This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json) Hash identifier: m+YgLDLwY1sVBKt/WrPNGuEo9mn0rlbO7lRn+hFZ4gc= Subject key identifier: A0:5F:05:AD:DD:F9:DF:7F:DE:18:2F:0C:32:D7:23:50:76:37:95:61 Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd Certificate serial: 019C1FF20473E7AABB1CEEC049AF78B6069E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft Manifest number: 1283 Signing time: Mon 02 Feb 2026 20:01:20 +0000 Manifest this update: Mon 02 Feb 2026 20:01:20 +0000 Manifest next update: Tue 03 Feb 2026 20:01:20 +0000 Files and hashes: 1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=) 2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: QQfPeAYF8uRe9ofUZ8f9dPmKa1CHReXBBJQ7bzjqRac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:f2:04:73:e7:aa:bb:1c:ee:c0:49:af:78:b6:06:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd Validity Not Before: Feb 2 20:01:20 2026 GMT Not After : Feb 3 20:01:20 2026 GMT Subject: CN=a05f05adddf9df7fde182f0c32d7235076379561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:0d:5c:e9:72:31:bf:e2:90:a9:fe:a4:5e: 51:be:4d:e0:d9:11:24:cc:d3:e7:1f:aa:e7:77:d4: ef:d6:d8:6d:17:a7:26:2c:d6:e1:4f:65:78:0e:47: 08:d3:18:12:e6:d0:fd:e3:6b:a7:ac:f1:40:52:82: 89:08:e6:b8:f0:0d:e1:95:84:8e:7c:2c:d5:ec:81: dc:d0:3b:28:5b:74:07:3b:2f:e4:84:4f:3b:25:a9: a3:e0:63:48:66:4c:44:b6:ee:52:5a:45:2f:79:04: 24:5e:83:9b:d4:17:ee:67:f2:78:e6:c1:d7:ec:78: 7a:85:26:5d:f7:e7:4f:3c:6d:59:57:1d:c1:8b:29: f2:7d:e9:ad:66:34:c5:45:6a:cd:3e:7f:49:4c:58: f4:a3:fc:d8:49:3c:f8:01:7f:1f:fa:62:08:06:f5: e1:2a:88:7b:2a:4d:e5:e5:86:9c:2c:e5:de:b7:04: 8b:c3:cc:e0:56:64:cb:88:7e:48:8a:19:5e:5d:bd: e8:75:7d:23:c3:8d:87:73:97:4a:9f:34:53:d9:13: 5d:41:02:9c:05:d4:e7:cf:a4:fc:1f:ab:8b:c0:25: 39:20:bf:1a:e5:b3:bb:27:89:52:35:4e:7b:27:40: ce:a5:6f:40:3c:cc:d5:95:d5:b4:dd:06:03:51:3d: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5F:05:AD:DD:F9:DF:7F:DE:18:2F:0C:32:D7:23:50:76:37:95:61 X509v3 Authority Key Identifier: keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:26:b0:18:77:b1:ce:d2:95:6c:36:39:e7:e5:15:06:86:26: 28:51:e4:72:4f:ad:2e:27:63:c1:c2:dc:fc:44:5e:40:2f:a4: b3:88:25:3d:9c:72:27:8d:b5:ee:f0:b9:e9:0a:31:d1:11:e7: a3:7c:c9:7a:5a:3b:e6:d6:db:0f:be:05:00:2f:d4:1b:91:1d: 9a:a7:4c:05:ad:22:0f:85:11:31:1e:ba:02:d5:64:c9:a3:ad: 3d:dd:a3:d4:a9:5d:6c:35:7e:35:e3:be:3f:db:68:34:8a:1a: 7b:ff:5b:8e:ef:ff:9c:1e:b6:83:61:1b:b7:f2:86:4f:eb:12: 34:13:68:c7:cf:7c:d2:c8:30:2e:b3:42:8f:56:4f:88:8f:08: 65:80:5d:de:a4:c2:ab:cb:31:3e:af:9e:0b:87:63:ed:5c:e4: 3a:65:a5:b0:8a:25:0f:97:55:f7:62:e1:23:be:c9:9f:6c:03: de:fa:84:16:89:cc:19:97:4d:0c:b2:06:da:8f:9b:fd:f7:f2: 74:b4:eb:c5:69:a1:a7:0c:45:46:5f:bd:b9:06:2e:70:3c:e9: c0:ce:2c:72:a9:78:a6:7a:0e:3b:40:a1:8d:ad:fc:65:9b:c4: 3c:aa:b1:40:b0:c9:8d:13:cc:01:48:59:e6:e9:2e:0f:f1:98: 43:d9:97:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwf8gRz56q7HO7ASa94tgaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl YjEwZmQwHhcNMjYwMjAyMjAwMTIwWhcNMjYwMjAzMjAwMTIwWjAzMTEwLwYDVQQD EyhhMDVmMDVhZGRkZjlkZjdmZGUxODJmMGMzMmQ3MjM1MDc2Mzc5NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QsNXOlyMb/ikKn+pF5Rvk3g2REk zNPnH6rnd9Tv1thtF6cmLNbhT2V4DkcI0xgS5tD942unrPFAUoKJCOa48A3hlYSO fCzV7IHc0DsoW3QHOy/khE87Jamj4GNIZkxEtu5SWkUveQQkXoOb1BfuZ/J45sHX 7Hh6hSZd9+dPPG1ZVx3BiynyfemtZjTFRWrNPn9JTFj0o/zYSTz4AX8f+mIIBvXh Koh7Kk3l5YacLOXetwSLw8zgVmTLiH5IihleXb3odX0jw42Hc5dKnzRT2RNdQQKc BdTnz6T8H6uLwCU5IL8a5bO7J4lSNU57J0DOpW9APMzVldW03QYDUT1ioQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBfBa3d+d9/3hgvDDLXI1B2N5VhMB8GA1UdIwQY MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyawGHex ztKVbDY55+UVBoYmKFHkck+tLidjwcLc/EReQC+ks4glPZxyJ4217vC56Qox0RHn o3zJelo75tbbD74FAC/UG5EdmqdMBa0iD4URMR66AtVkyaOtPd2j1KldbDV+NeO+ P9toNIoae/9bju//nB62g2Ebt/KGT+sSNBNox8980sgwLrNCj1ZPiI8IZYBd3qTC q8sxPq+eC4dj7VzkOmWlsIolD5dV92LhI77Jn2wD3vqEFonMGZdNDLIG2o+b/ffy dLTrxWmhpwxFRl+9uQYucDzpwM4scql4pnoOO0Chja38ZZvEPKqxQLDJjRPMAUhZ 5ukuD/GYQ9mXXQ== -----END CERTIFICATE-----Generated at Tue Feb 3 01:54:29 2026 by rpki-client