This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json) Hash identifier: qukJiboVCRUKAGP2KRMAarUC8dUc9ExWoDC76uw3ckM= Subject key identifier: 8A:D3:9E:BF:B2:F5:AC:5B:A0:A8:E8:EA:65:2C:76:55:03:0E:4A:19 Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd Certificate serial: 019B3F4875E52ADD2C6F48A9CDE765B9D526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft Manifest number: 120E Signing time: Sun 21 Dec 2025 05:01:11 +0000 Manifest this update: Sun 21 Dec 2025 05:01:11 +0000 Manifest next update: Mon 22 Dec 2025 05:01:11 +0000 Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: eCJ+kylFtTTXLBBULzm3frCfW+XChEHN0yu4stgE7UM=) 2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:75:e5:2a:dd:2c:6f:48:a9:cd:e7:65:b9:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd Validity Not Before: Dec 21 05:01:11 2025 GMT Not After : Dec 22 05:01:11 2025 GMT Subject: CN=8ad39ebfb2f5ac5ba0a8e8ea652c7655030e4a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:de:4d:9d:2d:93:71:fe:13:7c:fd:7a:5f: 4a:b4:8f:42:ce:db:52:9b:39:a9:83:d3:ee:1c:f3: 6a:99:10:83:bd:c3:94:ad:0f:03:2d:1c:d7:fe:4b: 6d:ff:df:5c:3d:dc:2f:c5:95:46:a3:ac:23:a2:da: f5:c9:e8:79:37:03:05:e5:2e:22:0a:44:e0:e4:b4: 87:f7:6f:2c:ae:dc:e0:7c:17:c6:13:25:34:b3:89: 17:1d:a0:c3:b1:e3:06:63:92:66:b2:43:80:2c:d3: 8b:e4:88:94:64:48:4f:a9:da:66:60:29:bf:c8:92: a7:53:ba:70:78:67:b1:56:9d:d3:17:30:6f:e5:17: ad:2e:76:52:25:30:ad:1b:a8:35:d6:9d:a6:b4:8b: 1b:c1:83:1a:b2:86:04:c1:88:2b:5d:8f:5f:66:9f: 00:7b:d1:b8:76:ca:1c:e3:7b:93:81:48:61:8d:34: 2b:c3:7a:79:c7:32:00:72:70:eb:0a:9e:1c:61:23: 8a:a2:07:65:d6:08:ea:0f:a4:c9:5a:31:6d:00:0d: 7b:f1:8c:86:d9:6c:7d:b6:8e:30:4d:c1:fc:aa:ba: 13:27:29:17:00:2d:23:a1:cb:eb:d4:3f:76:07:0a: ac:5a:c2:9b:62:88:1e:48:b6:a7:2f:9f:26:8c:77: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D3:9E:BF:B2:F5:AC:5B:A0:A8:E8:EA:65:2C:76:55:03:0E:4A:19 X509v3 Authority Key Identifier: keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fe:8d:21:ab:0b:a2:2a:59:49:3b:6c:02:c8:d5:17:4a:f5: c0:c3:ad:1d:e8:8f:25:b2:78:1f:35:d2:4d:d4:67:37:fb:08: a8:bc:dc:2d:48:3b:a2:17:cc:50:2d:63:99:31:ea:16:db:b7: 24:3a:e0:73:87:e6:8f:97:6f:3f:57:76:f0:49:11:4e:2f:75: 70:8f:f6:37:b5:f7:42:c9:67:91:c3:6b:d0:f5:38:7b:e3:57: cb:2d:e4:be:90:a2:ef:05:71:87:23:93:3e:f6:88:46:42:8b: 4d:a3:05:ce:a8:78:ac:70:76:ca:1b:9a:86:d3:72:3c:e0:95: 31:97:69:10:6b:69:44:79:ee:5d:ff:dc:ab:51:b9:3d:8a:29: c7:bd:2a:90:ef:70:d3:aa:c9:46:e2:cc:28:71:86:d7:10:1d: 4f:dd:56:2f:d4:e5:f8:16:98:e5:47:0f:6b:29:ac:aa:56:96: e7:1d:c0:f3:e0:4c:d6:1c:7a:69:2b:fe:3d:8c:28:89:5a:19: 90:aa:e8:63:5c:3f:61:94:c3:ea:51:b3:4d:8f:8e:4e:8e:ed: 48:8d:c8:f6:6c:5c:57:bd:ac:5b:e8:d2:04:90:31:47:f1:d4: 5b:1b:f0:04:8e:ee:de:1a:ed:e6:9c:4e:cf:ab:1b:94:52:b2: 2a:c3:05:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SHXlKt0sb0ipzedludUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl YjEwZmQwHhcNMjUxMjIxMDUwMTExWhcNMjUxMjIyMDUwMTExWjAzMTEwLwYDVQQD Eyg4YWQzOWViZmIyZjVhYzViYTBhOGU4ZWE2NTJjNzY1NTAzMGU0YTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy3eTZ0tk3H+E3z9el9KtI9CzttS mzmpg9PuHPNqmRCDvcOUrQ8DLRzX/ktt/99cPdwvxZVGo6wjotr1yeh5NwMF5S4i CkTg5LSH928srtzgfBfGEyU0s4kXHaDDseMGY5JmskOALNOL5IiUZEhPqdpmYCm/ yJKnU7pweGexVp3TFzBv5RetLnZSJTCtG6g11p2mtIsbwYMasoYEwYgrXY9fZp8A e9G4dsoc43uTgUhhjTQrw3p5xzIAcnDrCp4cYSOKogdl1gjqD6TJWjFtAA178YyG 2Wx9to4wTcH8qroTJykXAC0jocvr1D92BwqsWsKbYogeSLanL58mjHeejwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrTnr+y9axboKjo6mUsdlUDDkoZMB8GA1UdIwQY MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv6NIasL oipZSTtsAsjVF0r1wMOtHeiPJbJ4HzXSTdRnN/sIqLzcLUg7ohfMUC1jmTHqFtu3 JDrgc4fmj5dvP1d28EkRTi91cI/2N7X3QslnkcNr0PU4e+NXyy3kvpCi7wVxhyOT PvaIRkKLTaMFzqh4rHB2yhuahtNyPOCVMZdpEGtpRHnuXf/cq1G5PYopx70qkO9w 06rJRuLMKHGG1xAdT91WL9Tl+BaY5UcPaymsqlaW5x3A8+BM1hx6aSv+PYwoiVoZ kKroY1w/YZTD6lGzTY+OTo7tSI3I9mxcV72sW+jSBJAxR/HUWxvwBI7u3hrt5pxO z6sblFKyKsMFcg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:22 2025 by rpki-client