This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft File: V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json) Hash identifier: R/FB4ikIEneqkGYn1Rs9gRyLl4Iaf4z8oV8TcMUrftY= Subject key identifier: 95:43:90:56:AB:86:8A:E7:4E:11:C3:21:B3:80:5D:B4:31:20:11:FE Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Certificate serial: 019B3D59EF4F1DDD0F8399511E6FEEADA503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft Manifest number: 117D Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: lZblz07JH/R6TfGYZhOUIp/X8MWPdipncZ9Pcr2rBH4=) 2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ef:4f:1d:dd:0f:83:99:51:1e:6f:ee:ad:a5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=95439056ab868ae74e11c321b3805db4312011fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:95:02:2a:60:8c:21:07:2f:16:5d:6a:82: 82:84:e9:5d:06:28:78:5e:3f:5e:4b:a5:f3:03:88: b4:08:2b:d6:d2:2b:63:8b:74:93:58:06:d4:33:d3: 72:05:72:a9:ce:3b:e2:2c:0a:f9:b6:66:78:cd:3f: 4d:88:cd:2a:d0:cd:97:8b:35:db:bb:36:36:1a:fd: da:18:57:2a:48:f6:69:b1:ef:d1:62:c8:7b:e5:71: 69:a1:46:db:78:4d:1a:f5:14:42:01:8e:40:ca:f2: 8e:6f:0f:fc:aa:be:a1:d6:d1:5f:f3:bc:6b:58:a5: 1b:43:9a:ea:90:98:a5:ba:2a:28:cd:64:c1:49:71: e2:ac:55:9a:4c:77:ca:11:61:9c:29:df:23:a5:8c: 7d:48:52:c4:83:1e:95:f8:eb:22:c2:7e:c2:b7:08: 71:2c:4e:0c:f9:ca:23:66:65:5b:c5:17:08:40:3b: f9:63:fe:ce:13:b9:3c:2c:7c:c0:e8:7d:8b:ee:62: 16:2c:6f:61:f5:f3:84:39:75:57:3e:b4:02:b9:c2: ef:06:4e:9f:43:c0:59:40:81:e4:86:08:f3:c3:38: 06:a2:a5:60:b8:6f:9d:94:44:5e:d3:37:b4:d6:a6: 1e:57:1e:ba:f7:f5:49:fc:04:06:82:dc:f8:52:be: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:43:90:56:AB:86:8A:E7:4E:11:C3:21:B3:80:5D:B4:31:20:11:FE X509v3 Authority Key Identifier: keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:93:bd:ce:d8:2f:81:ad:ae:01:c2:4c:6e:75:74:26:ee:37: 99:ce:5a:4e:91:67:d7:69:d8:be:40:91:8d:40:76:35:fa:c9: 32:6e:1e:2e:3e:47:5b:dc:d2:35:e0:3c:80:e5:11:83:5f:8f: 4a:6e:9f:5e:36:f4:58:f9:99:79:0d:ae:1c:ad:49:0b:52:ef: 12:13:d3:88:0f:64:17:3a:8b:e3:e3:9b:68:75:c3:cc:46:15: 47:e5:d0:42:98:5b:a7:10:8c:32:94:bb:ad:fb:76:f7:be:3a: 91:5d:30:b3:0e:9a:d4:ec:73:93:7f:7c:ca:86:1b:e5:fc:27: 57:99:ae:c6:92:78:c5:df:11:50:05:70:f0:91:19:83:9e:f3: 9a:c5:48:16:f8:72:58:80:92:53:5f:e8:ce:5d:bd:ea:fb:cd: 22:c1:f0:47:7f:ef:1f:df:8a:4f:9a:c2:cb:bf:ce:c6:9c:e7: db:eb:d4:db:42:3e:79:c7:f8:cb:b1:02:c1:23:88:72:02:50: ec:bf:b1:da:0c:ef:5c:0c:30:72:f8:4f:56:b1:05:db:9c:13: f8:4d:6a:ce:97:f7:a4:90:ca:3b:00:34:2b:35:cd:ed:2c:62: 93:db:c1:03:b7:b8:fa:12:b4:c7:0a:14:04:27:ec:f6:e8:fe: bd:5f:4f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9We9PHd0Pg5lRHm/uraUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmVlMDJhYzYwNWYwYmI5OGJiY2Q2MzdhOWFkZmFlNDgz YTZlODQwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD Eyg5NTQzOTA1NmFiODY4YWU3NGUxMWMzMjFiMzgwNWRiNDMxMjAxMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5WVAipgjCEHLxZdaoKChOldBih4 Xj9eS6XzA4i0CCvW0itji3STWAbUM9NyBXKpzjviLAr5tmZ4zT9NiM0q0M2XizXb uzY2Gv3aGFcqSPZpse/RYsh75XFpoUbbeE0a9RRCAY5AyvKObw/8qr6h1tFf87xr WKUbQ5rqkJiluioozWTBSXHirFWaTHfKEWGcKd8jpYx9SFLEgx6V+Osiwn7Ctwhx LE4M+cojZmVbxRcIQDv5Y/7OE7k8LHzA6H2L7mIWLG9h9fOEOXVXPrQCucLvBk6f Q8BZQIHkhgjzwzgGoqVguG+dlERe0ze01qYeVx669/VJ/AQGgtz4Ur5SvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVDkFarhornThHDIbOAXbQxIBH+MB8GA1UdIwQY MBaAFFdu4CrGBfC7mLvNY3qa365IOm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEt YjA4OWQxOGZjMDliLzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEtYjA4OWQxOGZjMDli LzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJO9ztgv ga2uAcJMbnV0Ju43mc5aTpFn12nYvkCRjUB2NfrJMm4eLj5HW9zSNeA8gOURg1+P Sm6fXjb0WPmZeQ2uHK1JC1LvEhPTiA9kFzqL4+ObaHXDzEYVR+XQQphbpxCMMpS7 rft29746kV0wsw6a1Oxzk398yoYb5fwnV5muxpJ4xd8RUAVw8JEZg57zmsVIFvhy WICSU1/ozl296vvNIsHwR3/vH9+KT5rCy7/Oxpzn2+vU20I+ecf4y7ECwSOIcgJQ 7L+x2gzvXAwwcvhPVrEF25wT+E1qzpf3pJDKOwA0KzXN7Sxik9vBA7e4+hK0xwoU BCfs9uj+vV9PLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:29:53 2025 by rpki-client