This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft File: V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json) Hash identifier: qhcb7ORWZ95wSRTpv22EoOH+G6+944aDQRDTUIdrwsA= Subject key identifier: 9A:28:2E:9B:87:8F:D8:A0:04:A6:7E:37:26:C9:12:BD:28:8C:A3:6A Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Certificate serial: 019B3B6B16BEA51E7145B339BBE6586BC63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft Manifest number: 117C Signing time: Sat 20 Dec 2025 11:00:32 +0000 Manifest this update: Sat 20 Dec 2025 11:00:32 +0000 Manifest next update: Sun 21 Dec 2025 11:00:32 +0000 Files and hashes: 1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: C8ntIBj00TVuWsybTKXrtKaZu+yU8Bo21nQoiLZaXeU=) 2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:16:be:a5:1e:71:45:b3:39:bb:e6:58:6b:c6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Validity Not Before: Dec 20 11:00:32 2025 GMT Not After : Dec 21 11:00:32 2025 GMT Subject: CN=9a282e9b878fd8a004a67e3726c912bd288ca36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:99:52:d5:5d:ba:0a:04:0d:1d:0a:c7:44: ed:76:1e:bb:e7:58:8e:6d:6f:a9:42:2a:06:d6:7e: 5b:1a:cd:0d:81:6c:ae:70:97:b3:75:b9:01:ff:a7: bf:a9:00:0c:5b:af:f7:02:02:bf:6b:c4:6c:39:d6: 84:c3:b1:ec:f2:66:5d:02:80:93:db:43:5e:e8:fe: eb:2f:ce:3e:c3:56:c8:00:67:54:3a:d7:59:34:09: f3:c4:8e:8b:a8:05:52:09:b6:bc:23:97:39:05:0d: 66:5f:70:e1:94:f7:64:0c:5a:93:3c:41:86:d3:63: 3d:c9:fe:9a:ad:b1:44:cb:4b:04:4f:fd:c0:55:9e: 94:ed:cc:c5:77:40:60:bf:1e:f6:a9:2a:2c:31:7c: b0:52:1f:35:bc:47:73:14:d9:70:e6:5b:93:7c:5a: 94:45:18:f6:6e:f0:18:af:3e:aa:c6:67:7c:b4:20: 6e:b0:6a:bf:80:84:3d:54:2f:60:9b:65:f9:3b:ec: 30:7f:9d:d1:b9:63:63:e7:4c:30:81:78:d1:f2:e8: 3b:66:7f:13:df:93:b1:f3:dd:ce:fb:2b:8c:0f:47: 6e:b5:fb:ad:58:b2:a7:19:65:97:0a:c7:62:fd:94: e5:68:3c:e6:65:a7:f5:6c:15:ad:fa:5d:8e:0e:55: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:2E:9B:87:8F:D8:A0:04:A6:7E:37:26:C9:12:BD:28:8C:A3:6A X509v3 Authority Key Identifier: keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3e:2d:65:03:77:e4:6c:95:f5:41:a9:9f:09:6e:50:f9:46: e7:8a:84:c7:ed:e1:49:3b:d6:c6:0b:bc:c9:fa:a0:39:fa:01: fe:f2:88:92:66:f1:1e:8f:20:9e:a7:1c:f4:2e:26:d0:ec:b7: 03:b7:b3:c1:2c:96:ae:62:59:43:c1:93:69:dc:9e:4d:0d:03: 78:26:49:58:78:c1:a1:90:29:66:1b:3d:8f:cb:9b:a5:1a:7d: 79:33:d3:b0:fc:5d:91:5a:35:f2:dc:35:eb:96:f5:c8:1d:72: af:dd:40:d9:9b:02:77:2f:e5:df:30:35:22:98:7f:f6:36:ca: 18:37:24:3f:ab:16:a6:fd:bd:35:8b:56:7d:91:fc:b1:bb:60: 16:f4:fb:d9:d3:8b:35:b3:12:99:b0:40:74:97:1b:98:09:17: dd:2b:16:c3:12:53:a4:e1:34:b0:50:1b:20:cb:95:e4:60:54: 70:c8:62:aa:e3:04:bc:1d:09:20:64:9f:0c:0b:37:12:33:e4: df:a2:d3:9b:51:86:f9:1b:e5:9f:f3:33:86:b5:7a:a4:9b:cd: 59:cf:a0:2a:2d:ce:66:21:76:56:db:ba:7a:c9:c8:ca:df:27: 17:90:c7:66:4a:71:d6:70:78:ca:98:fc:4d:79:e8:b3:44:48: 88:83:b5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7axa+pR5xRbM5u+ZYa8Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmVlMDJhYzYwNWYwYmI5OGJiY2Q2MzdhOWFkZmFlNDgz YTZlODQwHhcNMjUxMjIwMTEwMDMyWhcNMjUxMjIxMTEwMDMyWjAzMTEwLwYDVQQD Eyg5YTI4MmU5Yjg3OGZkOGEwMDRhNjdlMzcyNmM5MTJiZDI4OGNhMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxKZUtVdugoEDR0Kx0Ttdh6751iO bW+pQioG1n5bGs0NgWyucJezdbkB/6e/qQAMW6/3AgK/a8RsOdaEw7Hs8mZdAoCT 20Ne6P7rL84+w1bIAGdUOtdZNAnzxI6LqAVSCba8I5c5BQ1mX3DhlPdkDFqTPEGG 02M9yf6arbFEy0sET/3AVZ6U7czFd0Bgvx72qSosMXywUh81vEdzFNlw5luTfFqU RRj2bvAYrz6qxmd8tCBusGq/gIQ9VC9gm2X5O+wwf53RuWNj50wwgXjR8ug7Zn8T 35Ox893O+yuMD0dutfutWLKnGWWXCsdi/ZTlaDzmZaf1bBWt+l2ODlWadwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJooLpuHj9igBKZ+NybJEr0ojKNqMB8GA1UdIwQY MBaAFFdu4CrGBfC7mLvNY3qa365IOm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEt YjA4OWQxOGZjMDliLzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEtYjA4OWQxOGZjMDli LzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj4tZQN3 5GyV9UGpnwluUPlG54qEx+3hSTvWxgu8yfqgOfoB/vKIkmbxHo8gnqcc9C4m0Oy3 A7ezwSyWrmJZQ8GTadyeTQ0DeCZJWHjBoZApZhs9j8ubpRp9eTPTsPxdkVo18tw1 65b1yB1yr91A2ZsCdy/l3zA1Iph/9jbKGDckP6sWpv29NYtWfZH8sbtgFvT72dOL NbMSmbBAdJcbmAkX3SsWwxJTpOE0sFAbIMuV5GBUcMhiquMEvB0JIGSfDAs3EjPk 36LTm1GG+Rvln/MzhrV6pJvNWc+gKi3OZiF2Vtu6esnIyt8nF5DHZkpx1nB4ypj8 TXnos0RIiIO1hQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:12:05 2025 by rpki-client