This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json) Hash identifier: XbF/am73PVqJzFZVtY1K7qlmaczOHg3MXqK72mM0Pv0= Subject key identifier: 46:3D:36:E0:7E:33:64:51:61:C6:CF:45:9B:51:75:C5:28:68:6C:A0 Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd Certificate serial: 019B243F38B420A6F1D67E90D4BE10ABA700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft Manifest number: 1200 Signing time: Mon 15 Dec 2025 23:01:21 +0000 Manifest this update: Mon 15 Dec 2025 23:01:21 +0000 Manifest next update: Tue 16 Dec 2025 23:01:21 +0000 Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: ei1rXsQHWUuEruoPS/I7vxf8agn0j078TF25YEHuYZI=) 2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:38:b4:20:a6:f1:d6:7e:90:d4:be:10:ab:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd Validity Not Before: Dec 15 23:01:21 2025 GMT Not After : Dec 16 23:01:21 2025 GMT Subject: CN=463d36e07e33645161c6cf459b5175c528686ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:a3:6c:25:94:c0:c5:75:a7:f0:89:db:16: 56:97:d7:8b:bc:41:e9:09:04:48:0a:ef:83:0e:d6: 97:6f:e8:4e:7b:32:33:58:f5:13:ba:d1:73:78:36: b4:e8:fa:b4:95:66:2d:0c:6d:a2:07:69:78:eb:1f: 7c:d2:e4:7a:32:b5:1b:f7:d5:dd:51:bc:00:d1:b3: 60:40:47:44:3c:b0:ee:8b:4e:e0:72:1e:d1:f2:f3: fc:a1:cf:7a:61:b6:88:88:7a:1a:b5:9d:13:5a:af: d2:17:8d:ea:64:29:92:e8:f6:c6:c4:de:0d:ed:8c: c1:f3:cc:1b:46:4e:83:31:fb:39:40:8f:b3:54:96: 03:0b:59:ab:7a:66:23:84:76:ac:8c:ea:f1:0a:8c: dd:83:d0:37:2f:c3:f5:f8:ab:95:c6:43:30:af:69: 63:75:e4:da:c9:d4:dd:4b:7d:25:20:bb:34:8d:0f: 57:43:a4:13:f7:39:f9:71:74:89:22:92:07:a2:af: 86:c1:15:f7:42:44:3e:09:c1:02:13:dd:ac:92:d4: 0a:bd:0b:7b:5a:cf:7c:e5:38:ca:82:e8:6e:99:28: 5f:cc:58:14:06:9f:f1:2b:7d:02:2e:98:25:b3:61: 98:b2:b7:0c:58:7f:23:39:8a:f8:f6:26:9b:97:e3: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3D:36:E0:7E:33:64:51:61:C6:CF:45:9B:51:75:C5:28:68:6C:A0 X509v3 Authority Key Identifier: keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:48:b4:61:08:10:96:f0:4a:53:21:48:af:9a:93:d6:48:68: 2d:71:1b:ff:1a:08:6c:04:d6:c4:7f:b7:e1:5e:50:da:7b:f6: 2f:1f:84:78:41:70:f4:55:bc:a3:34:92:09:dc:f0:e6:c8:46: 69:41:bc:ab:54:55:20:cf:21:57:b8:92:10:03:bc:f4:34:1d: dd:ad:30:df:43:80:26:86:6e:58:19:98:83:61:ec:8e:f0:3a: e1:b5:75:8a:38:df:ac:e0:f2:2c:29:bc:9d:9f:99:2c:12:eb: 5b:b0:8d:04:3f:ef:22:9a:9c:a3:16:26:64:76:d7:92:47:c6: 8f:a9:cc:c9:13:e1:88:df:9e:1d:93:83:9e:62:a3:68:15:93: ce:6e:3e:58:1c:11:34:ef:e0:f6:1e:88:ae:db:f8:9c:34:b8: d8:17:52:0b:17:52:71:30:5c:4e:7b:33:81:22:96:93:a1:b1: df:54:fb:42:02:32:a8:00:6c:52:98:d9:78:76:a2:53:07:75: 88:33:42:d0:ac:aa:21:c3:66:d4:36:17:a7:e0:d6:b8:95:59: b9:dc:b9:48:05:06:82:a7:8e:2a:e6:1c:8d:c9:b3:29:ba:a7: 52:06:f2:ec:01:23:a9:23:8a:e8:96:26:7e:7b:f7:32:4b:40: 10:5c:83:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPzi0IKbx1n6Q1L4Qq6cAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl YjEwZmQwHhcNMjUxMjE1MjMwMTIxWhcNMjUxMjE2MjMwMTIxWjAzMTEwLwYDVQQD Eyg0NjNkMzZlMDdlMzM2NDUxNjFjNmNmNDU5YjUxNzVjNTI4Njg2Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj+jbCWUwMV1p/CJ2xZWl9eLvEHp CQRICu+DDtaXb+hOezIzWPUTutFzeDa06Pq0lWYtDG2iB2l46x980uR6MrUb99Xd UbwA0bNgQEdEPLDui07gch7R8vP8oc96YbaIiHoatZ0TWq/SF43qZCmS6PbGxN4N 7YzB88wbRk6DMfs5QI+zVJYDC1mremYjhHasjOrxCozdg9A3L8P1+KuVxkMwr2lj deTaydTdS30lILs0jQ9XQ6QT9zn5cXSJIpIHoq+GwRX3QkQ+CcECE92sktQKvQt7 Ws985TjKguhumShfzFgUBp/xK30CLpgls2GYsrcMWH8jOYr49iabl+N2OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY9NuB+M2RRYcbPRZtRdcUoaGygMB8GA1UdIwQY MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUi0YQgQ lvBKUyFIr5qT1khoLXEb/xoIbATWxH+34V5Q2nv2Lx+EeEFw9FW8ozSSCdzw5shG aUG8q1RVIM8hV7iSEAO89DQd3a0w30OAJoZuWBmYg2HsjvA64bV1ijjfrODyLCm8 nZ+ZLBLrW7CNBD/vIpqcoxYmZHbXkkfGj6nMyRPhiN+eHZODnmKjaBWTzm4+WBwR NO/g9h6Irtv4nDS42BdSCxdScTBcTnszgSKWk6Gx31T7QgIyqABsUpjZeHaiUwd1 iDNC0KyqIcNm1DYXp+DWuJVZudy5SAUGgqeOKuYcjcmzKbqnUgby7AEjqSOK6JYm fnv3MktAEFyD7A== -----END CERTIFICATE-----Generated at Tue Dec 16 09:01:29 2025 by rpki-client