This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json) Hash identifier: NFdGvXaHTbzmE+jhnhdiJDBdylijpnECXUKyhrwePq0= Subject key identifier: A7:FE:4C:AB:0A:13:AC:15:55:2C:C8:0A:6B:EC:1C:23:53:F8:04:1F Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Certificate serial: 019B3F487FA9BEABB18AF5230B2A5D221BDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 05:01:14 +0000 Manifest this update: Sun 21 Dec 2025 05:01:14 +0000 Manifest next update: Mon 22 Dec 2025 05:01:14 +0000 Files and hashes: 1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: RxXCr2zF2umaFkfe7bBv2WRQcvPwVrNakolXmShcUyI=) 2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:7f:a9:be:ab:b1:8a:f5:23:0b:2a:5d:22:1b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Validity Not Before: Dec 21 05:01:14 2025 GMT Not After : Dec 22 05:01:14 2025 GMT Subject: CN=a7fe4cab0a13ac15552cc80a6bec1c2353f8041f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:66:df:70:c6:3c:f5:2b:d9:a6:86:6a:53: 14:e9:0b:87:07:2c:14:73:9a:54:75:f0:19:a8:15: 13:6a:2a:2b:fb:53:3a:7d:89:3f:81:02:3d:56:8f: fc:ff:01:bd:1f:5d:d6:65:ee:cb:4b:d3:e3:fc:5e: 4d:2a:f5:46:95:9d:56:88:8d:d5:6e:de:57:a3:cd: 47:b9:9c:ad:29:5a:0f:5a:49:d3:34:f6:64:55:6d: 65:49:2c:1c:17:0a:70:15:8c:c9:f6:d0:cb:0e:b0: b5:d3:c4:7a:09:e3:de:ba:55:2d:21:39:94:a1:68: 94:36:4b:15:33:24:1a:f3:9b:66:f0:42:4b:79:53: f1:50:e1:1f:bf:3b:be:f9:e3:1c:9d:a6:da:2c:fb: 66:92:7f:e8:3c:0f:ff:15:2c:1d:e2:05:0d:15:dc: 9a:a4:fe:4d:cb:60:69:e5:29:86:4d:ec:05:ae:b8: 2e:88:88:84:0c:7f:19:b7:6f:d5:dd:bb:1d:96:5d: 43:75:14:ce:f4:9c:71:97:78:34:90:45:5f:22:d5: 86:25:9d:b4:70:93:b5:b4:3b:ca:52:62:20:00:a7: 4c:9e:c7:8f:2c:6a:1b:a9:d1:38:83:0d:f6:0d:2b: fc:18:60:44:81:bb:5e:26:d0:74:15:31:32:94:7b: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:4C:AB:0A:13:AC:15:55:2C:C8:0A:6B:EC:1C:23:53:F8:04:1F X509v3 Authority Key Identifier: keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:75:76:aa:83:2e:92:cf:51:54:03:d3:03:7a:4d:18:d8:80: a8:d0:bd:64:f9:11:68:36:c5:5d:4c:ba:01:a2:d2:c4:09:54: dd:53:98:1e:0f:4d:79:0d:e5:68:a8:ce:b7:6c:bf:fd:67:1c: ce:d0:09:6c:bf:6a:6a:b7:ac:e2:b7:59:57:dd:8a:44:3a:84: a7:a2:74:da:e0:f9:07:18:cc:c1:23:f9:ac:36:04:9b:7c:df: 35:c2:eb:a7:e9:b5:be:b9:24:db:2a:2f:ce:6a:ff:5a:69:bb: cd:0f:89:5d:a9:61:4c:07:dc:f1:13:36:00:ed:a8:ad:c7:1a: 9a:ac:06:83:df:98:a2:b5:c7:35:e2:d1:78:98:4d:e8:47:f5: 89:d0:af:7a:28:56:b6:ac:be:b4:0a:ab:d2:08:c0:67:0a:f5: 15:59:a8:2b:da:2d:3e:b9:9c:60:c4:56:ef:d5:24:45:89:3f: 0a:e3:0a:7a:5b:ce:fc:9e:48:47:2a:d4:3c:c8:6c:b6:18:95: 61:97:d1:f1:14:77:9b:4f:3e:44:44:54:06:d6:d9:c0:97:22: 5e:38:b6:3d:cd:88:01:16:e6:16:8a:84:99:20:3d:c3:ee:b0: 31:77:69:ac:f5:df:b5:68:11:c5:55:94:02:95:8e:f9:03:ea: 8c:26:be:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SH+pvquxivUjCypdIhvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl YTlmODgwHhcNMjUxMjIxMDUwMTE0WhcNMjUxMjIyMDUwMTE0WjAzMTEwLwYDVQQD EyhhN2ZlNGNhYjBhMTNhYzE1NTUyY2M4MGE2YmVjMWMyMzUzZjgwNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt1m33DGPPUr2aaGalMU6QuHBywU c5pUdfAZqBUTaior+1M6fYk/gQI9Vo/8/wG9H13WZe7LS9Pj/F5NKvVGlZ1WiI3V bt5Xo81HuZytKVoPWknTNPZkVW1lSSwcFwpwFYzJ9tDLDrC108R6CePeulUtITmU oWiUNksVMyQa85tm8EJLeVPxUOEfvzu++eMcnabaLPtmkn/oPA//FSwd4gUNFdya pP5Ny2Bp5SmGTewFrrguiIiEDH8Zt2/V3bsdll1DdRTO9Jxxl3g0kEVfItWGJZ20 cJO1tDvKUmIgAKdMnsePLGobqdE4gw32DSv8GGBEgbteJtB0FTEylHusYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf+TKsKE6wVVSzICmvsHCNT+AQfMB8GA1UdIwQY MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnV2qoMu ks9RVAPTA3pNGNiAqNC9ZPkRaDbFXUy6AaLSxAlU3VOYHg9NeQ3laKjOt2y//Wcc ztAJbL9qares4rdZV92KRDqEp6J02uD5BxjMwSP5rDYEm3zfNcLrp+m1vrkk2yov zmr/Wmm7zQ+JXalhTAfc8RM2AO2orccamqwGg9+YorXHNeLReJhN6Ef1idCveihW tqy+tAqr0gjAZwr1FVmoK9otPrmcYMRW79UkRYk/CuMKelvO/J5IRyrUPMhsthiV YZfR8RR3m08+RERUBtbZwJciXji2Pc2IARbmFoqEmSA9w+6wMXdprPXftWgRxVWU ApWO+QPqjCa+Lw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:37:36 2025 by rpki-client