This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json) Hash identifier: m4upbwrFdUfh1FL0FiQPNL787OEyh/xh5hMriIZKoYs= Subject key identifier: 03:B5:83:B4:5A:FB:6B:18:07:EF:BC:2A:66:2D:49:C2:2C:E5:E7:C6 Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d Certificate serial: 019B3F7F5BEA762E20CA387A9319CA671BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:01:09 +0000 Manifest this update: Sun 21 Dec 2025 06:01:09 +0000 Manifest next update: Mon 22 Dec 2025 06:01:09 +0000 Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: sYvbri2SSbw/R4ozmuM3Kg5TpOgh+Vxjn9ako4/pfXo=) 2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:5b:ea:76:2e:20:ca:38:7a:93:19:ca:67:1b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d Validity Not Before: Dec 21 06:01:09 2025 GMT Not After : Dec 22 06:01:09 2025 GMT Subject: CN=03b583b45afb6b1807efbc2a662d49c22ce5e7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:4a:a4:f6:a0:d6:6f:a7:3b:44:a6:33:78: 77:ef:b4:8d:27:74:4d:47:5e:e1:cb:38:4a:e0:98: 4f:e1:e4:ca:ca:65:52:06:1a:e4:a2:4f:ae:0c:86: 3f:02:85:0a:93:6f:c3:c4:89:da:9d:46:87:56:b7: a1:6d:1e:2f:ed:84:cc:46:d0:1f:10:6f:c8:3f:75: d4:f0:eb:32:52:a4:2a:38:f8:75:64:4f:9c:94:f3: 6a:4a:1a:62:2b:61:a3:41:72:d3:3c:0a:af:3e:0a: 64:4b:d1:b5:0d:bd:ca:1e:cb:96:7c:03:2c:15:b3: 78:49:de:29:b4:71:b5:b2:50:a1:bb:fb:80:e8:48: 3e:48:98:55:7a:58:b7:54:bc:64:f1:f5:50:c7:7a: 4b:ea:8d:17:8d:60:11:5c:68:fb:fb:ec:78:31:6f: be:d8:12:9b:61:3e:e6:95:fa:8c:21:e8:7e:f3:1d: f5:3f:ab:45:f1:58:cb:a8:34:e5:44:97:e5:4e:8c: bb:39:d4:43:b4:3a:d7:b1:67:2c:3b:81:90:cf:30: 36:56:d8:94:b5:78:4d:95:84:ee:d8:70:ad:f7:80: 85:b7:f0:dc:9e:7e:e4:92:aa:21:1c:d4:4d:02:14: f0:13:db:5d:e9:10:a6:1f:78:0d:9d:56:09:3a:da: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B5:83:B4:5A:FB:6B:18:07:EF:BC:2A:66:2D:49:C2:2C:E5:E7:C6 X509v3 Authority Key Identifier: keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:af:bf:d7:87:17:c8:f4:c3:25:db:ed:c8:34:f7:d7:29:ef: 85:5a:21:5c:c6:f9:50:67:7c:dd:f4:6b:34:40:af:c1:77:29: fd:68:2b:4f:ae:7a:f9:01:f0:44:db:3d:e4:93:6c:5a:e6:3f: 57:a9:e5:61:fd:26:74:78:ba:65:e4:0d:9d:ed:ab:3b:8f:32: 17:1b:ac:85:3b:e6:aa:ea:6f:87:2b:ab:4c:9a:92:fa:47:4e: b5:ae:69:33:9e:98:05:02:d1:b5:2b:ad:76:29:2b:b3:74:cb: 34:83:4d:6d:1f:04:bc:25:4e:c6:2d:d7:58:ac:08:1e:09:bc: 5e:01:9c:7c:25:51:14:08:58:be:f4:21:78:c3:93:03:30:12: 1b:ca:db:19:99:d2:d7:ac:02:de:cf:ca:c5:d0:43:04:c6:03: b3:30:8f:29:47:5e:57:08:f2:87:9f:da:d0:94:76:e4:9b:c2: 3f:75:33:ff:c4:ed:9c:0a:ad:de:69:be:94:63:65:8e:52:57: ca:b0:3b:f2:69:d6:1d:96:5a:a7:80:54:7a:67:29:dc:dc:51: 4a:da:7f:2d:51:33:fc:f1:b7:0b:c6:00:0d:8a:03:49:b5:87: f0:a3:7f:00:b5:6e:77:1d:8f:3d:9e:90:c1:1b:e4:72:ac:c5: 2b:44:ce:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f1vqdi4gyjh6kxnKZxvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0 YTQ5MGQwHhcNMjUxMjIxMDYwMTA5WhcNMjUxMjIyMDYwMTA5WjAzMTEwLwYDVQQD EygwM2I1ODNiNDVhZmI2YjE4MDdlZmJjMmE2NjJkNDljMjJjZTVlN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRZKpPag1m+nO0SmM3h377SNJ3RN R17hyzhK4JhP4eTKymVSBhrkok+uDIY/AoUKk2/DxInanUaHVrehbR4v7YTMRtAf EG/IP3XU8OsyUqQqOPh1ZE+clPNqShpiK2GjQXLTPAqvPgpkS9G1Db3KHsuWfAMs FbN4Sd4ptHG1slChu/uA6Eg+SJhVeli3VLxk8fVQx3pL6o0XjWARXGj7++x4MW++ 2BKbYT7mlfqMIeh+8x31P6tF8VjLqDTlRJflToy7OdRDtDrXsWcsO4GQzzA2VtiU tXhNlYTu2HCt94CFt/Dcnn7kkqohHNRNAhTwE9td6RCmH3gNnVYJOtpqCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO1g7Ra+2sYB++8KmYtScIs5efGMB8GA1UdIwQY MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt Nzk4YWI3NzNlYWZhLzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK+/14cX yPTDJdvtyDT31ynvhVohXMb5UGd83fRrNECvwXcp/WgrT656+QHwRNs95JNsWuY/ V6nlYf0mdHi6ZeQNne2rO48yFxushTvmqupvhyurTJqS+kdOta5pM56YBQLRtSut dikrs3TLNINNbR8EvCVOxi3XWKwIHgm8XgGcfCVRFAhYvvQheMOTAzASG8rbGZnS 16wC3s/KxdBDBMYDszCPKUdeVwjyh5/a0JR25JvCP3Uz/8TtnAqt3mm+lGNljlJX yrA78mnWHZZap4BUemcp3NxRStp/LVEz/PG3C8YADYoDSbWH8KN/ALVudx2PPZ6Q wRvkcqzFK0TOkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:43 2025 by rpki-client