This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft File: b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json) Hash identifier: Ihl7F2oywiT7HFkrAUqe5NH15k2W8H3HUE8uTE480Cc= Subject key identifier: D1:5E:68:23:B5:CC:9F:67:90:02:FA:68:8F:36:0C:CC:85:00:33:E3 Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10 Certificate issuer: /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110 Certificate serial: 019B72FEE6BC6EC60C1675D74F06688C53F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft Manifest number: 0E23 Signing time: Wed 31 Dec 2025 06:01:06 +0000 Manifest this update: Wed 31 Dec 2025 06:01:06 +0000 Manifest next update: Thu 01 Jan 2026 06:01:06 +0000 Files and hashes: 1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: ZdBpQhtdQ3sLH7ojbiA16o58g0s1KWnEb8/0kVQS4zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:e6:bc:6e:c6:0c:16:75:d7:4f:06:68:8c:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110 Validity Not Before: Dec 31 06:01:06 2025 GMT Not After : Jan 1 06:01:06 2026 GMT Subject: CN=d15e6823b5cc9f679002fa688f360ccc850033e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:7c:67:57:a9:97:bc:ea:ae:92:a4:e9:8f: 00:30:77:e1:80:26:3d:30:37:6b:4a:cd:3c:c6:e9: 08:87:9e:d6:9e:91:04:cf:76:e6:fe:18:20:0b:2d: 66:08:ef:c0:73:d9:ad:fb:ed:32:bf:c2:fe:6c:33: db:09:d6:6c:7f:6d:6a:36:ac:fd:4b:32:01:5a:65: bb:e7:ad:63:e1:06:48:b0:2b:87:8f:ff:3e:e0:35: d6:e0:dd:be:91:80:63:81:6b:35:61:38:f4:14:57: 0a:e6:40:15:bd:16:df:65:b2:a3:59:7b:fb:e7:be: f7:60:cb:90:9f:d7:07:e9:b3:6a:04:05:9c:3a:cf: 78:f3:f1:ff:5e:e6:8b:be:97:50:ad:fb:7e:20:97: bf:9e:97:fe:3e:b3:45:9f:d8:ed:76:f5:59:ac:c6: 48:74:f6:cf:60:39:e5:d2:be:25:c1:8d:e7:b1:06: f2:02:ca:e3:fe:de:2c:e4:48:91:0f:72:11:e1:76: ca:08:86:cf:03:97:fc:cf:a4:e8:77:e4:6b:5c:3f: ae:1a:c1:57:5c:8d:76:dc:7d:18:65:2f:7d:2b:ea: 1d:23:d2:c8:75:b4:cb:17:4e:c4:88:3b:b3:4a:0a: 25:4c:16:ae:12:5a:49:b9:df:3a:16:69:bc:03:6e: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:68:23:B5:CC:9F:67:90:02:FA:68:8F:36:0C:CC:85:00:33:E3 X509v3 Authority Key Identifier: keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:36:1e:b0:9d:32:65:7b:d1:8f:c7:76:bd:91:d2:13:ea:82: b4:6e:6d:3e:6a:1e:75:35:67:9c:ab:fc:39:31:46:69:b7:ce: b9:82:b6:45:0b:b1:73:e6:18:b9:db:f6:70:3d:dc:66:d5:65: 7d:44:97:38:a1:0a:0a:be:02:cf:a8:ca:1a:5b:ee:24:95:d4: 9d:77:83:c9:01:c6:cc:8c:9f:60:60:68:b0:5c:af:07:fa:b0: 05:ad:a2:ee:cb:6c:00:b7:70:81:b7:1c:46:dd:2f:15:75:01: c4:f5:09:e1:69:ce:44:8d:35:e0:d4:99:8d:6b:fd:a5:e5:c9: ad:1e:88:7c:9c:b8:3f:bb:0d:7c:35:d7:a2:1f:fa:69:65:b0: 23:a3:90:83:b0:c2:0e:6a:4e:0f:c4:2e:f8:ae:23:ec:62:1c: 5b:d1:f6:02:39:29:7a:81:85:5e:2c:b8:cd:f3:06:ec:c8:df: f3:13:09:7f:d8:fd:36:a3:66:e8:ac:ee:a8:d5:66:d0:6e:b1: bc:57:3d:ea:cb:36:e7:1a:fb:1c:c9:31:1e:63:9e:d8:0f:70: d6:48:74:5c:bc:af:d9:66:55:d1:2e:2d:a1:c0:a1:00:55:e4: 3f:e7:18:14:d9:a1:a5:dd:28:ab:f4:29:ff:b8:bf:7e:08:18: f9:7e:b5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/ua8bsYMFnXXTwZojFPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNmVjOTI1OGVmZDAwMjkyMTc4ZmE4MWMyM2NkNzdjMDJh MWExMTAwHhcNMjUxMjMxMDYwMTA2WhcNMjYwMTAxMDYwMTA2WjAzMTEwLwYDVQQD EyhkMTVlNjgyM2I1Y2M5ZjY3OTAwMmZhNjg4ZjM2MGNjYzg1MDAzM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1698Z1epl7zqrpKk6Y8AMHfhgCY9 MDdrSs08xukIh57WnpEEz3bm/hggCy1mCO/Ac9mt++0yv8L+bDPbCdZsf21qNqz9 SzIBWmW7561j4QZIsCuHj/8+4DXW4N2+kYBjgWs1YTj0FFcK5kAVvRbfZbKjWXv7 5773YMuQn9cH6bNqBAWcOs948/H/XuaLvpdQrft+IJe/npf+PrNFn9jtdvVZrMZI dPbPYDnl0r4lwY3nsQbyAsrj/t4s5EiRD3IR4XbKCIbPA5f8z6Tod+RrXD+uGsFX XI123H0YZS99K+odI9LIdbTLF07EiDuzSgolTBauElpJud86Fmm8A26GTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFeaCO1zJ9nkAL6aI82DMyFADPjMB8GA1UdIwQY MBaAFG9uySWO/QApIXj6gcI813wCoaEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xNjBkODEtYzcyOC00NjJmLWFhMjYt YTE1OTM1MDY0YWRkLzEvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8xNjBkODEtYzcyOC00NjJmLWFhMjYtYTE1OTM1MDY0YWRk LzEvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjYesJ0y ZXvRj8d2vZHSE+qCtG5tPmoedTVnnKv8OTFGabfOuYK2RQuxc+YYudv2cD3cZtVl fUSXOKEKCr4Cz6jKGlvuJJXUnXeDyQHGzIyfYGBosFyvB/qwBa2i7stsALdwgbcc Rt0vFXUBxPUJ4WnORI014NSZjWv9peXJrR6IfJy4P7sNfDXXoh/6aWWwI6OQg7DC DmpOD8Qu+K4j7GIcW9H2AjkpeoGFXiy4zfMG7Mjf8xMJf9j9NqNm6KzuqNVm0G6x vFc96ss25xr7HMkxHmOe2A9w1kh0XLyv2WZV0S4tocChAFXkP+cYFNmhpd0oq/Qp /7i/fggY+X61uA== -----END CERTIFICATE-----Generated at Wed Dec 31 08:50:53 2025 by rpki-client