This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json) Hash identifier: FfIdzHmGMYNhNrN9tRjyxrOVhgWMJPn8q6jfkfZ2Quc= Subject key identifier: 33:94:A6:4F:1A:36:45:31:71:C4:BD:47:D5:D6:04:D0:31:13:67:CC Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Certificate serial: 019AF5AE4AA5AFE48E261B14945181F16BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft Manifest number: 0B43 Signing time: Sat 06 Dec 2025 22:00:31 +0000 Manifest this update: Sat 06 Dec 2025 22:00:31 +0000 Manifest next update: Sun 07 Dec 2025 22:00:31 +0000 Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: dOWAbb4UKGi7AhgQpE5nuso8bQMh48y6kmsVfKGyaNw=) 2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=) 3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:4a:a5:af:e4:8e:26:1b:14:94:51:81:f1:6b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Validity Not Before: Dec 6 22:00:31 2025 GMT Not After : Dec 7 22:00:31 2025 GMT Subject: CN=3394a64f1a36453171c4bd47d5d604d0311367cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:9e:d0:cf:54:45:60:79:03:aa:ab:3b:d6: 74:35:60:b1:4f:1f:da:ed:6c:b4:9e:fc:e5:c8:53: 01:25:19:3f:01:b1:95:96:07:ab:25:30:30:c4:49: 24:e4:2f:d1:c7:35:6a:64:f7:61:0f:7c:b9:b9:55: fb:93:88:12:17:2b:d0:e8:32:8a:d3:56:4a:18:62: 57:20:42:85:ee:55:b4:d6:66:1b:fd:f1:f2:a1:69: ef:cc:b5:a0:8f:5f:4d:0e:47:83:df:35:23:d0:ea: 18:a4:84:52:d0:d0:7d:87:09:5f:1f:3c:e7:f3:46: d8:e3:6e:9e:52:d4:86:77:f4:f5:04:69:48:66:35: a5:94:71:06:b3:12:75:fd:9d:74:d1:f7:75:88:1e: 22:aa:b9:19:52:74:e9:7b:24:1f:d3:b6:c6:70:14: bf:5a:7e:60:ca:ab:0c:50:85:2e:0d:06:f1:03:db: 40:2f:74:50:e5:f0:ff:8e:40:11:ef:2d:93:d1:87: c4:55:6e:d8:c1:3e:a9:93:29:65:9f:95:d6:92:24: 3b:34:2a:c8:59:ac:9d:88:41:f3:1d:e3:43:93:a3: e4:10:aa:48:fd:47:9b:53:54:1c:8b:bc:21:bb:45: 1a:14:6e:3f:bf:97:a2:92:83:11:9a:bc:a7:83:e5: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:A6:4F:1A:36:45:31:71:C4:BD:47:D5:D6:04:D0:31:13:67:CC X509v3 Authority Key Identifier: keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cd:fd:89:76:e0:18:9f:f6:bd:db:4b:df:e2:09:a9:ce:c4: 92:42:5b:dd:53:23:91:31:a7:2a:4b:58:e0:db:3a:26:db:e0: 3b:80:e7:09:ef:56:df:18:70:c2:27:f2:f7:6e:3d:2e:0a:1a: 56:87:13:6e:93:1c:76:60:19:7f:57:3f:54:79:10:11:c2:5d: be:b6:65:61:84:7a:0a:e4:59:86:11:66:1b:e6:66:e0:c7:bb: 16:2c:37:5f:b8:88:ef:79:6c:2e:b7:16:c9:56:b2:f1:ec:27: 8e:73:f0:44:1f:3e:ef:ce:98:e6:97:7c:49:fa:87:13:ba:f9: 01:3b:86:18:8b:52:13:47:ae:20:be:27:a0:e4:cc:87:1c:0e: 47:d7:28:ab:e5:56:e5:63:a8:67:73:d4:4a:40:a6:1b:c0:d1: e7:24:f3:6b:66:a1:f5:42:e4:13:b4:3f:90:bc:7e:ac:43:cd: 3d:e4:e5:da:0b:87:99:ed:0a:fc:2a:b6:3e:ae:48:41:7c:da: 5e:4b:ad:10:60:22:84:e3:82:55:33:6a:6a:6a:9c:19:3c:54: 78:a7:c7:cb:54:1d:f9:d0:9e:48:f5:83:91:18:9c:d8:96:16: c3:8d:fb:86:a5:74:6d:ca:ee:aa:e0:b6:4f:b1:ae:da:99:fe: 9c:ce:a6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rkqlr+SOJhsUlFGB8WvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux YjBmM2YwHhcNMjUxMjA2MjIwMDMxWhcNMjUxMjA3MjIwMDMxWjAzMTEwLwYDVQQD EygzMzk0YTY0ZjFhMzY0NTMxNzFjNGJkNDdkNWQ2MDRkMDMxMTM2N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVOe0M9URWB5A6qrO9Z0NWCxTx/a 7Wy0nvzlyFMBJRk/AbGVlgerJTAwxEkk5C/RxzVqZPdhD3y5uVX7k4gSFyvQ6DKK 01ZKGGJXIEKF7lW01mYb/fHyoWnvzLWgj19NDkeD3zUj0OoYpIRS0NB9hwlfHzzn 80bY426eUtSGd/T1BGlIZjWllHEGsxJ1/Z100fd1iB4iqrkZUnTpeyQf07bGcBS/ Wn5gyqsMUIUuDQbxA9tAL3RQ5fD/jkAR7y2T0YfEVW7YwT6pkylln5XWkiQ7NCrI WaydiEHzHeNDk6PkEKpI/UebU1Qci7whu0UaFG4/v5eikoMRmryng+VTUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOUpk8aNkUxccS9R9XWBNAxE2fMMB8GA1UdIwQY MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt ZGY1NzJmZTk2NzJhLzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC839iXbg GJ/2vdtL3+IJqc7EkkJb3VMjkTGnKktY4Ns6JtvgO4DnCe9W3xhwwify9249Lgoa VocTbpMcdmAZf1c/VHkQEcJdvrZlYYR6CuRZhhFmG+Zm4Me7Fiw3X7iI73lsLrcW yVay8ewnjnPwRB8+786Y5pd8SfqHE7r5ATuGGItSE0euIL4noOTMhxwOR9coq+VW 5WOoZ3PUSkCmG8DR5yTza2ah9ULkE7Q/kLx+rEPNPeTl2guHme0K/Cq2Pq5IQXza XkutEGAihOOCVTNqamqcGTxUeKfHy1Qd+dCeSPWDkRic2JYWw437hqV0bcruquC2 T7Gu2pn+nM6mGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:32 2025 by rpki-client