This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json) Hash identifier: LHd6lrNr7cCFuQ/AuaQNm31TME8s4Gj8dA88BA1T6q4= Subject key identifier: 0A:A8:3A:B6:67:02:AF:85:7B:C7:9D:C2:9F:B0:11:A1:A3:5E:83:DF Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Certificate serial: 019AF208B89E22EDD4A2ECC543288217DCD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: Ec8UxT0Rjhf0HvG0A3/L22p16wdq51ggpPs2xzNECtY=) 2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b8:9e:22:ed:d4:a2:ec:c5:43:28:82:17:dc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=0aa83ab66702af857bc79dc29fb011a1a35e83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:24:0f:da:36:9c:3c:0e:b2:8c:86:de:a5: d8:e3:06:04:a7:46:d4:56:32:35:a6:97:18:b6:54: 8a:9d:99:57:83:b2:aa:4d:e1:2c:aa:85:b1:30:2b: 1f:d6:2f:4e:af:54:05:b6:15:46:2d:d7:98:2a:a7: 06:db:da:3b:68:a9:e5:ce:21:85:cf:b6:1a:d9:e5: 05:da:23:b6:13:5e:85:77:dc:d9:19:97:fa:54:dd: 69:65:5e:af:3a:d5:60:05:ad:b8:5e:3a:5a:23:05: 21:b8:83:72:94:31:a6:ea:b6:09:79:eb:3e:8e:27: 1e:0a:df:a7:2d:59:d8:0d:50:61:43:ef:0c:65:dd: b6:53:ec:ae:69:f4:1c:35:77:44:35:af:e1:b1:36: ae:95:d8:a1:fb:ae:67:8f:75:fe:e4:55:13:fb:d5: df:2c:24:42:65:75:33:6b:b6:f3:26:cf:7d:d8:f0: 8f:d7:4c:48:c6:8c:e4:32:d3:2f:5b:3c:f0:01:78: 80:b3:3d:25:c3:6a:7b:98:cb:32:e5:d1:68:43:38: 78:56:e3:d2:44:7f:98:1e:78:7a:08:d2:c4:08:47: b2:a8:e9:d8:3a:94:71:b1:63:82:0b:5d:ed:50:f2: 82:70:bf:71:44:7d:12:36:f1:69:c3:f0:15:2a:ef: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A8:3A:B6:67:02:AF:85:7B:C7:9D:C2:9F:B0:11:A1:A3:5E:83:DF X509v3 Authority Key Identifier: keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:20:ca:8f:b4:08:bd:3f:de:c6:32:2e:8a:47:32:a4:d6:86: e5:df:d2:1e:02:d8:1a:a0:74:cd:5a:17:e6:c0:83:4f:c7:ae: d9:bb:b9:d1:94:60:04:b3:2f:12:27:ef:a2:78:a6:a4:8e:61: 93:5b:d9:1b:ac:64:0c:bd:29:13:6a:b8:1c:c8:f6:1e:c7:56: c5:69:f9:ba:ce:e7:49:59:eb:b7:85:a1:0a:4e:0c:f4:bb:59: ec:e3:a1:8d:42:47:10:4b:12:73:7d:49:4d:7e:57:12:dd:58: 57:80:fe:5a:cb:33:74:22:c2:53:0b:97:cd:39:2e:20:68:02: 86:8b:e3:31:33:80:0d:0f:cf:fe:01:9a:c9:57:fe:c7:64:ee: aa:ee:ad:da:be:74:38:cc:25:12:66:c7:19:6a:c5:a5:af:34: 48:a0:92:da:8b:ba:bd:94:61:92:a6:97:53:57:8b:63:08:64: d4:8a:fa:57:a9:21:10:e6:74:1d:c1:07:c6:e9:9e:b6:de:a6: 65:d0:68:db:fc:27:e0:3b:97:fc:ac:5b:ae:7f:e3:5f:ac:40: 4d:89:3c:f7:a1:08:50:f3:2b:90:d6:d1:bb:98:99:b7:47:7d: 11:47:98:cb:89:69:62:0a:79:08:f9:bb:7b:13:e0:c7:29:dc: 1f:ac:4f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLieIu3UouzFQyiCF9zSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl YTlmODgwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygwYWE4M2FiNjY3MDJhZjg1N2JjNzlkYzI5ZmIwMTFhMWEzNWU4M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLUkD9o2nDwOsoyG3qXY4wYEp0bU VjI1ppcYtlSKnZlXg7KqTeEsqoWxMCsf1i9Or1QFthVGLdeYKqcG29o7aKnlziGF z7Ya2eUF2iO2E16Fd9zZGZf6VN1pZV6vOtVgBa24XjpaIwUhuINylDGm6rYJees+ jiceCt+nLVnYDVBhQ+8MZd22U+yuafQcNXdENa/hsTauldih+65nj3X+5FUT+9Xf LCRCZXUza7bzJs992PCP10xIxozkMtMvWzzwAXiAsz0lw2p7mMsy5dFoQzh4VuPS RH+YHnh6CNLECEeyqOnYOpRxsWOCC13tUPKCcL9xRH0SNvFpw/AVKu/ZMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqoOrZnAq+Fe8edwp+wEaGjXoPfMB8GA1UdIwQY MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAySDKj7QI vT/exjIuikcypNaG5d/SHgLYGqB0zVoX5sCDT8eu2bu50ZRgBLMvEifvonimpI5h k1vZG6xkDL0pE2q4HMj2HsdWxWn5us7nSVnrt4WhCk4M9LtZ7OOhjUJHEEsSc31J TX5XEt1YV4D+WsszdCLCUwuXzTkuIGgChovjMTOADQ/P/gGayVf+x2Tuqu6t2r50 OMwlEmbHGWrFpa80SKCS2ou6vZRhkqaXU1eLYwhk1Ir6V6khEOZ0HcEHxumett6m ZdBo2/wn4DuX/Kxbrn/jX6xATYk896EIUPMrkNbRu5iZt0d9EUeYy4lpYgp5CPm7 exPgxyncH6xP6g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:25 2025 by rpki-client