This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json) Hash identifier: X2roLWfQjwqj4liw0XyEfFw2ZXSm/swhfYMA4BAbZH8= Subject key identifier: 39:24:D7:55:98:7C:C5:A1:51:19:92:34:04:C6:8E:57:92:8A:CB:AC Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Certificate serial: 019AF50ABD9B5313987C7586D66B1A87141A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:01:53 +0000 Manifest this update: Sat 06 Dec 2025 19:01:53 +0000 Manifest next update: Sun 07 Dec 2025 19:01:53 +0000 Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: ZqCLgvgYS/gmNUuRq3CSFGJDAJlop4XXFagOgQMbusY=) 2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=) 3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:bd:9b:53:13:98:7c:75:86:d6:6b:1a:87:14:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Validity Not Before: Dec 6 19:01:53 2025 GMT Not After : Dec 7 19:01:53 2025 GMT Subject: CN=3924d755987cc5a15119923404c68e57928acbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:9e:2e:32:32:6c:2e:0c:92:a7:bf:81:bf: 0f:b0:2f:09:5e:19:3e:38:2a:bd:0e:7d:3c:60:30: 10:3c:4b:96:31:bb:f9:01:16:94:48:37:d0:5d:af: 24:b6:49:85:e6:4e:18:3b:b0:71:c4:43:98:a3:c7: 85:61:8e:fe:1c:c1:af:3a:67:9c:16:a2:7b:38:75: 21:fe:c2:dc:cf:c6:ae:58:93:30:3e:bc:b4:68:e0: 8f:78:e9:22:d2:41:bf:c4:63:a6:50:f9:42:bb:73: 64:f6:59:4e:75:46:c3:c0:cf:4d:07:fb:30:5a:58: ff:26:2a:81:22:35:6c:19:6a:4c:12:0c:e8:df:93: a1:23:9a:55:e7:75:3b:df:b0:00:ae:70:4f:4e:77: 3d:55:86:1d:f9:49:4a:06:30:82:9f:35:b0:89:70: eb:55:8a:e0:81:1b:de:45:e4:97:89:95:ff:d1:d9: 14:ed:d8:98:b9:02:75:1c:8c:ab:d6:51:d7:0e:5b: 6a:57:4b:c4:7f:b5:61:24:a2:cf:e2:32:f6:6d:76: 3d:db:e9:c7:c9:c2:86:23:0d:a8:b7:72:5a:67:bb: 44:52:b1:b5:07:e2:4d:c8:36:72:fc:99:e0:53:4d: c7:3a:fc:e1:52:24:4e:ed:f4:77:0c:31:41:89:25: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:D7:55:98:7C:C5:A1:51:19:92:34:04:C6:8E:57:92:8A:CB:AC X509v3 Authority Key Identifier: keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c8:7b:83:1e:cd:be:36:2a:55:7b:dd:71:44:6a:dc:d0:53: 1c:08:7f:8f:be:13:ff:b0:bb:ae:7c:ca:c0:94:e8:ce:51:68: d0:89:29:5e:b5:73:e0:fb:b6:d2:a3:f8:97:ba:22:24:68:18: 51:a9:65:47:43:20:08:be:7a:9a:a7:ca:96:19:a9:6c:a6:40: d3:43:e8:38:16:f0:13:6e:c8:bf:3f:b8:76:e4:d7:e8:04:c9: db:34:da:1a:2f:29:83:85:ef:51:4f:ab:9a:aa:30:f6:02:e0: 64:68:4f:f0:a9:05:13:62:70:0c:cb:f9:64:46:e0:3b:b9:0f: 84:49:2e:fd:2b:9b:6e:e6:a0:40:85:5c:ba:9e:59:58:07:3e: c4:7b:dd:cb:f0:fe:25:53:69:d9:ca:40:77:88:45:9d:c7:b4: ef:fc:4f:91:be:b7:f0:3c:25:27:9d:19:9c:04:5c:71:4c:71: 74:02:bc:ce:a1:26:34:87:d4:68:47:12:43:88:50:03:33:bb: 42:2b:62:38:34:ac:f0:a1:fd:37:ec:f0:a5:b4:a7:1b:d3:57: 20:43:cf:d8:df:3f:d9:f3:44:14:3e:29:23:a9:eb:e9:8a:f8: 76:9f:63:3b:37:a2:5e:de:c7:bf:98:3e:a7:ea:9c:86:11:c3: e7:09:c2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cr2bUxOYfHWG1msahxQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjY1M2JiZDE3MDRjNDdiYWRhNjJhYjZjZTM1MDIzMDdm MjQ0YjYwHhcNMjUxMjA2MTkwMTUzWhcNMjUxMjA3MTkwMTUzWjAzMTEwLwYDVQQD EygzOTI0ZDc1NTk4N2NjNWExNTExOTkyMzQwNGM2OGU1NzkyOGFjYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5WeLjIybC4Mkqe/gb8PsC8JXhk+ OCq9Dn08YDAQPEuWMbv5ARaUSDfQXa8ktkmF5k4YO7BxxEOYo8eFYY7+HMGvOmec FqJ7OHUh/sLcz8auWJMwPry0aOCPeOki0kG/xGOmUPlCu3Nk9llOdUbDwM9NB/sw Wlj/JiqBIjVsGWpMEgzo35OhI5pV53U737AArnBPTnc9VYYd+UlKBjCCnzWwiXDr VYrggRveReSXiZX/0dkU7diYuQJ1HIyr1lHXDltqV0vEf7VhJKLP4jL2bXY92+nH ycKGIw2ot3JaZ7tEUrG1B+JNyDZy/JngU03HOvzhUiRO7fR3DDFBiSV8JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkk11WYfMWhURmSNATGjleSisusMB8GA1UdIwQY MBaAFNu2U7vRcExHutpiq2zjUCMH8kS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5Mjkt YTk4MGJlZDMzYWIwLzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5MjktYTk4MGJlZDMzYWIw LzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdch7gx7N vjYqVXvdcURq3NBTHAh/j74T/7C7rnzKwJTozlFo0IkpXrVz4Pu20qP4l7oiJGgY UallR0MgCL56mqfKlhmpbKZA00PoOBbwE27Ivz+4duTX6ATJ2zTaGi8pg4XvUU+r mqow9gLgZGhP8KkFE2JwDMv5ZEbgO7kPhEku/SubbuagQIVcup5ZWAc+xHvdy/D+ JVNp2cpAd4hFnce07/xPkb638DwlJ50ZnARccUxxdAK8zqEmNIfUaEcSQ4hQAzO7 QitiODSs8KH9N+zwpbSnG9NXIEPP2N8/2fNEFD4pI6nr6Yr4dp9jOzeiXt7Hv5g+ p+qchhHD5wnCeA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:29 2025 by rpki-client