This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json) Hash identifier: ZQ9a+ObR1F3132nDlbHcrpYqqc5y50K0jWku7vyZQYw= Subject key identifier: 40:D3:6F:16:1A:EF:80:BC:9A:33:DE:29:41:F1:90:A4:C6:EC:03:59 Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd Certificate serial: 019B2FD58EC70A9B46D11218ED6DF4A3CEC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft Manifest number: 1206 Signing time: Thu 18 Dec 2025 05:01:23 +0000 Manifest this update: Thu 18 Dec 2025 05:01:23 +0000 Manifest next update: Fri 19 Dec 2025 05:01:23 +0000 Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: vK5BKdfdL6lryhQEbqn40YmookURQHV38hS4Y+AOG7c=) 2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:8e:c7:0a:9b:46:d1:12:18:ed:6d:f4:a3:ce:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd Validity Not Before: Dec 18 05:01:23 2025 GMT Not After : Dec 19 05:01:23 2025 GMT Subject: CN=40d36f161aef80bc9a33de2941f190a4c6ec0359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:60:51:64:4b:62:4b:6d:94:82:00:b0:a6: 67:ea:25:79:2e:52:ff:be:2f:34:f4:5c:2c:93:64: ad:f9:4c:84:13:2b:a4:6d:a3:97:61:08:e3:7a:67: db:36:44:80:f8:12:2f:ce:23:3e:c9:b9:03:51:e9: 1a:fa:f4:97:55:dd:99:b6:70:9b:0a:f5:c7:75:9c: 7c:6c:54:37:2a:05:b9:e9:19:9c:50:82:ac:f0:7b: fb:f1:95:60:d9:29:1f:69:77:bd:39:cf:16:8b:b1: c8:fb:6f:b6:94:08:9e:18:9c:f2:e8:1e:1f:a4:2d: 40:90:41:56:28:74:34:4a:2d:f8:36:8e:ca:cd:29: ef:80:28:7c:20:cd:87:de:3e:69:28:93:b1:af:96: e2:3b:9b:93:23:1a:3c:58:8e:5c:ff:c3:50:20:c6: e5:16:ee:55:59:58:f2:0a:14:8a:97:ee:60:0e:ce: 8a:de:f9:32:a5:ab:e0:e1:f7:47:9b:c0:ab:b0:2d: da:c2:5c:0c:da:60:7f:7e:6a:a9:68:e2:af:18:b3: 52:ac:ed:bf:9a:d2:7b:5f:43:ab:3c:98:d6:32:aa: f7:8a:4c:c9:04:fa:72:41:54:dc:92:15:bb:63:b3: 9d:72:7d:a3:83:92:e0:4b:fe:de:44:47:1e:ae:87: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D3:6F:16:1A:EF:80:BC:9A:33:DE:29:41:F1:90:A4:C6:EC:03:59 X509v3 Authority Key Identifier: keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:48:e2:57:37:4f:19:e9:54:03:6a:f8:97:49:3b:65:70:d9: a8:c5:c9:c1:88:8f:fc:71:2a:7b:4e:0d:d5:30:f2:a3:f1:87: 66:3b:3e:2a:45:8d:4d:1a:e2:48:fb:60:7d:1c:78:bd:7f:49: 68:de:5d:7c:84:ee:53:20:fb:74:40:50:e8:a6:25:5f:e9:2a: fa:78:21:21:27:20:e8:2f:be:bc:1a:dd:17:65:33:57:f6:00: 36:a9:e0:4b:9c:af:c6:78:6a:dc:ac:a1:bc:36:4c:db:d3:67: 9b:9c:a2:86:84:07:a3:e7:50:3e:b8:7f:83:49:5d:74:49:3d: 7c:51:0d:d6:b9:3a:15:82:35:78:fa:f7:dc:a4:0e:73:6b:06: c5:62:c4:bf:6f:a9:65:c9:9e:79:a5:2c:38:ae:fc:4e:f0:d7: c4:04:73:ce:48:c3:c2:5a:95:37:45:f6:77:34:00:d2:cc:11: 13:f8:d2:d7:92:35:65:2c:74:39:b4:94:22:bb:a9:5e:e2:8a: 5d:7b:14:e8:08:be:19:29:8b:a8:6f:67:5c:eb:29:bc:bd:0b: 50:95:af:fc:1d:6a:54:b1:41:db:c4:6d:08:bc:da:64:ba:62: 76:65:51:ba:97:f0:90:19:f5:30:9f:83:4f:30:75:ee:32:f8: 3b:1d:42:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1Y7HCptG0RIY7W30o87HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl YjEwZmQwHhcNMjUxMjE4MDUwMTIzWhcNMjUxMjE5MDUwMTIzWjAzMTEwLwYDVQQD Eyg0MGQzNmYxNjFhZWY4MGJjOWEzM2RlMjk0MWYxOTBhNGM2ZWMwMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1gUWRLYkttlIIAsKZn6iV5LlL/ vi809Fwsk2St+UyEEyukbaOXYQjjemfbNkSA+BIvziM+ybkDUeka+vSXVd2ZtnCb CvXHdZx8bFQ3KgW56RmcUIKs8Hv78ZVg2SkfaXe9Oc8Wi7HI+2+2lAieGJzy6B4f pC1AkEFWKHQ0Si34No7KzSnvgCh8IM2H3j5pKJOxr5biO5uTIxo8WI5c/8NQIMbl Fu5VWVjyChSKl+5gDs6K3vkypavg4fdHm8CrsC3awlwM2mB/fmqpaOKvGLNSrO2/ mtJ7X0OrPJjWMqr3ikzJBPpyQVTckhW7Y7Odcn2jg5LgS/7eREcerocBWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDTbxYa74C8mjPeKUHxkKTG7ANZMB8GA1UdIwQY MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0jiVzdP GelUA2r4l0k7ZXDZqMXJwYiP/HEqe04N1TDyo/GHZjs+KkWNTRriSPtgfRx4vX9J aN5dfITuUyD7dEBQ6KYlX+kq+nghIScg6C++vBrdF2UzV/YANqngS5yvxnhq3Kyh vDZM29Nnm5yihoQHo+dQPrh/g0lddEk9fFEN1rk6FYI1ePr33KQOc2sGxWLEv2+p ZcmeeaUsOK78TvDXxARzzkjDwlqVN0X2dzQA0swRE/jS15I1ZSx0ObSUIrupXuKK XXsU6Ai+GSmLqG9nXOspvL0LUJWv/B1qVLFB28RtCLzaZLpidmVRupfwkBn1MJ+D TzB17jL4Ox1CfA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:19 2025 by rpki-client