This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft File: 27m8LeNs8jtonzxy6Aq8_kggJsE.mft (raw, json) Hash identifier: hdMlrbh/lmi28taytnJGXNPe78LBMH7E9jnPbuHWFMU= Subject key identifier: 59:09:D4:F6:64:35:60:69:9F:3C:0E:81:1D:52:2C:77:AE:64:5C:05 Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1 Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1 Certificate serial: 019B10B85D0E3217B6476641AC3D9A3A5FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft Manifest number: 131D Signing time: Fri 12 Dec 2025 04:01:16 +0000 Manifest this update: Fri 12 Dec 2025 04:01:16 +0000 Manifest next update: Sat 13 Dec 2025 04:01:16 +0000 Files and hashes: 1: 27m8LeNs8jtonzxy6Aq8_kggJsE.crl (hash: 3Hg2wI2yXloTir2Zlh/+8mGvp9drd1OX8jnAwDAlVD8=) 2: ClhEwRnDYw2TQH3RNosMAuvSTaM.roa (hash: zVMUBbJ0ZW19QPyVy2U8+UbE5LuoimUH2oM9U+S3avI=) 3: EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa (hash: rlcHKNxqzbJZK9gtci2o/2aqsd2FZRiITmisyzoxH20=) 4: Tcdkc_pLid4bj31FVcmiyvaPqWk.roa (hash: GaSdD3u1V54qfiVL17STtf24nCmyDEzVmYt0IeL8i0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:5d:0e:32:17:b6:47:66:41:ac:3d:9a:3a:5f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1 Validity Not Before: Dec 12 04:01:16 2025 GMT Not After : Dec 13 04:01:16 2025 GMT Subject: CN=5909d4f6643560699f3c0e811d522c77ae645c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:f9:e4:24:91:4f:26:ea:e7:58:87:09:30: a6:47:9c:91:d8:29:db:4f:fc:e0:86:58:ec:f8:e2: 5b:fb:af:86:33:a5:6e:6c:c0:5c:98:f0:24:dd:95: f1:37:d3:44:dc:18:f4:a1:da:7a:9c:cf:e5:21:8d: 1f:90:c9:c6:41:6b:b3:76:b3:3d:d4:d9:71:bb:dc: 9d:19:9a:d2:e5:b9:0e:84:18:2a:55:52:5b:43:c4: bb:c7:97:31:70:2e:cd:be:79:85:e5:c9:00:21:04: 79:9b:bd:76:c4:45:f6:9f:1b:c8:47:40:d2:45:09: df:23:79:2a:48:f3:3b:9f:a2:f0:88:e8:78:db:03: 3b:4c:1a:96:71:e4:98:3b:60:79:9a:bb:a8:f4:43: b5:8f:ad:dd:12:ed:7e:bf:15:e8:e3:b1:50:f5:d3: 84:40:98:bd:ed:e6:97:04:d9:15:db:e6:fb:20:37: 56:04:7d:ad:fa:eb:81:17:a4:e7:47:e1:0d:74:c6: 94:61:d2:9b:cd:f2:52:90:94:6d:08:8f:e5:47:9a: 77:cd:22:fb:b3:33:24:e9:ab:48:07:45:73:f4:09: e7:53:71:70:15:ed:e6:72:6a:60:95:2f:5e:6e:0d: 38:64:44:ea:6f:56:96:ce:df:ad:6c:c3:f1:46:9f: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:09:D4:F6:64:35:60:69:9F:3C:0E:81:1D:52:2C:77:AE:64:5C:05 X509v3 Authority Key Identifier: keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:47:86:3d:1b:22:41:6b:93:0b:7e:fa:ce:ad:4a:d2:2b:da: f3:1b:e2:30:c3:df:d9:0f:cf:93:cf:e0:63:2a:89:b6:d8:25: 33:2e:5b:0a:79:c5:f6:ce:0b:2c:95:a4:6a:2a:aa:90:29:3b: 10:ca:03:63:c1:54:a1:92:86:ea:06:f0:93:92:5c:dc:79:fe: a2:59:4d:b7:d9:33:38:84:6b:e7:2c:80:ae:9a:cd:f0:1c:2a: 03:2c:8e:05:bc:a8:ca:a1:2f:81:0b:0e:93:ee:8d:26:c8:6b: 14:3a:d0:9f:5c:7d:f6:b1:00:6e:e0:e8:93:85:2a:ad:0a:a1: be:bb:85:fb:ce:25:d2:dc:4a:c1:f2:b3:b3:5b:38:14:eb:f0: ce:11:e7:2a:32:f4:36:8d:69:8c:1b:f2:18:55:3e:04:ee:c4: ee:cc:0a:3b:e9:a9:9f:5a:7e:7d:05:40:0a:58:9a:e7:62:fd: df:bd:f0:8d:16:66:8c:21:0a:ae:d8:67:f5:54:55:e2:02:de: 4a:8b:7d:b9:53:b4:ac:62:e0:cf:3d:60:95:6a:4d:67:c7:56: 46:d6:b7:13:b8:ca:8e:87:46:67:9c:cc:63:ee:97:d2:62:6a: 50:d5:01:b2:37:85:40:8b:08:dc:f6:13:84:26:b3:d2:ae:80: a4:9f:91:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuF0OMhe2R2ZBrD2aOl/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjliYzJkZTM2Y2YyM2I2ODlmM2M3MmU4MGFiY2ZlNDgy MDI2YzEwHhcNMjUxMjEyMDQwMTE2WhcNMjUxMjEzMDQwMTE2WjAzMTEwLwYDVQQD Eyg1OTA5ZDRmNjY0MzU2MDY5OWYzYzBlODExZDUyMmM3N2FlNjQ1YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhL55CSRTybq51iHCTCmR5yR2Cnb T/zghljs+OJb+6+GM6VubMBcmPAk3ZXxN9NE3Bj0odp6nM/lIY0fkMnGQWuzdrM9 1Nlxu9ydGZrS5bkOhBgqVVJbQ8S7x5cxcC7NvnmF5ckAIQR5m712xEX2nxvIR0DS RQnfI3kqSPM7n6LwiOh42wM7TBqWceSYO2B5mruo9EO1j63dEu1+vxXo47FQ9dOE QJi97eaXBNkV2+b7IDdWBH2t+uuBF6TnR+ENdMaUYdKbzfJSkJRtCI/lR5p3zSL7 szMk6atIB0Vz9AnnU3FwFe3mcmpglS9ebg04ZETqb1aWzt+tbMPxRp/PJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkJ1PZkNWBpnzwOgR1SLHeuZFwFMB8GA1UdIwQY MBaAFNu5vC3jbPI7aJ88cugKvP5IICbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdtOExlTnM4anRvbnp4eTZBcThfa2dnSnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYmMyZTQtNDAyZi00N2MxLTliMjgt MTRmMjFhZTIxZWQzLzEvMjdtOExlTnM4anRvbnp4eTZBcThfa2dnSnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lYmMyZTQtNDAyZi00N2MxLTliMjgtMTRmMjFhZTIxZWQz LzEvMjdtOExlTnM4anRvbnp4eTZBcThfa2dnSnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUeGPRsi QWuTC376zq1K0iva8xviMMPf2Q/Pk8/gYyqJttglMy5bCnnF9s4LLJWkaiqqkCk7 EMoDY8FUoZKG6gbwk5Jc3Hn+ollNt9kzOIRr5yyArprN8BwqAyyOBbyoyqEvgQsO k+6NJshrFDrQn1x99rEAbuDok4UqrQqhvruF+84l0txKwfKzs1s4FOvwzhHnKjL0 No1pjBvyGFU+BO7E7swKO+mpn1p+fQVAClia52L9373wjRZmjCEKrthn9VRV4gLe Sot9uVO0rGLgzz1glWpNZ8dWRta3E7jKjodGZ5zMY+6X0mJqUNUBsjeFQIsI3PYT hCaz0q6ApJ+RWA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:41:15 2025 by rpki-client