This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json) Hash identifier: NPRCQBuk7aplCZM8zujHL0q7bqWCi6OIiSAVVJwsCsE= Subject key identifier: D0:14:DE:92:C5:0F:CE:19:03:0B:7B:F3:01:68:4C:D3:C0:51:A5:E4 Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Certificate serial: 019B397DA99B5AC82848A8729066F0477736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 02:01:35 +0000 Manifest this update: Sat 20 Dec 2025 02:01:35 +0000 Manifest next update: Sun 21 Dec 2025 02:01:35 +0000 Files and hashes: 1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: PL/j8bwrhpzhyiDGu88t7HE9o0cNUtnXxhbmYVIxmnY=) 2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:a9:9b:5a:c8:28:48:a8:72:90:66:f0:47:77:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Validity Not Before: Dec 20 02:01:35 2025 GMT Not After : Dec 21 02:01:35 2025 GMT Subject: CN=d014de92c50fce19030b7bf301684cd3c051a5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:a1:69:8a:14:18:32:cc:1b:db:06:79:ca: e0:be:1b:00:d3:0f:0e:0b:16:68:7d:c9:ea:a7:0d: 5a:2d:5f:81:e2:7e:37:4c:09:f3:da:76:fa:17:af: 96:71:5f:f1:3b:c5:ee:11:ce:b6:a7:c0:f6:7f:82: 17:0c:19:0b:5f:6e:aa:b0:9c:00:9b:64:9a:5a:45: e4:20:79:ad:6d:38:ad:14:3d:29:12:22:63:d6:97: 9b:e6:35:a8:ab:1e:09:55:a5:72:0c:21:98:4c:9f: 65:8f:d1:0e:34:14:2c:4c:7d:dd:da:c8:45:db:e9: 59:ca:99:96:dd:df:ab:c7:5b:7b:37:c4:a4:27:eb: 42:18:06:c9:5f:e4:97:07:9b:d5:f2:86:d9:1d:76: d9:f6:dd:90:0e:0d:da:8b:94:49:8e:ab:e5:41:be: b7:f5:9b:5f:1e:8e:d6:9d:f8:8f:9c:e9:04:8b:a8: 48:b3:de:42:4a:b8:6c:b7:3a:78:85:6e:7c:4a:c2: fa:56:b2:a5:3b:c3:43:97:50:b8:c9:86:f2:ae:eb: 06:18:95:e6:a7:c7:54:0e:07:ff:af:db:18:7e:b7: 92:cb:dd:17:16:a9:a9:b4:b9:11:9d:b7:69:49:bf: 76:10:16:07:d6:38:55:68:55:bb:0d:33:79:90:62: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:14:DE:92:C5:0F:CE:19:03:0B:7B:F3:01:68:4C:D3:C0:51:A5:E4 X509v3 Authority Key Identifier: keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c8:9c:2f:15:31:7e:1c:e7:f3:68:a4:fa:8a:0a:92:76:c9: 19:8e:16:7f:03:e7:e5:cd:94:f5:58:38:47:a7:a0:37:d0:5f: fb:1a:ec:fe:a9:27:36:63:f3:c8:06:72:ce:5c:a1:99:dd:ff: fb:92:7c:f9:ae:fd:d0:8f:2b:d5:10:0a:fa:6f:70:7f:ee:ed: 67:df:9b:0f:a0:93:01:5b:59:0d:e9:4d:27:a5:72:f7:84:a7: 7d:85:98:47:df:a2:5d:e5:52:ea:27:01:51:d5:73:07:49:ae: a4:30:d5:c5:6c:a0:37:39:ca:33:b6:53:57:b0:e7:a2:18:bd: c9:f4:2c:39:32:0b:9f:ec:0e:76:6e:65:fe:f6:a7:db:6d:a5: f9:3c:8d:3b:c5:ca:4c:da:7a:4c:41:b1:ba:0f:8d:da:59:01: ce:4e:10:b8:46:02:3b:e1:47:56:b8:9b:96:96:a2:19:57:73: 40:89:b2:02:c9:fc:89:ee:fd:f8:b5:a8:86:8c:26:d6:15:a3: 89:18:30:fa:25:99:a6:e1:fd:09:26:85:60:5e:29:10:74:4a: 85:b4:d6:a8:84:1e:9a:86:4d:3f:9d:f9:cd:72:ea:b9:60:e2: 13:01:3f:53:59:29:71:99:1d:1c:fe:ff:4e:62:75:d8:78:d9: 90:d6:63:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fambWsgoSKhykGbwR3c2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl YTlmODgwHhcNMjUxMjIwMDIwMTM1WhcNMjUxMjIxMDIwMTM1WjAzMTEwLwYDVQQD EyhkMDE0ZGU5MmM1MGZjZTE5MDMwYjdiZjMwMTY4NGNkM2MwNTFhNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JOhaYoUGDLMG9sGecrgvhsA0w8O CxZofcnqpw1aLV+B4n43TAnz2nb6F6+WcV/xO8XuEc62p8D2f4IXDBkLX26qsJwA m2SaWkXkIHmtbTitFD0pEiJj1peb5jWoqx4JVaVyDCGYTJ9lj9EONBQsTH3d2shF 2+lZypmW3d+rx1t7N8SkJ+tCGAbJX+SXB5vV8obZHXbZ9t2QDg3ai5RJjqvlQb63 9ZtfHo7WnfiPnOkEi6hIs95CSrhstzp4hW58SsL6VrKlO8NDl1C4yYbyrusGGJXm p8dUDgf/r9sYfreSy90XFqmptLkRnbdpSb92EBYH1jhVaFW7DTN5kGIbXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAU3pLFD84ZAwt78wFoTNPAUaXkMB8GA1UdIwQY MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8icLxUx fhzn82ik+ooKknbJGY4WfwPn5c2U9Vg4R6egN9Bf+xrs/qknNmPzyAZyzlyhmd3/ +5J8+a790I8r1RAK+m9wf+7tZ9+bD6CTAVtZDelNJ6Vy94SnfYWYR9+iXeVS6icB UdVzB0mupDDVxWygNznKM7ZTV7Dnohi9yfQsOTILn+wOdm5l/van222l+TyNO8XK TNp6TEGxug+N2lkBzk4QuEYCO+FHVriblpaiGVdzQImyAsn8ie79+LWohowm1hWj iRgw+iWZpuH9CSaFYF4pEHRKhbTWqIQemoZNP535zXLquWDiEwE/U1kpcZkdHP7/ TmJ12HjZkNZj+w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:24 2025 by rpki-client