This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json) Hash identifier: T1XCfAh1HRKoTk8vLH86DHGc8t7en1B9ZlC4YTFL9r4= Subject key identifier: B0:A5:59:FF:38:51:A9:41:94:2E:A0:9B:75:43:D1:70:82:5B:F7:3B Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Certificate serial: 019B0F00417F002EE510AFFD871D3E7A1E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 20:00:33 +0000 Manifest this update: Thu 11 Dec 2025 20:00:33 +0000 Manifest next update: Fri 12 Dec 2025 20:00:33 +0000 Files and hashes: 1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: nZbNhJr+/YS2g3/HPWEXNtXa9+SZ3s34vfLMe/Op+Us=) 2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:41:7f:00:2e:e5:10:af:fd:87:1d:3e:7a:1e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Validity Not Before: Dec 11 20:00:33 2025 GMT Not After : Dec 12 20:00:33 2025 GMT Subject: CN=b0a559ff3851a941942ea09b7543d170825bf73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:79:e1:c3:e0:80:65:5a:96:95:39:9d:b3: 3e:c0:05:97:28:03:24:05:f1:1d:7f:a9:1c:d6:a2: 19:64:8b:ca:de:46:cb:20:d8:cd:d4:69:08:3d:04: 92:ae:27:f1:13:5a:c0:9b:f4:6e:89:e3:59:1c:54: 56:18:21:2e:b9:ab:a7:d8:ce:02:63:9c:e2:b8:04: 0c:9e:78:01:c9:32:8b:3b:c4:e8:f8:ec:59:93:6a: 3b:53:df:e6:4d:0c:7c:2e:63:b6:6d:72:6a:43:11: 2f:e5:1b:e0:8e:b1:1c:3e:fd:5f:1c:24:26:ac:6c: 63:8b:f6:c2:42:5a:b8:a5:42:c3:9b:9c:22:53:8b: 4c:7e:e0:d3:c8:81:80:c8:6b:45:82:64:46:66:ac: 4b:11:c1:f6:40:ab:97:68:df:69:6a:9a:78:fc:88: 02:e0:dd:6e:49:3f:fe:32:c6:f4:90:71:cb:f5:d2: 25:95:bf:7e:7a:cf:34:88:b3:7c:50:cc:6a:4a:6f: ad:85:8d:e7:99:dd:c0:43:c5:dd:65:8b:bd:79:ee: c0:0b:94:51:1a:40:25:7b:89:bb:2b:f1:3a:5d:de: db:ae:9c:c9:ce:90:fb:b6:50:b9:35:41:20:cc:5a: 6b:dc:5a:9a:75:09:63:69:4d:62:f8:d5:92:b7:a6: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A5:59:FF:38:51:A9:41:94:2E:A0:9B:75:43:D1:70:82:5B:F7:3B X509v3 Authority Key Identifier: keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ed:80:ee:2b:70:da:d4:f7:b9:65:b4:91:44:ef:56:28:1c: 7e:ca:7b:6c:4b:3c:28:81:b1:15:ce:9c:2e:19:ca:3d:64:81: 52:17:de:17:9d:54:f5:da:77:92:f7:ab:56:44:ae:f1:d9:e1: 5b:7a:79:4f:b0:d2:5e:37:ea:ca:41:b4:7c:f8:3a:a5:82:55: d7:e1:68:64:b0:2a:57:64:48:49:9e:02:59:5e:e6:da:4c:b0: d3:e8:88:6b:a7:4d:77:3f:73:17:d0:0d:c1:6c:6f:3e:ce:e1: ff:54:f1:9e:9f:04:dd:e8:27:51:3d:d3:b8:cf:ca:e4:cf:b8: 5d:c8:e0:fb:12:09:2a:dc:ce:aa:48:b6:a6:26:46:cd:65:f2: 37:90:46:8e:b0:51:0e:25:f8:b0:27:75:2f:d1:29:75:14:ab: 98:e9:f3:ee:72:ac:f2:fb:f2:d6:85:d3:04:e1:7e:b4:23:ed: a4:d1:4e:6e:b2:d4:ec:af:e0:b6:73:dd:0d:92:5f:75:3d:1b: 8e:b5:ed:0a:31:70:71:0c:7f:d4:f7:c9:1c:84:8d:85:3b:ac: f4:25:11:e2:34:68:80:82:54:58:a1:d2:be:31:cf:e7:e3:6c: ee:ba:b0:47:29:68:81:83:fe:80:fb:b3:33:39:fb:f3:17:1f: 77:a0:70:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAEF/AC7lEK/9hx0+eh5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl YTlmODgwHhcNMjUxMjExMjAwMDMzWhcNMjUxMjEyMjAwMDMzWjAzMTEwLwYDVQQD EyhiMGE1NTlmZjM4NTFhOTQxOTQyZWEwOWI3NTQzZDE3MDgyNWJmNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAN54cPggGValpU5nbM+wAWXKAMk BfEdf6kc1qIZZIvK3kbLINjN1GkIPQSSrifxE1rAm/RuieNZHFRWGCEuuaun2M4C Y5ziuAQMnngByTKLO8To+OxZk2o7U9/mTQx8LmO2bXJqQxEv5RvgjrEcPv1fHCQm rGxji/bCQlq4pULDm5wiU4tMfuDTyIGAyGtFgmRGZqxLEcH2QKuXaN9papp4/IgC 4N1uST/+Msb0kHHL9dIllb9+es80iLN8UMxqSm+thY3nmd3AQ8XdZYu9ee7AC5RR GkAle4m7K/E6Xd7brpzJzpD7tlC5NUEgzFpr3FqadQljaU1i+NWSt6ZspwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLClWf84UalBlC6gm3VD0XCCW/c7MB8GA1UdIwQY MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO2A7itw 2tT3uWW0kUTvVigcfsp7bEs8KIGxFc6cLhnKPWSBUhfeF51U9dp3kverVkSu8dnh W3p5T7DSXjfqykG0fPg6pYJV1+FoZLAqV2RISZ4CWV7m2kyw0+iIa6dNdz9zF9AN wWxvPs7h/1Txnp8E3egnUT3TuM/K5M+4Xcjg+xIJKtzOqki2piZGzWXyN5BGjrBR DiX4sCd1L9EpdRSrmOnz7nKs8vvy1oXTBOF+tCPtpNFObrLU7K/gtnPdDZJfdT0b jrXtCjFwcQx/1PfJHISNhTus9CUR4jRogIJUWKHSvjHP5+Ns7rqwRylogYP+gPuz Mzn78xcfd6BwRw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:50 2025 by rpki-client