This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft File: 27m8LeNs8jtonzxy6Aq8_kggJsE.mft (raw, json) Hash identifier: lxSA2MwzuQLX0aAZ+DNcxJ9tunvDoAqQOJvPTxayTp8= Subject key identifier: 78:4F:98:43:2B:D0:A5:48:19:68:DA:5F:17:F6:60:C3:F0:E9:13:01 Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1 Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1 Certificate serial: 019B37580D2376AD692C7B55A1050D9DC09B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft Manifest number: 1331 Signing time: Fri 19 Dec 2025 16:01:15 +0000 Manifest this update: Fri 19 Dec 2025 16:01:15 +0000 Manifest next update: Sat 20 Dec 2025 16:01:15 +0000 Files and hashes: 1: 27m8LeNs8jtonzxy6Aq8_kggJsE.crl (hash: cu2vczBDMTkBeJJhujoEDICSo3/Eq9qnx5mYf/uMcEs=) 2: ClhEwRnDYw2TQH3RNosMAuvSTaM.roa (hash: zVMUBbJ0ZW19QPyVy2U8+UbE5LuoimUH2oM9U+S3avI=) 3: EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa (hash: rlcHKNxqzbJZK9gtci2o/2aqsd2FZRiITmisyzoxH20=) 4: Tcdkc_pLid4bj31FVcmiyvaPqWk.roa (hash: GaSdD3u1V54qfiVL17STtf24nCmyDEzVmYt0IeL8i0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:0d:23:76:ad:69:2c:7b:55:a1:05:0d:9d:c0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1 Validity Not Before: Dec 19 16:01:15 2025 GMT Not After : Dec 20 16:01:15 2025 GMT Subject: CN=784f98432bd0a5481968da5f17f660c3f0e91301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:dd:75:5d:99:1b:0a:53:d9:95:a1:3b:d0: ee:ab:6b:77:a5:8d:59:04:5a:fc:5f:4d:94:e9:c6: c2:8d:04:fd:e7:50:c7:2e:38:20:dc:a4:c7:3f:f9: 21:20:b9:b0:26:9b:bf:00:c5:33:76:22:b9:8c:61: 94:ed:9c:18:88:49:96:93:2e:39:21:6d:a0:ae:8d: 5b:dd:8f:4f:0c:35:7b:be:75:bd:f1:8e:e3:1f:08: fd:f4:8e:3f:31:18:57:18:2c:a3:db:02:46:60:61: 4f:8c:f8:42:d8:82:1b:0c:04:4f:c4:8f:5f:52:b1: 7a:da:7e:12:03:20:46:33:f5:50:f8:af:74:35:5b: 48:f1:3c:e2:c9:39:da:a7:e0:7f:cb:0f:22:17:4e: 65:b4:fc:b3:9c:86:5e:c6:ca:ed:79:2e:3c:26:03: d4:f3:50:e1:7e:38:be:a2:3a:b6:51:25:58:e5:ea: aa:0f:80:aa:8f:f3:40:8d:9d:52:df:82:f9:75:b9: 19:5c:c0:72:79:3d:a2:44:ec:4b:8d:4d:a4:68:25: fa:c7:b6:37:11:ce:00:ed:c8:38:db:3a:9b:89:fa: 60:e3:44:6a:36:68:e7:9a:e0:ba:17:f9:54:f0:71: 1e:87:11:78:8c:7a:1f:a0:07:e1:a3:7d:ee:e1:34: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4F:98:43:2B:D0:A5:48:19:68:DA:5F:17:F6:60:C3:F0:E9:13:01 X509v3 Authority Key Identifier: keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b9:c1:f0:00:f5:59:6a:e6:43:62:9c:a9:7b:df:14:f6:d7: c6:e2:30:48:42:92:d5:a9:c7:0a:32:d5:8f:b7:91:46:95:08: a5:14:29:00:90:ae:a7:0a:4c:e0:30:aa:22:e2:db:29:9f:c7: a7:90:9a:e0:7d:6f:37:67:d2:6f:dd:28:a9:ab:92:85:78:44: 00:3b:58:b4:c6:0f:48:e7:1c:c7:f9:40:f3:9f:cd:f8:73:94: 04:92:ff:00:fb:2b:79:51:66:0b:20:39:14:0d:a4:02:ac:cc: 7f:3d:ce:ec:a7:4a:90:21:39:b1:84:5b:01:bb:4d:89:1b:e0: 60:cf:af:b2:c8:b6:90:f6:ea:a9:75:cf:20:a2:97:b0:87:af: 62:7d:44:a3:b1:b8:a8:22:1e:3d:63:43:06:6d:3d:98:d1:45: 4b:75:43:df:15:c4:6a:de:5d:28:85:33:69:5c:a9:2b:a4:3d: 4e:c5:fc:46:06:e8:19:a9:2a:dc:66:8d:a9:6d:c3:64:36:d5: dd:75:7a:ad:81:08:55:4a:37:d7:c4:ef:83:84:57:3a:8d:10: ef:2b:96:8f:58:07:43:85:96:62:d5:f4:ab:5b:75:c3:07:23: 8a:21:5d:d5:ca:11:59:9d:55:df:80:32:34:f7:d7:0f:a3:a7: da:d9:e0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WA0jdq1pLHtVoQUNncCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjliYzJkZTM2Y2YyM2I2ODlmM2M3MmU4MGFiY2ZlNDgy MDI2YzEwHhcNMjUxMjE5MTYwMTE1WhcNMjUxMjIwMTYwMTE1WjAzMTEwLwYDVQQD Eyg3ODRmOTg0MzJiZDBhNTQ4MTk2OGRhNWYxN2Y2NjBjM2YwZTkxMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwinddV2ZGwpT2ZWhO9Duq2t3pY1Z BFr8X02U6cbCjQT951DHLjgg3KTHP/khILmwJpu/AMUzdiK5jGGU7ZwYiEmWky45 IW2gro1b3Y9PDDV7vnW98Y7jHwj99I4/MRhXGCyj2wJGYGFPjPhC2IIbDARPxI9f UrF62n4SAyBGM/VQ+K90NVtI8TziyTnap+B/yw8iF05ltPyznIZexsrteS48JgPU 81Dhfji+ojq2USVY5eqqD4Cqj/NAjZ1S34L5dbkZXMByeT2iROxLjU2kaCX6x7Y3 Ec4A7cg42zqbifpg40RqNmjnmuC6F/lU8HEehxF4jHofoAfho33u4TQ0yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhPmEMr0KVIGWjaXxf2YMPw6RMBMB8GA1UdIwQY MBaAFNu5vC3jbPI7aJ88cugKvP5IICbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtOExlTnM4anRvbnp4eTZBcThfa2dnSnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYmMyZTQtNDAyZi00N2MxLTliMjgt MTRmMjFhZTIxZWQzLzEvMjdtOExlTnM4anRvbnp4eTZBcThfa2dnSnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lYmMyZTQtNDAyZi00N2MxLTliMjgtMTRmMjFhZTIxZWQz LzEvMjdtOExlTnM4anRvbnp4eTZBcThfa2dnSnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbnB8AD1 WWrmQ2KcqXvfFPbXxuIwSEKS1anHCjLVj7eRRpUIpRQpAJCupwpM4DCqIuLbKZ/H p5Ca4H1vN2fSb90oqauShXhEADtYtMYPSOccx/lA85/N+HOUBJL/APsreVFmCyA5 FA2kAqzMfz3O7KdKkCE5sYRbAbtNiRvgYM+vssi2kPbqqXXPIKKXsIevYn1Eo7G4 qCIePWNDBm09mNFFS3VD3xXEat5dKIUzaVypK6Q9TsX8RgboGakq3GaNqW3DZDbV 3XV6rYEIVUo318Tvg4RXOo0Q7yuWj1gHQ4WWYtX0q1t1wwcjiiFd1coRWZ1V34Ay NPfXD6On2tnghQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:27:40 2025 by rpki-client