This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json) Hash identifier: Mz2Bw8Jnb2s4TGa+gRvL4ArIZ9hFetLV07BBwpJb3Ck= Subject key identifier: 52:84:7E:27:28:9A:24:9A:AB:FC:75:B7:48:4B:4B:C7:C5:05:E1:E8 Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Certificate serial: 019B255236B1CE4DEB27986A1C5017D63769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 04:01:43 +0000 Manifest this update: Tue 16 Dec 2025 04:01:43 +0000 Manifest next update: Wed 17 Dec 2025 04:01:43 +0000 Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: SRRcr5bPeO137ln2/kXTllvP5F3bruMK6lIFpEFDRLU=) 2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=) 3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:36:b1:ce:4d:eb:27:98:6a:1c:50:17:d6:37:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Validity Not Before: Dec 16 04:01:43 2025 GMT Not After : Dec 17 04:01:43 2025 GMT Subject: CN=52847e27289a249aabfc75b7484b4bc7c505e1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:61:bf:81:b1:d6:d5:a6:a4:a4:08:83:34: 70:14:f3:da:49:9f:33:ed:59:bf:08:c2:38:3d:8b: 10:d4:7b:ea:7c:cd:d8:a6:d8:45:fa:69:b5:82:80: f0:a4:4c:90:70:fb:49:d6:dc:eb:26:52:60:e7:91: f8:58:48:30:7b:88:0e:bc:cf:82:2e:c1:01:76:7a: 03:91:d9:00:c1:6d:d3:7b:94:0c:4e:cc:61:c1:02: 4d:d5:ca:3b:c3:67:16:48:08:bd:3f:0c:99:36:28: 80:37:c7:14:67:a9:31:a7:e6:91:83:5e:3a:d4:6b: 60:44:69:06:fb:aa:cb:ab:88:b0:7b:01:76:6b:af: 41:4a:db:87:04:72:a2:77:d2:0e:b5:8e:c7:3d:6d: 80:1f:a5:89:c2:b4:8f:55:86:af:52:1a:dc:9f:c4: 5b:d9:79:53:b6:76:52:45:b1:65:8c:c5:c4:57:4a: e1:3a:18:fa:7f:03:44:2b:5f:c5:c9:22:31:e1:1a: 31:93:84:14:2f:84:0b:7d:8e:9d:92:11:8c:7e:a6: 7f:4d:6a:3a:76:dd:87:17:eb:cb:c0:28:db:18:6f: f5:82:fe:7a:68:33:68:f6:e8:08:67:17:0b:14:8b: 90:a0:20:4f:92:29:31:bc:d0:a2:5a:7f:3c:95:fa: 33:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:7E:27:28:9A:24:9A:AB:FC:75:B7:48:4B:4B:C7:C5:05:E1:E8 X509v3 Authority Key Identifier: keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4e:e8:09:4f:f3:06:16:55:ce:3a:d4:cb:fd:69:5e:5b:10: 69:00:ea:8c:f9:45:3c:95:5a:a6:98:e0:d2:bf:c1:78:7b:f6: fb:d6:3c:9b:db:0a:ab:36:5a:cb:75:fb:33:2b:c8:c5:cb:03: 06:15:4f:f1:df:c5:e0:4a:9d:15:8a:28:8a:20:da:0a:31:a3: 95:fd:3c:80:11:a8:b2:1b:c5:8e:0f:c2:9f:f2:02:64:fc:81: 77:60:88:67:ce:d0:05:ca:17:cd:cb:6a:33:17:db:8a:10:b5: c0:37:d5:87:f7:73:ae:81:58:1d:aa:53:38:9d:d2:9e:cc:6a: 64:4b:ac:c1:18:89:d7:08:fd:8a:3d:a8:5e:4a:e6:1e:2f:dd: cd:d3:f3:e6:1a:29:36:af:49:6f:96:5e:db:9e:58:6c:eb:75: 49:1c:36:cd:97:23:8d:9e:e4:87:b6:95:17:e6:42:4b:34:28: 44:a9:d0:fc:78:43:ef:4b:8e:c0:76:90:a7:36:e4:34:a1:69: 3f:3d:94:2c:ff:2b:2c:0d:ff:34:81:fe:dc:d3:15:6e:93:36: c3:17:9e:90:2f:0c:f7:d1:60:55:26:0d:8d:d2:d3:12:e3:27: 00:e2:00:41:60:96:ba:f1:b7:9a:10:32:b1:7f:1f:db:f1:9d: 95:46:f4:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUjaxzk3rJ5hqHFAX1jdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjY1M2JiZDE3MDRjNDdiYWRhNjJhYjZjZTM1MDIzMDdm MjQ0YjYwHhcNMjUxMjE2MDQwMTQzWhcNMjUxMjE3MDQwMTQzWjAzMTEwLwYDVQQD Eyg1Mjg0N2UyNzI4OWEyNDlhYWJmYzc1Yjc0ODRiNGJjN2M1MDVlMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1hv4Gx1tWmpKQIgzRwFPPaSZ8z 7Vm/CMI4PYsQ1HvqfM3YpthF+mm1goDwpEyQcPtJ1tzrJlJg55H4WEgwe4gOvM+C LsEBdnoDkdkAwW3Te5QMTsxhwQJN1co7w2cWSAi9PwyZNiiAN8cUZ6kxp+aRg146 1GtgRGkG+6rLq4iwewF2a69BStuHBHKid9IOtY7HPW2AH6WJwrSPVYavUhrcn8Rb 2XlTtnZSRbFljMXEV0rhOhj6fwNEK1/FySIx4Roxk4QUL4QLfY6dkhGMfqZ/TWo6 dt2HF+vLwCjbGG/1gv56aDNo9ugIZxcLFIuQoCBPkikxvNCiWn88lfozPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKEficomiSaq/x1t0hLS8fFBeHoMB8GA1UdIwQY MBaAFNu2U7vRcExHutpiq2zjUCMH8kS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5Mjkt YTk4MGJlZDMzYWIwLzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5MjktYTk4MGJlZDMzYWIw LzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA07oCU/z BhZVzjrUy/1pXlsQaQDqjPlFPJVappjg0r/BeHv2+9Y8m9sKqzZay3X7MyvIxcsD BhVP8d/F4EqdFYooiiDaCjGjlf08gBGoshvFjg/Cn/ICZPyBd2CIZ87QBcoXzctq MxfbihC1wDfVh/dzroFYHapTOJ3SnsxqZEuswRiJ1wj9ij2oXkrmHi/dzdPz5hop Nq9Jb5Ze255YbOt1SRw2zZcjjZ7kh7aVF+ZCSzQoRKnQ/HhD70uOwHaQpzbkNKFp Pz2ULP8rLA3/NIH+3NMVbpM2wxeekC8M99FgVSYNjdLTEuMnAOIAQWCWuvG3mhAy sX8f2/GdlUb01A== -----END CERTIFICATE-----Generated at Tue Dec 16 06:27:44 2025 by rpki-client