This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json) Hash identifier: EelRyXndfmIv90arns4NvFUBKkRFG2WECUSLACJCduA= Subject key identifier: 15:EF:B7:14:F9:E8:07:4B:BF:0C:52:96:87:04:38:54:16:61:23:15 Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71 Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971 Certificate serial: 019AF2AD7A1B2B3ECA324F25815005A6475C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft Manifest number: 0349 Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: tia6LQHMRlYOIWF8uEVUt3D0xGSxdv71K+vYmsPxipU=) 2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7a:1b:2b:3e:ca:32:4f:25:81:50:05:a6:47:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971 Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=15efb714f9e8074bbf0c52968704385416612315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:5c:ca:c6:d3:6b:42:a2:42:f6:e2:51:52: 54:44:12:f1:2e:e2:eb:cd:81:64:7a:3e:93:e2:45: 3a:f3:95:26:90:d9:1e:bd:5f:5a:0b:95:ce:22:70: 1b:b7:3d:12:e0:5c:ed:b6:e2:97:c5:5e:cb:bf:d0: 17:a9:c3:bb:ca:87:01:57:16:f5:8d:bc:7f:d3:26: 74:e5:16:d2:31:f7:a6:82:b7:eb:4a:6d:e6:c6:2b: 3f:ad:8e:e3:c3:e6:08:ed:00:3d:67:36:2e:72:14: ad:ea:d3:55:34:f3:09:17:f6:2c:7b:9f:f1:c3:60: 45:a3:1e:54:ac:82:b4:fb:4e:ba:29:cb:cb:53:e8: c1:72:ae:9a:92:04:e5:a4:d7:fb:f1:de:b9:6e:6c: 90:a3:9f:f0:00:a7:27:8b:90:b2:14:39:83:c3:57: 4e:df:68:13:41:91:9d:5d:ef:4c:80:45:8d:7f:66: 3b:06:c1:51:0c:e2:88:62:eb:9e:4e:18:7a:a4:f6: a1:dd:e3:f9:45:85:21:94:28:3c:ed:3d:36:4d:56: 9e:a9:08:9c:48:23:4e:3e:c7:43:08:b9:58:82:a8: 6a:ea:3d:d2:09:51:97:cc:aa:f7:02:75:54:a6:22: ea:de:0f:33:0a:89:f6:50:03:02:ea:d8:23:5f:ae: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:B7:14:F9:E8:07:4B:BF:0C:52:96:87:04:38:54:16:61:23:15 X509v3 Authority Key Identifier: keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ce:6d:c7:ba:55:06:00:3c:c6:5f:a8:93:5b:7f:ec:a7:0b: eb:f4:29:56:9a:5e:89:50:b9:45:ce:46:bf:64:62:cc:d5:b0: 3b:24:dd:8e:ca:11:38:76:e3:6b:b3:dc:7b:7f:fe:9d:e2:54: d5:b7:d6:4f:67:cb:61:60:84:b2:3c:5e:47:8b:16:02:2d:01: 8a:16:ce:c8:fd:a8:d6:93:fe:ab:ca:6b:79:7c:df:1a:61:7b: ae:de:11:56:12:fc:d6:25:9a:e9:49:19:be:08:f1:bf:cd:1e: a1:c7:ea:60:89:2c:97:e5:7c:ab:8d:e9:8a:f6:1f:7e:73:51: 8a:4a:79:d1:c6:65:20:2e:63:d1:e7:70:32:2f:15:f4:cf:6c: 6c:62:85:8a:62:60:ab:18:a1:d7:0e:c4:a7:fb:f5:92:69:66: 21:12:7a:1c:25:8a:6c:e5:72:d7:93:31:3a:c7:0a:c8:ab:33: b8:94:4a:28:e1:e4:ce:b5:11:e1:8d:bc:e4:98:c5:11:ac:71: 00:52:c3:6d:11:f9:24:7e:9b:30:a0:76:b3:17:3f:f9:02:4e: 4b:01:49:70:f5:54:46:a7:62:43:2f:68:b3:81:a6:97:ed:ff: 5f:d2:1d:8f:8d:7a:de:71:a8:6a:a5:8a:a7:5d:45:62:34:af: d2:7f:f3:94 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrXobKz7KMk8lgVAFpkdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNmVmZWQyYTI0YWMxMjBlZDI2YWU5MmFlNDg1ODFiNzdk MjQ5NzEwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EygxNWVmYjcxNGY5ZTgwNzRiYmYwYzUyOTY4NzA0Mzg1NDE2NjEyMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uNcysbTa0KiQvbiUVJURBLxLuLr zYFkej6T4kU685UmkNkevV9aC5XOInAbtz0S4FzttuKXxV7Lv9AXqcO7yocBVxb1 jbx/0yZ05RbSMfemgrfrSm3mxis/rY7jw+YI7QA9ZzYuchSt6tNVNPMJF/Yse5/x w2BFox5UrIK0+066KcvLU+jBcq6akgTlpNf78d65bmyQo5/wAKcni5CyFDmDw1dO 32gTQZGdXe9MgEWNf2Y7BsFRDOKIYuueThh6pPah3eP5RYUhlCg87T02TVaeqQic SCNOPsdDCLlYgqhq6j3SCVGXzKr3AnVUpiLq3g8zCon2UAMC6tgjX66LsQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBXvtxT56AdLvwxSlocEOFQWYSMVMB8GA1UdIwQY MBaAFPtu/tKiSsEg7Saukq5IWBt30klxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0yNy0wcUpLd1NEdEpxNlNya2hZRzNmU1NYRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjU0NWE0LTIyZmEtNDUxYy04N2Fm LTYyZjMxNmQwN2Q3MC8xLzEtMjctMHFKS3dTRHRKcTZTcmtoWUczZlNTWEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JhL2Y1NDVhNC0yMmZhLTQ1MWMtODdhZi02MmYzMTZkMDdk NzAvMS8xLTI3LTBxSkt3U0R0SnE2U3JraFlHM2ZTU1hFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM5t x7pVBgA8xl+ok1t/7KcL6/QpVppeiVC5Rc5Gv2RizNWwOyTdjsoROHbja7Pce3/+ neJU1bfWT2fLYWCEsjxeR4sWAi0BihbOyP2o1pP+q8preXzfGmF7rt4RVhL81iWa 6UkZvgjxv80eocfqYIksl+V8q43pivYffnNRikp50cZlIC5j0edwMi8V9M9sbGKF imJgqxih1w7Ep/v1kmlmIRJ6HCWKbOVy15MxOscKyKszuJRKKOHkzrUR4Y285JjF EaxxAFLDbRH5JH6bMKB2sxc/+QJOSwFJcPVURqdiQy9os4Gml+3/X9Idj4163nGo aqWKp11FYjSv0n/zlA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:07 2025 by rpki-client