This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft File: w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json) Hash identifier: KOYfo4235Yw5amU1JUTwBotXlZjSBPdsyeqwMw5nCLo= Subject key identifier: EF:35:F8:91:AF:66:0F:18:A6:9C:64:0D:06:CF:E9:E7:A2:36:0D:0B Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13 Certificate issuer: /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113 Certificate serial: 019B424A4924D238F1437DE0804A094474CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft Manifest number: 023F Signing time: Sun 21 Dec 2025 19:02:03 +0000 Manifest this update: Sun 21 Dec 2025 19:02:03 +0000 Manifest next update: Mon 22 Dec 2025 19:02:03 +0000 Files and hashes: 1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: hohUm52Zp6TGiKeFzpd2EtrPhTs1AP7DzeDdi+N0L80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:49:24:d2:38:f1:43:7d:e0:80:4a:09:44:74:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113 Validity Not Before: Dec 21 19:02:03 2025 GMT Not After : Dec 22 19:02:03 2025 GMT Subject: CN=ef35f891af660f18a69c640d06cfe9e7a2360d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:9c:fd:6e:d5:2d:50:b0:4e:ea:47:65:6a: ba:a0:ec:e7:eb:97:cc:52:0b:7b:da:e5:76:86:ff: ca:3c:2b:93:48:3f:f6:d2:b8:ee:8b:21:fb:41:00: fa:39:76:3a:b5:f8:10:f2:d6:51:dd:b3:05:f1:97: 11:17:59:eb:f8:84:c4:d1:e5:2f:8e:ee:dd:8e:78: 03:77:eb:df:3b:1b:94:41:9b:9c:e8:30:b5:99:09: 7c:a8:fc:fd:32:1a:e0:b4:fe:f7:74:23:b7:f1:cd: e5:c8:3b:5e:02:1b:2c:01:cd:ae:74:4c:27:f5:a0: a4:c8:ff:e5:e4:e2:49:7f:a3:3e:43:7e:42:a8:33: a2:d7:a7:64:ce:f1:6f:26:05:f8:c4:d7:dc:16:ab: 19:be:8f:6c:b6:52:13:4c:7f:af:f0:ec:28:69:54: c5:38:29:d5:4f:3e:41:02:e3:44:9b:13:28:98:cd: 4b:4f:e5:68:8a:0a:0f:bd:44:b0:b7:bd:cf:3c:cc: 62:64:6c:a3:b3:16:24:eb:87:34:ad:15:fa:9f:85: 00:ce:72:32:7e:13:07:a6:e2:b1:42:cb:51:a4:49: b1:fa:ca:1e:ce:30:46:34:31:37:17:b7:9f:91:09: 82:e6:73:37:f6:f4:e6:51:f3:00:25:de:84:c5:1c: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:35:F8:91:AF:66:0F:18:A6:9C:64:0D:06:CF:E9:E7:A2:36:0D:0B X509v3 Authority Key Identifier: keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e1:c9:be:90:42:bf:a0:ec:ca:ba:13:a9:c5:77:04:4a:39: 1d:ec:4c:99:48:b7:8a:3f:43:58:b7:67:3a:8b:f2:13:f6:a9: 9f:ab:ac:ac:35:97:2a:b1:92:62:98:ab:f0:9c:23:80:6b:7d: 1f:c7:0a:7e:81:a3:ba:46:ef:e2:15:5f:49:6e:83:47:f3:94: 4c:7e:68:95:84:89:5a:ca:b9:12:c9:22:06:f8:56:8c:89:7b: af:3f:8e:d5:b0:56:7d:68:d3:37:d6:e0:c3:24:ce:e5:07:8d: 59:47:9e:ed:05:8e:49:37:9c:25:3b:0e:05:93:39:a8:f7:3d: aa:27:89:c7:17:3f:ac:22:ea:f3:7d:e1:86:9a:4b:a3:34:ce: c7:c6:19:e1:1b:b8:4e:40:ba:a3:b4:77:d4:bd:18:07:3d:6e: 85:4b:83:b5:46:02:77:78:24:5c:2b:45:ed:89:80:68:66:58: 22:04:ce:92:3f:88:67:d8:ec:cf:e6:d8:98:89:07:2d:e2:70: 77:bd:1d:d3:6a:ed:18:07:26:88:37:76:8e:05:ec:4e:25:1f: cd:26:d4:59:3c:23:c4:37:90:a2:91:5d:d6:99:60:eb:ad:0b: 24:24:a4:63:e3:f7:8e:b5:84:1e:98:ed:11:ee:3b:67:78:73: 2a:46:b3:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSkkk0jjxQ33ggEoJRHTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNmVkMTUxMjdiZmNiMGJjZDdhNjM4NjhiNDk5YzkzY2Iz MzUxMTMwHhcNMjUxMjIxMTkwMjAzWhcNMjUxMjIyMTkwMjAzWjAzMTEwLwYDVQQD EyhlZjM1Zjg5MWFmNjYwZjE4YTY5YzY0MGQwNmNmZTllN2EyMzYwZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Wc/W7VLVCwTupHZWq6oOzn65fM Ugt72uV2hv/KPCuTSD/20rjuiyH7QQD6OXY6tfgQ8tZR3bMF8ZcRF1nr+ITE0eUv ju7djngDd+vfOxuUQZuc6DC1mQl8qPz9MhrgtP73dCO38c3lyDteAhssAc2udEwn 9aCkyP/l5OJJf6M+Q35CqDOi16dkzvFvJgX4xNfcFqsZvo9stlITTH+v8OwoaVTF OCnVTz5BAuNEmxMomM1LT+VoigoPvUSwt73PPMxiZGyjsxYk64c0rRX6n4UAznIy fhMHpuKxQstRpEmx+soezjBGNDE3F7efkQmC5nM39vTmUfMAJd6ExRzKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO81+JGvZg8YppxkDQbP6eeiNg0LMB8GA1UdIwQY MBaAFMNu0VEnv8sLzXpjhotJnJPLM1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzIt MjY5YTZiODIzYjdlLzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzItMjY5YTZiODIzYjdl LzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeHJvpBC v6DsyroTqcV3BEo5HexMmUi3ij9DWLdnOovyE/apn6usrDWXKrGSYpir8JwjgGt9 H8cKfoGjukbv4hVfSW6DR/OUTH5olYSJWsq5EskiBvhWjIl7rz+O1bBWfWjTN9bg wyTO5QeNWUee7QWOSTecJTsOBZM5qPc9qieJxxc/rCLq833hhppLozTOx8YZ4Ru4 TkC6o7R31L0YBz1uhUuDtUYCd3gkXCtF7YmAaGZYIgTOkj+IZ9jsz+bYmIkHLeJw d70d02rtGAcmiDd2jgXsTiUfzSbUWTwjxDeQopFd1plg660LJCSkY+P3jrWEHpjt Ee47Z3hzKkazPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:47 2025 by rpki-client