This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json) Hash identifier: /RnBnSW/pr4/Ng0+/PusUSCs/x1pSTan6iiaq6XhqpU= Subject key identifier: 65:4F:45:D5:E7:61:53:A7:97:18:88:DD:80:94:09:7A:D6:3F:40:44 Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd Certificate serial: 019B33B22A2473FA19005A7B6B6C69EFEB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft Manifest number: 1208 Signing time: Thu 18 Dec 2025 23:01:12 +0000 Manifest this update: Thu 18 Dec 2025 23:01:12 +0000 Manifest next update: Fri 19 Dec 2025 23:01:12 +0000 Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: 4LzWuSJoKt5S59cUiU1eHuwgK73ItWuNbGQijL2y0M8=) 2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:2a:24:73:fa:19:00:5a:7b:6b:6c:69:ef:eb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd Validity Not Before: Dec 18 23:01:12 2025 GMT Not After : Dec 19 23:01:12 2025 GMT Subject: CN=654f45d5e76153a7971888dd8094097ad63f4044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:9c:16:d8:ff:da:36:5f:b9:6d:fa:c8:81: 52:57:2f:22:25:1d:c1:a5:fc:62:02:df:45:a3:8e: 00:dc:f2:a6:40:f6:05:05:88:0a:a9:3e:24:29:7f: c1:40:72:0b:ad:9e:66:5a:06:80:d9:6a:1f:36:60: 92:87:6a:19:ce:9e:eb:fc:ef:89:15:cf:0b:69:7a: 54:54:a7:38:65:be:3c:c9:32:df:91:ee:f6:d9:83: 56:39:b4:a4:44:ad:d2:87:f5:29:4a:b4:a1:92:7f: c3:84:39:f8:bf:14:e3:b6:89:96:1f:3b:eb:6e:d8: f6:e4:a1:af:fd:fc:4f:2d:b8:41:99:db:79:34:cd: e2:50:6e:e1:55:23:83:f2:a1:92:55:6f:54:a0:0b: d1:be:93:a9:1d:72:42:86:54:81:76:53:94:47:9a: 8c:87:3f:73:cf:1c:31:b3:87:ef:79:76:e5:7d:9c: 66:de:0d:92:f3:e3:00:bb:04:8b:44:2c:9a:15:19: c2:66:cb:60:96:c7:b6:35:78:da:2b:8e:02:b1:3f: 3c:54:ff:f9:db:cc:f9:fa:11:03:4f:a1:b9:a9:a6: 01:d1:a3:c0:7c:f9:5c:64:68:03:45:c5:df:42:cb: d6:40:22:98:ac:bd:28:d1:d1:57:d8:db:76:8c:f2: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4F:45:D5:E7:61:53:A7:97:18:88:DD:80:94:09:7A:D6:3F:40:44 X509v3 Authority Key Identifier: keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:de:dc:60:57:ab:54:28:f4:c6:99:1e:7a:e9:64:32:64:39: cb:6f:8c:99:ce:1c:38:51:23:51:97:d6:d8:ab:c6:c9:86:b4: 5e:ee:bb:0f:07:67:6a:6d:39:67:82:5b:65:86:41:31:75:09: 75:65:d6:ef:52:ea:ab:b3:7b:c1:ea:e8:24:31:e5:11:47:c1: 58:f1:37:6a:db:bb:33:4b:d2:a7:7a:61:64:29:15:9b:7c:44: 55:4f:6b:90:4d:7e:05:f4:b7:0c:e3:95:a1:b1:43:a8:c6:a1: 22:59:28:b9:c9:0f:59:a8:67:8d:45:c3:8e:9d:f2:ca:48:b3: cc:54:c3:6f:00:9e:16:55:39:94:c4:b5:ae:e1:49:da:2b:64: 9c:10:cb:39:db:35:14:57:f9:67:f6:5b:d7:15:bf:56:84:8b: 5c:9a:e1:de:f4:79:91:6b:5c:63:eb:52:18:87:44:78:88:82: 88:03:21:f6:b6:e1:96:b4:39:02:60:01:c4:21:e1:cf:72:bd: ad:ae:7c:4a:f7:b2:70:c0:72:a0:c2:f9:52:42:c2:73:a2:89: e8:25:a4:2c:b9:04:dd:9d:e0:f4:65:30:14:ab:4c:09:40:ce: f6:bd:3c:c0:24:a6:f8:f0:35:d3:c3:c2:94:e8:4b:ea:e4:d2: 69:40:1a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsiokc/oZAFp7a2xp7+sIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl YjEwZmQwHhcNMjUxMjE4MjMwMTEyWhcNMjUxMjE5MjMwMTEyWjAzMTEwLwYDVQQD Eyg2NTRmNDVkNWU3NjE1M2E3OTcxODg4ZGQ4MDk0MDk3YWQ2M2Y0MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgmcFtj/2jZfuW36yIFSVy8iJR3B pfxiAt9Fo44A3PKmQPYFBYgKqT4kKX/BQHILrZ5mWgaA2WofNmCSh2oZzp7r/O+J Fc8LaXpUVKc4Zb48yTLfke722YNWObSkRK3Sh/UpSrShkn/DhDn4vxTjtomWHzvr btj25KGv/fxPLbhBmdt5NM3iUG7hVSOD8qGSVW9UoAvRvpOpHXJChlSBdlOUR5qM hz9zzxwxs4fveXblfZxm3g2S8+MAuwSLRCyaFRnCZstglse2NXjaK44CsT88VP/5 28z5+hEDT6G5qaYB0aPAfPlcZGgDRcXfQsvWQCKYrL0o0dFX2Nt2jPLQ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVPRdXnYVOnlxiI3YCUCXrWP0BEMB8GA1UdIwQY MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd7cYFer VCj0xpkeeulkMmQ5y2+Mmc4cOFEjUZfW2KvGyYa0Xu67Dwdnam05Z4JbZYZBMXUJ dWXW71Lqq7N7weroJDHlEUfBWPE3atu7M0vSp3phZCkVm3xEVU9rkE1+BfS3DOOV obFDqMahIlkouckPWahnjUXDjp3yykizzFTDbwCeFlU5lMS1ruFJ2itknBDLOds1 FFf5Z/Zb1xW/VoSLXJrh3vR5kWtcY+tSGIdEeIiCiAMh9rbhlrQ5AmABxCHhz3K9 ra58SveycMByoML5UkLCc6KJ6CWkLLkE3Z3g9GUwFKtMCUDO9r08wCSm+PA108PC lOhL6uTSaUAaLA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:48:56 2025 by rpki-client