This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json) Hash identifier: 1oi55Pa0HqfkfneAXTw/460orHNhDS3TaLzp/yrQFag= Subject key identifier: 6D:5E:5A:24:B9:4C:DA:EA:8F:F9:8A:FA:3E:61:8C:BB:21:8E:2C:18 Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71 Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971 Certificate serial: 019B38337A1B588910B25D68F203C8E2BDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft Manifest number: 036D Signing time: Fri 19 Dec 2025 20:00:56 +0000 Manifest this update: Fri 19 Dec 2025 20:00:56 +0000 Manifest next update: Sat 20 Dec 2025 20:00:56 +0000 Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: IFjzRshikHf/ic0zCbK5xau3aNkl72fD94iS0q2n8zY=) 2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:7a:1b:58:89:10:b2:5d:68:f2:03:c8:e2:bd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971 Validity Not Before: Dec 19 20:00:56 2025 GMT Not After : Dec 20 20:00:56 2025 GMT Subject: CN=6d5e5a24b94cdaea8ff98afa3e618cbb218e2c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:bd:fb:d6:50:d6:c7:e5:01:69:04:a4:f0: 46:ab:57:2b:4a:85:86:71:0e:ca:b7:a6:99:ec:92: 20:a2:48:c6:c7:d0:3a:62:0d:7a:73:35:0b:b7:7f: 3c:c5:7f:d9:f3:0e:3f:63:c1:2c:7b:13:bd:df:db: 10:46:42:12:49:25:04:57:dd:80:6b:ac:79:c4:70: de:7d:fc:65:f6:24:8f:44:9a:13:d7:1c:aa:0c:48: 18:35:d9:1e:26:17:43:85:a4:4e:46:32:a2:6c:2a: 33:52:73:d1:68:90:9f:db:f5:b7:41:d8:29:6c:2c: a0:d3:b5:1c:ae:ad:e8:43:65:1b:ea:0b:44:80:e4: 9f:3d:73:85:86:6f:a4:1b:84:2e:15:24:f2:dc:d0: 3a:c2:84:4e:92:ea:37:18:42:e9:47:51:fe:4f:c0: dd:22:03:69:46:92:19:a2:d4:0a:9b:54:1d:72:cc: a9:87:2a:27:ba:f2:55:30:aa:aa:ca:12:50:f7:96: e8:68:4d:99:e5:b0:6b:7c:f7:6b:88:aa:4b:e9:70: 82:d0:94:05:ca:26:0f:2a:91:26:c3:89:e5:9b:1b: f7:2f:20:1b:05:07:0a:66:d6:99:ff:6d:d1:47:61: d8:ee:72:aa:0f:c6:90:0d:1f:e8:c1:eb:8a:d5:a4: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5E:5A:24:B9:4C:DA:EA:8F:F9:8A:FA:3E:61:8C:BB:21:8E:2C:18 X509v3 Authority Key Identifier: keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:ee:77:8d:27:18:d0:d2:90:46:10:c0:14:e3:b3:b1:6c:04: 53:aa:38:16:b8:0a:de:90:b8:1a:ef:f4:ec:2e:fa:01:4d:91: 33:80:fa:45:ef:16:12:94:03:7a:64:74:69:c1:51:11:32:fe: eb:82:e7:95:6e:ae:5b:3e:a0:c6:a3:c4:97:4d:02:4a:84:c8: c6:1b:cb:d7:c5:fb:2b:6f:8e:6f:4a:cf:46:6f:e4:ce:3b:42: 3b:41:dd:42:4f:3d:f0:dd:b7:04:ca:2e:36:59:03:02:59:01: 90:ac:5d:7a:0d:c7:b5:92:44:2b:3b:66:3b:01:b9:c5:4d:a6: 7c:a7:75:72:f5:f2:7d:95:c6:69:dd:b8:02:2b:ea:b1:7d:7a: d5:32:bc:38:90:89:10:8d:90:d5:a9:6f:b2:76:01:a2:b5:d1: 6b:3b:4a:64:b6:18:84:44:68:60:4d:c4:6b:1b:d3:37:eb:5b: e6:ee:c5:af:41:53:62:aa:1a:c9:0c:a9:c8:2f:f4:0e:80:ae: 68:5e:c1:48:58:ee:d8:14:fe:ab:a5:39:37:2a:51:b1:55:51: bc:4b:33:e9:da:37:4a:d5:4f:a2:be:31:c9:81:5b:98:82:4f: 52:36:b0:14:7b:6f:3e:3b:ff:31:fa:7d:ef:95:e1:75:66:da: 12:3d:ce:a4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs4M3obWIkQsl1o8gPI4r3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNmVmZWQyYTI0YWMxMjBlZDI2YWU5MmFlNDg1ODFiNzdk MjQ5NzEwHhcNMjUxMjE5MjAwMDU2WhcNMjUxMjIwMjAwMDU2WjAzMTEwLwYDVQQD Eyg2ZDVlNWEyNGI5NGNkYWVhOGZmOThhZmEzZTYxOGNiYjIxOGUyYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt529+9ZQ1sflAWkEpPBGq1crSoWG cQ7Kt6aZ7JIgokjGx9A6Yg16czULt388xX/Z8w4/Y8EsexO939sQRkISSSUEV92A a6x5xHDeffxl9iSPRJoT1xyqDEgYNdkeJhdDhaRORjKibCozUnPRaJCf2/W3Qdgp bCyg07Ucrq3oQ2Ub6gtEgOSfPXOFhm+kG4QuFSTy3NA6woROkuo3GELpR1H+T8Dd IgNpRpIZotQKm1QdcsyphyonuvJVMKqqyhJQ95boaE2Z5bBrfPdriKpL6XCC0JQF yiYPKpEmw4nlmxv3LyAbBQcKZtaZ/23RR2HY7nKqD8aQDR/oweuK1aT9swIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG1eWiS5TNrqj/mK+j5hjLshjiwYMB8GA1UdIwQY MBaAFPtu/tKiSsEg7Saukq5IWBt30klxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0yNy0wcUpLd1NEdEpxNlNya2hZRzNmU1NYRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjU0NWE0LTIyZmEtNDUxYy04N2Fm LTYyZjMxNmQwN2Q3MC8xLzEtMjctMHFKS3dTRHRKcTZTcmtoWUczZlNTWEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JhL2Y1NDVhNC0yMmZhLTQ1MWMtODdhZi02MmYzMTZkMDdk NzAvMS8xLTI3LTBxSkt3U0R0SnE2U3JraFlHM2ZTU1hFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7u53 jScY0NKQRhDAFOOzsWwEU6o4FrgK3pC4Gu/07C76AU2RM4D6Re8WEpQDemR0acFR ETL+64LnlW6uWz6gxqPEl00CSoTIxhvL18X7K2+Ob0rPRm/kzjtCO0HdQk898N23 BMouNlkDAlkBkKxdeg3HtZJEKztmOwG5xU2mfKd1cvXyfZXGad24AivqsX161TK8 OJCJEI2Q1alvsnYBorXRaztKZLYYhERoYE3EaxvTN+tb5u7Fr0FTYqoayQypyC/0 DoCuaF7BSFju2BT+q6U5NypRsVVRvEsz6do3StVPor4xyYFbmIJPUjawFHtvPjv/ Mfp975XhdWbaEj3OpA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:10 2025 by rpki-client