This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft File: 227_c-__gSd8LV048ORtbRKnCNc.mft (raw, json) Hash identifier: /5la3B6rAZy+VzlG3hMZoEPLvvdNABAbroToicnvgpc= Subject key identifier: A3:80:21:D9:E2:D7:2F:53:C8:27:A1:40:2A:7C:73:C6:41:BC:E5:4E Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7 Certificate issuer: /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7 Certificate serial: 019AF23FB6EF6E6C060C2E82481BBAB4A7C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: 227_c-__gSd8LV048ORtbRKnCNc.crl (hash: ne36pG1fi3zRAv+3aMQ+y1lq5pmYDuB5+knQAH6qucE=) 2: cmWG-vH2BvPbA67VsqJqB_jv_zU.roa (hash: jJCpozKn5bF6BPqDVQG5hwKj0Mc2BX9AXUCoDqUsDQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b6:ef:6e:6c:06:0c:2e:82:48:1b:ba:b4:a7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=a38021d9e2d72f53c827a1402a7c73c641bce54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:51:5c:f0:d2:91:56:d2:44:86:4c:72:13: 99:70:e7:01:83:b9:da:ee:55:ff:b6:e4:fc:92:75: 52:74:5f:4d:ea:fc:fb:8b:bc:a1:11:0b:01:eb:d4: f2:f8:28:6a:09:37:f2:13:15:1e:dc:1c:bc:75:f9: 09:61:1c:8b:15:8a:44:04:ce:57:6d:55:bf:a9:d6: 68:35:1b:9c:e8:70:2a:25:66:6a:68:1a:a0:c6:77: 81:2c:cc:4b:ce:ad:22:a5:9d:15:f6:ac:b1:0c:fc: c2:f1:0b:24:78:0e:f0:dd:e6:23:04:ca:6d:0a:a7: 8e:c3:4d:77:0a:27:a6:07:8f:04:48:f4:46:65:31: 36:13:c5:11:7e:91:f9:e7:ac:d6:9d:ea:fa:7f:cc: f1:a7:f0:6c:0d:29:6a:5f:85:2c:f4:08:96:0b:21: 8f:0b:eb:f6:35:3c:2c:23:6d:71:f9:98:29:25:a5: 5e:cc:4a:85:e8:1e:3b:6e:de:0d:e6:5c:c1:26:8f: cc:58:ee:73:28:c6:59:f6:01:ee:71:ea:ff:28:9c: b7:9a:44:96:a2:7d:81:b8:9e:5b:38:db:76:86:b0: 92:33:0f:3d:4e:df:e2:b7:f8:49:95:b8:de:93:56: e2:98:4b:e4:5b:1f:95:25:d1:bc:6f:18:b1:4e:1d: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:80:21:D9:E2:D7:2F:53:C8:27:A1:40:2A:7C:73:C6:41:BC:E5:4E X509v3 Authority Key Identifier: keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:56:a1:40:96:8d:1e:c5:05:84:9e:52:dc:b3:36:35:af:5a: 92:4b:1e:35:53:e6:0c:bf:2d:d8:74:de:4e:55:93:f2:a2:68: 9e:eb:9f:8a:aa:27:d6:6f:b6:49:7d:06:22:ae:52:76:2d:f0: 8b:4e:b7:0e:da:da:f4:d9:3a:35:51:d3:18:41:84:6f:37:ef: 59:17:83:41:08:0c:f9:c9:57:f0:74:71:90:04:ea:01:d9:e6: f6:0f:2a:1e:8c:08:56:77:8d:50:1d:5e:0c:04:c1:1d:8b:8f: 86:b3:0c:29:d5:a4:3a:95:2e:3b:bb:11:ea:ba:a7:ba:e4:73: 1f:ca:59:cc:d6:e9:eb:ff:35:ce:3f:d6:22:be:0e:ea:2b:08: 32:12:91:6f:22:ff:c1:88:ff:d4:14:c5:dc:67:81:41:39:82: c4:d4:50:ce:df:8b:20:15:c2:54:5e:aa:27:f5:05:1e:75:75: db:63:18:3a:13:54:a1:a4:41:90:f3:3c:de:24:ea:1b:e2:fc: be:8e:bc:84:7c:de:ee:de:a4:05:f1:e5:ff:e7:44:a0:17:4f: 64:7f:50:6c:21:6b:4e:e0:40:be:09:f3:65:84:e9:be:5b:d3: 4a:ad:ac:69:88:7d:16:3f:7f:48:ff:3c:b4:82:e3:6d:1f:a6: 41:c5:86:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7bvbmwGDC6CSBu6tKfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNmVmZjczZWZmZjgxMjc3YzJkNWQzOGYwZTQ2ZDZkMTJh NzA4ZDcwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EyhhMzgwMjFkOWUyZDcyZjUzYzgyN2ExNDAyYTdjNzNjNjQxYmNlNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVZRXPDSkVbSRIZMchOZcOcBg7na 7lX/tuT8knVSdF9N6vz7i7yhEQsB69Ty+ChqCTfyExUe3By8dfkJYRyLFYpEBM5X bVW/qdZoNRuc6HAqJWZqaBqgxneBLMxLzq0ipZ0V9qyxDPzC8QskeA7w3eYjBMpt CqeOw013CiemB48ESPRGZTE2E8URfpH556zWner6f8zxp/BsDSlqX4Us9AiWCyGP C+v2NTwsI21x+ZgpJaVezEqF6B47bt4N5lzBJo/MWO5zKMZZ9gHucer/KJy3mkSW on2BuJ5bONt2hrCSMw89Tt/it/hJlbjek1bimEvkWx+VJdG8bxixTh0dpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOAIdni1y9TyCehQCp8c8ZBvOVOMB8GA1UdIwQY MBaAFNtu/3Pv/4EnfC1dOPDkbW0SpwjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMt MWU0NzgyYmU2NDQ1LzEvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMtMWU0NzgyYmU2NDQ1 LzEvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFahQJaN HsUFhJ5S3LM2Na9akkseNVPmDL8t2HTeTlWT8qJonuufiqon1m+2SX0GIq5Sdi3w i063Dtra9Nk6NVHTGEGEbzfvWReDQQgM+clX8HRxkATqAdnm9g8qHowIVneNUB1e DATBHYuPhrMMKdWkOpUuO7sR6rqnuuRzH8pZzNbp6/81zj/WIr4O6isIMhKRbyL/ wYj/1BTF3GeBQTmCxNRQzt+LIBXCVF6qJ/UFHnV122MYOhNUoaRBkPM83iTqG+L8 vo68hHze7t6kBfHl/+dEoBdPZH9QbCFrTuBAvgnzZYTpvlvTSq2saYh9Fj9/SP88 tILjbR+mQcWGZg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:40 2025 by rpki-client