This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json) Hash identifier: jSQI8qRJMoTitVBZN6lRqBWT0nH4xxuNUXgm9bvRCz4= Subject key identifier: D7:C1:19:52:8A:27:D0:9C:E2:06:B7:CB:22:64:50:3F:E5:51:32:2A Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Certificate serial: 019BFA9B7AE69AAAAA0661F91E6A92E62AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft Manifest number: 0BCB Signing time: Mon 26 Jan 2026 14:00:52 +0000 Manifest this update: Mon 26 Jan 2026 14:00:52 +0000 Manifest next update: Tue 27 Jan 2026 14:00:52 +0000 Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: r1pAKbokm96mkgiyKoHSKUpS/sVPm4oWBpDW+3mCPq4=) 2: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=) 3: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:7a:e6:9a:aa:aa:06:61:f9:1e:6a:92:e6:2a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Validity Not Before: Jan 26 14:00:52 2026 GMT Not After : Jan 27 14:00:52 2026 GMT Subject: CN=d7c119528a27d09ce206b7cb2264503fe551322a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:bc:cf:6a:6f:2d:14:f0:c7:a3:9e:57:56: bb:d7:9f:64:9b:a2:0e:a9:4f:88:e2:6a:d5:91:e5: 5b:4d:0b:32:94:72:cf:33:27:57:88:ea:53:1b:5d: a8:b2:b4:48:cf:d8:1c:19:9f:06:12:9d:92:71:27: 6f:6e:25:a9:f1:13:a1:fa:97:fe:e1:5e:a2:34:19: 19:e3:0b:90:a4:29:b0:e1:b8:28:08:dc:18:36:e8: c0:88:32:05:f2:bc:80:82:e4:0c:1e:2c:89:26:61: 34:0d:9b:27:4b:5f:7a:a2:e3:fb:ab:af:42:5f:fb: b1:69:0f:22:60:80:d9:a8:e4:39:a2:87:9d:8c:03: 5a:e8:71:8c:ce:49:e5:f4:64:af:ea:8d:e0:84:65: f2:3e:70:b1:23:43:2e:54:bd:9e:b3:13:7c:8f:12: 85:2b:e6:61:75:ea:44:1e:7a:ad:3a:77:8b:13:37: bc:87:08:9c:d5:30:f0:92:52:31:33:f6:25:02:80: 5e:44:04:75:58:5f:7c:55:81:93:0e:4e:de:db:b1: 04:7d:52:1e:fc:37:c5:47:cd:ac:f8:37:75:7c:b4: e6:af:15:28:29:ab:da:38:aa:97:a6:64:e8:f6:8f: 27:a6:93:60:1a:47:e4:14:3c:07:83:5d:6c:db:e2: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C1:19:52:8A:27:D0:9C:E2:06:B7:CB:22:64:50:3F:E5:51:32:2A X509v3 Authority Key Identifier: keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1e:4c:ba:c7:52:75:13:5a:50:35:53:93:38:d0:15:cd:47: b8:5d:bc:45:15:e4:ef:05:2d:2f:2e:87:36:a8:57:87:9a:1a: 71:4e:08:42:5c:81:e5:a4:06:78:70:aa:2b:92:29:3c:75:73: 50:0f:96:d3:34:f2:c9:09:0d:a5:0e:fe:fc:ba:cf:1f:7d:51: db:39:d8:a2:21:2f:c1:ba:2c:e9:b2:86:09:fa:9a:ae:14:3a: cc:36:bd:69:e5:61:6b:65:e7:94:5f:f5:8f:b8:34:cf:cb:60: e1:b4:9a:e2:77:07:e2:7f:5d:b9:00:67:d3:84:81:f3:5d:62: ab:2e:71:5b:2f:ff:2f:4a:4f:b1:60:5f:e0:82:d0:9f:4a:be: 6f:99:c7:4a:9c:f3:3d:94:9d:48:50:5d:31:66:d1:05:30:43: 46:35:98:4c:c3:24:43:93:01:3c:6e:70:64:a6:c9:1a:8a:3c: fe:2b:83:60:6a:15:9b:54:7c:73:3d:90:7b:7f:fc:26:97:f1: 3b:d7:1f:df:ed:28:f8:5b:49:15:52:61:fb:08:f6:18:d6:b0: 3e:a2:67:51:22:cf:97:24:9d:d8:9b:4c:e8:21:f1:7b:02:ff: 1e:40:1f:13:9d:8a:f0:55:b6:ad:a5:5c:9a:4b:50:57:06:3c: 2c:df:a7:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m3rmmqqqBmH5HmqS5iqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux YjBmM2YwHhcNMjYwMTI2MTQwMDUyWhcNMjYwMTI3MTQwMDUyWjAzMTEwLwYDVQQD EyhkN2MxMTk1MjhhMjdkMDljZTIwNmI3Y2IyMjY0NTAzZmU1NTEzMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeC8z2pvLRTwx6OeV1a7159km6IO qU+I4mrVkeVbTQsylHLPMydXiOpTG12osrRIz9gcGZ8GEp2ScSdvbiWp8ROh+pf+ 4V6iNBkZ4wuQpCmw4bgoCNwYNujAiDIF8ryAguQMHiyJJmE0DZsnS196ouP7q69C X/uxaQ8iYIDZqOQ5ooedjANa6HGMzknl9GSv6o3ghGXyPnCxI0MuVL2esxN8jxKF K+ZhdepEHnqtOneLEze8hwic1TDwklIxM/YlAoBeRAR1WF98VYGTDk7e27EEfVIe /DfFR82s+Dd1fLTmrxUoKavaOKqXpmTo9o8nppNgGkfkFDwHg11s2+I1VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfBGVKKJ9Cc4ga3yyJkUD/lUTIqMB8GA1UdIwQY MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt ZGY1NzJmZTk2NzJhLzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB5MusdS dRNaUDVTkzjQFc1HuF28RRXk7wUtLy6HNqhXh5oacU4IQlyB5aQGeHCqK5IpPHVz UA+W0zTyyQkNpQ7+/LrPH31R2znYoiEvwbos6bKGCfqarhQ6zDa9aeVha2XnlF/1 j7g0z8tg4bSa4ncH4n9duQBn04SB811iqy5xWy//L0pPsWBf4ILQn0q+b5nHSpzz PZSdSFBdMWbRBTBDRjWYTMMkQ5MBPG5wZKbJGoo8/iuDYGoVm1R8cz2Qe3/8Jpfx O9cf3+0o+FtJFVJh+wj2GNawPqJnUSLPlySd2JtM6CHxewL/HkAfE52K8FW2raVc mktQVwY8LN+nyw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:09 2026 by rpki-client