC692Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e6:e1:28:de:93:89:d0:45:32:81:83:fc:75:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113 Validity Not Before: Dec 6 19:02:03 2025 GMT Not After : Dec 7 19:02:03 2025 GMT Subject: CN=177d7de3e8a5e7a1954671351b9fc9e7c8a4df7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:b7:58:06:2b:1c:51:9d:e7:e3:d5:98:da: 10:f4:86:35:66:a1:19:ea:df:fc:21:fd:75:27:22: 9b:4c:2a:3d:40:52:cb:48:cb:73:c1:83:17:49:86: dc:8f:33:db:bb:ff:a3:bc:cd:19:36:94:c3:6f:46: 00:d7:f3:37:1b:42:4d:46:20:a2:68:b4:0a:46:b4: d0:c5:d6:9f:43:5c:4c:57:fe:af:c5:5b:29:0c:82: 44:ec:9b:d4:ae:50:3f:ce:87:46:68:4f:18:27:4c: ea:6f:39:47:ca:aa:98:88:2a:46:b8:c1:0a:42:ce: 3f:57:04:39:70:ff:b1:7d:ef:c2:89:af:17:1b:2f: c0:e9:c3:44:4a:89:6e:0b:78:fc:ee:70:cb:42:e3: 76:21:44:15:d5:c1:b1:a1:32:98:1c:35:b8:9b:24: 6d:16:7a:bf:af:9c:e4:c3:d8:7a:d2:05:38:26:14: bc:31:e2:fa:65:06:81:7b:a6:8f:73:61:fc:55:7d: de:16:d4:5c:80:85:26:35:01:9f:da:5a:40:e7:ee: 8b:6f:c7:46:6a:a7:bd:a5:0b:1c:d7:c2:c8:e2:1f: 3d:89:10:38:1a:b2:aa:32:4a:54:7d:13:55:1a:10: cd:21:4c:ad:d7:e8:78:b0:e3:26:e4:38:8f:60:b9: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7D:7D:E3:E8:A5:E7:A1:95:46:71:35:1B:9F:C9:E7:C8:A4:DF:7F X509v3 Authority Key Identifier: keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:63:0e:33:02:74:ff:73:c6:6c:d1:60:8e:99:5e:34:a4:79: 47:2c:d5:78:3a:b6:c5:c5:23:c6:2a:a4:66:ec:df:e4:8a:ac: ed:46:28:37:91:a9:dc:37:1f:3f:e0:07:52:6e:40:25:28:6f: 4e:59:d0:9e:9a:76:03:58:ec:f2:69:a6:48:a4:bb:c9:2b:39: 6e:8e:17:83:3b:9a:ca:30:a5:4a:7f:2c:02:02:26:68:db:38: e7:d6:8c:ec:08:17:57:ba:cb:80:0e:d8:b4:f5:cf:50:6c:52: da:84:4e:0a:86:0d:88:8e:5c:ee:e8:06:09:c3:da:9a:b8:9c: 1c:40:01:3c:e0:77:68:25:4c:6f:b1:c8:13:79:bf:86:b6:e3: 6d:c2:e4:8a:40:cb:6a:f5:2e:81:46:0f:15:8e:3f:09:39:32: f4:18:84:18:79:ea:c2:8c:2d:1f:16:a9:81:a9:60:85:4c:a9: 31:d1:cd:cd:f7:09:1f:4e:96:58:44:10:34:a9:ac:d6:0f:94: 4f:b2:36:d1:21:19:e9:99:a7:21:36:8b:13:62:0f:63:81:10: 6b:3a:29:57:03:e6:8d:26:f9:83:e0:28:31:d9:06:61:f3:4e: ad:1b:11:c7:ca:c6:da:95:04:9d:d3:83:ef:5d:17:6a:56:fe: ae:07:b7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CubhKN6TidBFMoGD/HW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNmVkMTUxMjdiZmNiMGJjZDdhNjM4NjhiNDk5YzkzY2Iz MzUxMTMwHhcNMjUxMjA2MTkwMjAzWhcNMjUxMjA3MTkwMjAzWjAzMTEwLwYDVQQD EygxNzdkN2RlM2U4YTVlN2ExOTU0NjcxMzUxYjlmYzllN2M4YTRkZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL63WAYrHFGd5+PVmNoQ9IY1ZqEZ 6t/8If11JyKbTCo9QFLLSMtzwYMXSYbcjzPbu/+jvM0ZNpTDb0YA1/M3G0JNRiCi aLQKRrTQxdafQ1xMV/6vxVspDIJE7JvUrlA/zodGaE8YJ0zqbzlHyqqYiCpGuMEK Qs4/VwQ5cP+xfe/Cia8XGy/A6cNESoluC3j87nDLQuN2IUQV1cGxoTKYHDW4myRt Fnq/r5zkw9h60gU4JhS8MeL6ZQaBe6aPc2H8VX3eFtRcgIUmNQGf2lpA5+6Lb8dG aqe9pQsc18LI4h89iRA4GrKqMkpUfRNVGhDNIUyt1+h4sOMm5DiPYLnoSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBd9fePopeehlUZxNRufyefIpN9/MB8GA1UdIwQY MBaAFMNu0VEnv8sLzXpjhotJnJPLM1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzIt MjY5YTZiODIzYjdlLzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzItMjY5YTZiODIzYjdl LzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWMOMwJ0 /3PGbNFgjpleNKR5RyzVeDq2xcUjxiqkZuzf5Iqs7UYoN5Gp3DcfP+AHUm5AJShv TlnQnpp2A1js8mmmSKS7ySs5bo4XgzuayjClSn8sAgImaNs459aM7AgXV7rLgA7Y tPXPUGxS2oROCoYNiI5c7ugGCcPamricHEABPOB3aCVMb7HIE3m/hrbjbcLkikDL avUugUYPFY4/CTky9BiEGHnqwowtHxapgalghUypMdHNzfcJH06WWEQQNKms1g+U T7I20SEZ6ZmnITaLE2IPY4EQazopVwPmjSb5g+AoMdkGYfNOrRsRx8rG2pUEndOD 710Xalb+rge3rQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:21:16 2025 by rpki-client